Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: cDSFm4/qUgTxcAw2WNDtP70Wgcq5bMGXOczL4HdE9rY=
Subject key identifier: B7:26:22:FD:9B:28:15:2A:46:7E:7F:C4:D3:57:A1:6D:87:2F:73:95
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0194C4D12AE7C62C543833D9C1289258C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 8B
Signing time: Sun 02 Feb 2025 04:00:29 +0000
Manifest this update: Sun 02 Feb 2025 04:00:29 +0000
Manifest next update: Mon 03 Feb 2025 04:00:29 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: MX6DoIKPyIn/OFCSgUIDUTP06u4QMNsGywQ8FEzT1ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2a:e7:c6:2c:54:38:33:d9:c1:28:92:58:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Feb 2 04:00:29 2025 GMT
Not After : Feb 3 04:00:29 2025 GMT
Subject: CN=b72622fd9b28152a467e7fc4d357a16d872f7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:2e:cd:de:be:42:31:33:ce:39:3d:24:91:
36:05:b2:c0:bc:fc:a8:11:b8:5a:d6:f1:57:4a:44:
8f:c9:7e:c4:08:83:55:2c:aa:88:3d:2b:23:7d:ba:
2a:d3:97:54:27:93:03:3d:eb:0c:e0:b6:be:c9:df:
dc:10:ee:a2:3b:f5:fd:3a:9d:b8:56:a3:80:52:f0:
f9:f4:f6:a4:21:6e:86:13:4b:33:52:5c:1c:58:84:
9b:c5:a3:38:1d:22:02:23:a9:80:10:7c:94:d1:9f:
8c:ac:90:71:a3:95:d9:f4:cc:13:09:c1:c7:10:cf:
07:b4:ce:16:cf:c9:c8:4e:be:75:62:db:ae:a0:fa:
f5:42:b0:59:99:52:3a:e5:06:88:b8:2a:7c:1a:9f:
a1:fe:53:fc:11:39:47:e4:78:e5:ba:4e:fe:66:1a:
e4:4d:52:90:29:f8:19:50:45:0a:4c:71:d6:dc:cd:
4f:cd:a3:7b:39:7d:f6:e9:49:56:04:6f:74:66:5e:
6b:07:11:da:72:e4:5c:fe:99:55:15:3c:a0:c8:1e:
af:82:64:48:22:03:02:7a:ed:1e:bc:03:87:81:09:
05:6e:36:8f:12:a9:35:82:80:6a:30:a7:b6:75:a7:
81:4d:f8:0a:60:6b:ca:48:8a:de:f8:29:84:ae:c9:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:22:FD:9B:28:15:2A:46:7E:7F:C4:D3:57:A1:6D:87:2F:73:95
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:4b:9d:a6:be:47:4d:7c:f3:45:33:5c:74:95:65:05:5b:
9c:1f:66:60:bc:a5:ff:60:84:d3:5f:1c:fb:71:0f:25:d4:0f:
56:e6:e0:82:83:a2:bb:da:84:07:6d:4f:4f:d0:02:45:89:6f:
26:fb:f0:cc:80:15:a1:4c:12:4c:04:22:94:55:01:7b:bd:22:
b2:37:55:da:5c:51:35:86:a5:dc:08:ce:df:93:3e:cd:70:f4:
43:ca:dc:96:d2:1e:ba:25:4c:81:df:e9:06:3e:10:05:0d:d8:
90:60:d1:ec:d3:80:81:ba:4d:1f:83:e0:f7:98:6a:8b:c6:54:
59:be:c9:e8:ca:00:bf:22:66:3e:75:c4:1e:f4:6d:6d:f8:0b:
9c:3a:01:b3:ca:2d:74:f5:1a:1e:b9:8c:ff:e6:33:c7:90:84:
d0:d0:51:e6:0d:e7:86:1f:ab:07:dc:5a:5c:4e:f5:10:b8:e8:
71:3d:ef:0e:fc:b0:0d:10:63:c1:af:c3:1e:60:a4:e1:07:f7:
5f:39:8c:71:65:c6:7a:bd:db:a0:76:50:c2:b5:24:c5:fc:e8:
37:3f:3f:0c:69:67:ce:c3:92:13:4d:94:58:63:f6:5d:34:37:
53:73:31:38:95:83:a9:c5:cd:29:c2:a8:44:1b:3b:d8:a7:e3:
bd:0a:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:09 2025 by rpki-client