Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
File: odFVKaRRyVzNk0rFbsCdUYdQZss.mft (raw, json)
Hash identifier: I8+ebxzKZ8Zc4YpFnnpnTrMU/KMX0lW+e0LS8z9vrAw=
Subject key identifier: D7:91:C3:FA:17:71:F1:CD:F7:85:F7:67:CB:A5:CB:55:56:F7:A6:49
Authority key identifier: A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
Certificate issuer: /CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Certificate serial: 0194C42C7F0664A09F8595B3C88C0EB98770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
Manifest number: 0D
Signing time: Sun 02 Feb 2025 01:00:37 +0000
Manifest this update: Sun 02 Feb 2025 01:00:37 +0000
Manifest next update: Mon 03 Feb 2025 01:00:37 +0000
Files and hashes: 1: odFVKaRRyVzNk0rFbsCdUYdQZss.crl (hash: UsuvyzTr5D1A1FXT3516y55EHnnU+QF3m813rLEbWxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:7f:06:64:a0:9f:85:95:b3:c8:8c:0e:b9:87:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d15529a451c95ccd934ac56ec09d51875066cb
Validity
Not Before: Feb 2 01:00:37 2025 GMT
Not After : Feb 3 01:00:37 2025 GMT
Subject: CN=d791c3fa1771f1cdf785f767cba5cb5556f7a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:3a:b9:ec:22:96:78:e2:bc:21:df:32:2f:
d2:d3:27:69:d4:eb:ed:f9:35:5d:60:21:c7:6f:e9:
5e:ad:5f:78:b2:2b:eb:0b:d3:c8:16:c8:10:0f:c6:
b9:f5:0f:11:41:11:83:1a:3a:a3:4c:3c:b0:0d:37:
89:a0:ba:df:87:ff:03:45:26:e3:f9:fd:48:da:7d:
6e:ec:e2:90:6e:83:2e:f7:4d:ed:cc:ce:17:2d:0e:
31:d1:a9:4c:be:4e:f1:6b:ca:44:b9:26:93:a9:d5:
cb:61:1b:bc:f0:6c:9b:04:6d:59:94:99:8f:0a:b3:
e4:7d:cd:52:5a:c6:79:a4:8c:55:17:82:6b:74:83:
0f:12:5c:5c:c9:62:64:06:8a:1d:3d:af:29:fc:65:
50:fe:a0:87:ee:3d:c7:e3:ce:71:84:83:60:0c:a6:
1f:1f:9b:26:19:8c:c2:c8:b6:7b:9d:a7:cf:02:6f:
de:29:69:10:34:5a:ef:2b:5e:e8:5b:60:28:8f:6f:
70:13:2f:27:48:0a:98:11:8b:8f:f8:f2:db:44:bd:
0c:36:22:b9:0b:a2:a1:00:13:7d:53:a1:a0:8e:8e:
b6:ea:42:7d:17:e3:68:b8:2d:cd:60:aa:8d:2e:20:
d1:35:f1:18:5f:e8:a3:36:c6:30:54:75:67:a5:66:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:91:C3:FA:17:71:F1:CD:F7:85:F7:67:CB:A5:CB:55:56:F7:A6:49
X509v3 Authority Key Identifier:
keyid:A1:D1:55:29:A4:51:C9:5C:CD:93:4A:C5:6E:C0:9D:51:87:50:66:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odFVKaRRyVzNk0rFbsCdUYdQZss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5931e3-7d10-435c-af69-d6ddacf6a3ec/1/odFVKaRRyVzNk0rFbsCdUYdQZss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:b2:ae:d8:ef:56:c7:70:6b:e1:2e:8a:e6:02:35:cb:d7:
4c:bf:4d:f3:96:8a:f6:4b:b2:b0:a3:c7:90:04:fe:91:cf:ad:
72:c3:49:cf:d7:6f:8d:c9:0b:b1:f9:ed:13:f0:1d:f7:d6:56:
68:ba:11:1e:70:37:14:34:66:94:7a:42:84:28:ef:fc:1f:20:
bd:bd:b2:78:82:e8:a2:91:b4:59:1e:b6:af:97:5b:bc:c5:32:
9b:55:5d:9c:56:28:9a:b3:da:15:54:25:d4:be:a3:84:77:ba:
87:db:03:da:fe:82:8a:83:ac:41:fb:6e:94:cf:83:a2:f4:fd:
aa:39:07:3a:93:c2:0c:ec:ba:71:eb:74:d7:b6:8e:db:62:42:
86:ae:3c:93:d6:a3:fd:13:c5:41:ef:12:da:95:b3:d4:56:82:
78:d9:a0:ed:72:7c:36:01:a1:88:7e:16:6d:1f:a0:d9:82:3a:
ab:f6:a9:1c:ee:9b:56:5d:1d:ad:0f:2c:66:99:44:0d:46:23:
fb:1c:47:a3:3d:cb:36:45:5f:f7:f3:85:59:9a:25:48:6a:b3:
be:da:d6:98:f0:47:e7:b8:d6:5d:2e:92:df:92:c4:a1:c1:4e:
ff:77:71:8e:00:d4:49:45:c7:f0:2a:fb:a1:e1:1d:1b:99:b0:
85:ec:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:09 2025 by rpki-client