Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: k32DqgiQIO0GJP/OlGus7y01+idv93Fe569tndgRcpo=
Subject key identifier: CB:13:EF:18:AA:3F:2D:95:CA:79:46:15:A4:DD:F6:CC:09:4A:0E:19
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 01951210875A84847B0AC8C8B82F686E472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 0444
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: 6IR0+uNpAe15Nn0EZUW/kKv6HLVeD5E5XKfLIINrgEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:87:5a:84:84:7b:0a:c8:c8:b8:2f:68:6e:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=cb13ef18aa3f2d95ca794615a4ddf6cc094a0e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:52:0b:00:41:5f:f2:39:d0:e4:52:09:58:
bc:7a:1e:34:6b:92:46:1e:2b:ba:b6:b5:a0:76:6e:
75:20:1f:42:41:2f:8c:3e:40:96:42:fd:ce:69:07:
90:ea:1e:eb:3b:92:ba:a4:92:41:70:b4:34:31:99:
02:e8:eb:3e:73:ff:69:bb:76:e1:bb:12:a3:d0:42:
99:90:c8:e1:f9:7f:84:d3:6a:8f:4c:39:e2:33:7a:
2f:96:23:f7:6b:a9:34:23:0b:85:6d:05:86:ea:29:
18:ae:80:c0:9d:36:d8:7b:65:e8:58:5c:aa:2a:27:
00:8c:29:39:cf:f4:1a:88:e9:a4:9d:3e:c0:d1:34:
b0:65:64:c0:0a:00:7b:8b:b7:e1:46:da:1b:02:71:
f8:1b:92:8a:d4:3c:bb:bb:34:f7:fd:09:d7:f7:ed:
94:f5:6f:fa:14:4f:5a:75:47:f5:64:9a:d2:ac:ea:
a8:8c:8e:72:9d:e3:3c:db:f3:88:05:f4:f1:96:fd:
09:39:b2:f3:3f:f2:54:0c:3e:f9:fc:b2:82:2d:e5:
c7:3c:c3:b2:64:5d:16:81:9c:f4:23:55:b9:38:4c:
87:14:03:72:41:c2:c0:46:34:f0:26:03:50:64:fa:
bd:64:b0:40:bf:01:ff:39:ed:94:c5:47:1b:67:4f:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:EF:18:AA:3F:2D:95:CA:79:46:15:A4:DD:F6:CC:09:4A:0E:19
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:d0:6c:60:ee:02:8b:d5:86:a2:74:b3:37:7f:8b:e3:bc:
3c:20:20:49:bf:39:9b:60:8e:95:1d:cf:a1:23:10:8e:46:f1:
c2:08:61:b1:65:c7:3c:11:fe:4d:ff:d7:87:a9:7b:43:79:ea:
fb:15:bc:92:25:f1:5d:9d:fa:ac:fd:a1:fb:ca:c2:8c:b4:de:
30:57:4a:96:b2:bc:5b:90:ab:b1:b8:21:04:1d:21:b0:ad:3e:
40:dd:c4:6c:27:88:7b:f3:02:cc:01:61:78:49:fb:9e:f5:99:
4f:96:c9:4c:0f:30:c6:2e:f7:c0:fe:0d:4b:9f:30:ef:94:83:
bd:cc:25:a2:69:10:e1:72:0b:27:e9:6b:d6:c1:94:bd:55:87:
aa:67:f4:2d:cb:e5:51:4a:1c:da:2f:af:d4:d4:84:7b:40:58:
05:a2:a6:ea:20:a7:e1:1b:66:57:75:3d:50:a1:87:56:d3:50:
f4:29:6c:ce:bc:61:4c:cc:80:f4:21:13:1c:33:fe:20:52:4c:
92:6c:fb:32:72:b5:4d:be:07:2e:62:73:63:b8:5a:c9:c8:43:
46:59:37:31:f1:20:20:0c:31:4b:b2:6b:01:67:f4:c3:c1:ac:
d6:06:dd:d7:5c:be:ca:64:7b:ee:50:cc:61:ea:34:28:e1:87:
cb:f5:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:51 2025 by rpki-client