Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
File: _mHZDno6nbbaJtAfLNuiI1G0eXg.mft (raw, json)
Hash identifier: FXlqeE8iw2iZZL1O76A94GS4C5qFd71GIAtXPs/ANZg=
Subject key identifier: 95:67:10:FB:FA:C4:23:99:41:0C:B5:5D:43:71:34:5D:CF:19:E9:37
Authority key identifier: FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
Certificate issuer: /CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Certificate serial: 0194C4630365A89014BB7ADE4456283D076E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
Manifest number: 0766
Signing time: Sun 02 Feb 2025 02:00:10 +0000
Manifest this update: Sun 02 Feb 2025 02:00:10 +0000
Manifest next update: Mon 03 Feb 2025 02:00:10 +0000
Files and hashes: 1: _mHZDno6nbbaJtAfLNuiI1G0eXg.crl (hash: 9J+5sHqjw/PwbAIJY+wSksmfO3cJ8PzNW5mDPP7wneE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:03:65:a8:90:14:bb:7a:de:44:56:28:3d:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe61d90e7a3a9db6da26d01f2cdba22351b47978
Validity
Not Before: Feb 2 02:00:10 2025 GMT
Not After : Feb 3 02:00:10 2025 GMT
Subject: CN=956710fbfac42399410cb55d4371345dcf19e937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:77:43:6e:16:38:bf:30:86:2b:9c:d4:39:
b1:f4:fa:e6:80:b4:68:66:56:a2:03:96:a5:a5:01:
28:a2:df:a7:6e:17:a3:a4:d3:39:95:e8:af:4d:1f:
5f:68:c8:b9:03:b6:24:e3:fc:b3:d1:5c:84:39:d5:
56:11:e8:01:d3:50:a8:2e:e4:2b:d9:01:5d:3a:9b:
41:ae:ae:5e:da:54:cc:ef:32:db:4b:cc:78:68:5f:
c3:5f:a3:cb:11:c5:70:d2:8d:ab:1f:6a:f1:6e:f7:
e0:4e:d8:44:fb:0b:af:46:45:b8:ff:18:1d:6e:c3:
b2:7f:4d:26:81:17:5d:df:ef:4d:7d:49:75:c2:48:
36:49:a2:ab:b0:58:36:9b:56:71:82:6e:63:5c:c5:
82:f0:c4:fa:78:2f:44:ca:89:f5:1b:28:16:e0:22:
47:f9:5d:65:2e:0a:9a:e6:a5:be:d9:92:85:b6:74:
3e:a7:75:78:c0:78:58:18:cb:b1:f1:37:c0:a6:0d:
12:ce:63:3e:cc:22:26:e7:2a:57:13:c3:e2:97:02:
c6:b3:30:b8:45:a2:26:f9:59:d9:f8:9d:8e:28:6c:
59:70:cf:a7:00:0a:cd:73:8a:6d:ef:51:d7:43:58:
14:d2:89:67:de:e3:69:e6:62:dc:40:6a:58:6f:fc:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:10:FB:FA:C4:23:99:41:0C:B5:5D:43:71:34:5D:CF:19:E9:37
X509v3 Authority Key Identifier:
keyid:FE:61:D9:0E:7A:3A:9D:B6:DA:26:D0:1F:2C:DB:A2:23:51:B4:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mHZDno6nbbaJtAfLNuiI1G0eXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/881543-2b29-4487-ba54-610da78be598/1/_mHZDno6nbbaJtAfLNuiI1G0eXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:db:19:89:b8:fc:37:ac:9c:e4:5a:77:b1:86:c3:dc:71:61:
18:85:ed:cd:29:ee:ab:81:2c:8b:eb:a0:92:6a:d7:1b:28:2d:
49:37:da:fa:0e:ed:db:de:f5:f2:e7:96:a4:16:a6:d0:10:89:
aa:12:54:d3:99:50:0f:b6:35:94:a1:60:26:78:74:b5:14:cd:
82:a7:8a:07:10:a2:13:35:da:c0:78:ca:bc:c8:17:bf:02:10:
ac:4d:de:ea:93:57:7d:46:75:72:74:b0:60:16:4d:54:da:15:
23:19:6b:61:5f:6f:ba:4e:88:f6:cb:67:aa:09:b3:2e:3a:e9:
73:ee:69:d4:79:43:68:b8:1d:ab:9c:8e:00:b9:40:3b:0c:7d:
55:8e:52:a9:d2:6e:e8:33:df:8e:df:66:06:07:8d:fd:6d:ad:
a5:95:71:03:73:36:d7:1d:de:98:e3:76:8a:a9:76:2c:78:a6:
0c:2e:0e:ae:6a:5e:12:43:d5:4f:81:3a:a7:c6:2d:27:75:fd:
5d:52:4c:cc:31:cc:c8:7e:d0:97:e4:53:cd:56:7b:68:5e:14:
c8:ae:40:b8:95:66:3e:6d:84:52:8e:d2:8e:ed:77:01:f7:28:
5e:27:6d:15:a9:c1:08:a6:a8:8f:d5:1e:f9:f9:d6:d7:a8:72:
05:07:dc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:49 2025 by rpki-client