Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json)
Hash identifier: QVk8YM9qwL541LZv7L6OemvaYU4iq7z3dVTdX7FonpE=
Subject key identifier: 49:3A:7C:BF:B1:81:2F:6C:D1:BC:1E:09:03:D5:67:4A:8E:14:21:5C
Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Certificate serial: 0195121087D9D82835B6328FF176D926D32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
Manifest number: 1212
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: hXhHciPuUXLHilhiqSyT75Wc7/OfKgk7QfY7IEQdNSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:87:d9:d8:28:35:b6:32:8f:f1:76:d9:26:d3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=493a7cbfb1812f6cd1bc1e0903d5674a8e14215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:55:71:b0:ce:3a:e9:5f:4e:88:55:84:e4:
5f:e3:8c:70:3e:77:71:7f:b2:a3:5d:a4:ff:44:d6:
2e:0d:f4:3d:44:57:ec:0e:d6:f4:e6:ca:24:fe:24:
18:23:a4:bc:de:18:82:52:30:b7:69:26:aa:4e:61:
4f:8e:21:32:70:48:55:46:c2:a6:d9:52:53:43:2a:
6d:e3:36:c3:77:53:bc:be:3e:f6:15:35:04:5c:2b:
c6:cd:84:74:0d:cd:0c:ac:94:52:e7:c6:b2:d6:94:
c2:1b:1d:a7:a0:da:91:67:23:77:66:88:f5:07:09:
6c:51:a3:c2:63:a8:07:93:cb:67:17:df:52:9c:0f:
7b:ba:81:a5:83:35:7e:8b:dc:f2:ab:a2:32:d5:84:
06:79:e2:a5:38:f8:22:09:66:c0:cd:44:be:d7:9f:
11:ea:47:de:15:67:89:36:42:f6:97:fa:f8:7c:e2:
11:34:3d:0c:f2:16:67:e3:97:03:41:3a:7b:4c:0f:
39:18:c8:ff:60:1c:91:85:a2:00:8f:95:67:e8:9e:
8b:f7:59:43:3f:6c:c0:23:5f:d7:d6:e7:3a:7b:5a:
67:42:5a:ec:3e:c9:f0:f3:d5:fa:0d:45:19:90:d2:
82:fa:fc:ca:1a:b2:ef:42:57:fb:6d:0a:af:f1:02:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:7C:BF:B1:81:2F:6C:D1:BC:1E:09:03:D5:67:4A:8E:14:21:5C
X509v3 Authority Key Identifier:
keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:18:09:d7:95:21:f1:3e:db:c3:4d:33:39:c7:4e:07:b0:a0:
a9:06:f3:ae:e6:7e:4d:45:6d:fd:2e:6c:f5:3c:62:30:7a:4a:
9c:3f:5b:8c:ff:95:a9:5f:74:93:d8:40:64:10:51:d9:eb:2d:
dd:bf:c3:0f:de:bd:81:07:1c:84:bb:ac:d0:eb:e0:7d:f7:c7:
e7:ba:87:d7:12:11:a8:8a:f9:e2:14:08:51:00:71:a2:23:16:
27:05:c7:73:37:2a:ba:60:b2:c5:ac:54:84:39:eb:82:d3:0f:
44:4e:b7:c5:ff:6e:4e:d3:20:70:b9:cf:f7:36:ca:f8:77:c9:
f0:3f:be:bb:7d:a4:a3:fb:23:10:e2:b0:d2:68:34:4d:e8:3b:
22:ea:8d:12:ec:ff:48:66:7f:89:77:2a:2f:a6:54:e8:b1:5b:
11:2d:c2:8d:94:f1:1b:f8:7e:d2:02:78:39:ac:2a:e2:6b:c8:
9e:eb:8c:f5:4c:25:fd:4c:01:89:29:98:b7:e7:5b:28:7c:19:
c2:c0:3f:24:f3:e5:ea:d6:f4:58:5c:f5:ab:d3:a1:08:2d:29:
8b:54:51:9c:db:ec:26:84:7a:d2:68:a3:70:50:e7:b0:3f:d2:
85:71:51:a8:c3:51:fd:04:ca:ac:57:12:fd:13:fb:99:fc:4f:
81:c9:ae:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:17 2025 by rpki-client