Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: Fp1AEd5KbDqEct6QL+ldgySx+op0k0VlBWMK6Z64zcc=
Subject key identifier: EA:BB:85:BE:25:AC:15:FB:0C:16:74:F1:61:DE:A5:5B:2E:94:E0:BE
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 0194C35100494245B3AE6EC9155239629CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 011F
Signing time: Sat 01 Feb 2025 21:00:53 +0000
Manifest this update: Sat 01 Feb 2025 21:00:53 +0000
Manifest next update: Sun 02 Feb 2025 21:00:53 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: oYijaAhe+tcek4JsavC2IHg9ySsxSZc8v+1Sif1hL7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:51:00:49:42:45:b3:ae:6e:c9:15:52:39:62:9c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Feb 1 21:00:53 2025 GMT
Not After : Feb 2 21:00:53 2025 GMT
Subject: CN=eabb85be25ac15fb0c1674f161dea55b2e94e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:d0:c8:cb:57:05:b8:88:b6:2b:1f:28:1d:
dd:f1:f5:bc:de:06:05:51:5e:73:a6:26:8c:7f:7c:
3d:71:37:f6:d6:15:98:b5:2e:53:a3:36:b4:f2:4a:
22:a1:d8:49:6b:a3:99:00:b7:d6:41:f1:6b:cf:59:
00:12:29:a2:65:0c:43:18:01:5f:50:16:30:fc:8f:
a1:0d:37:2f:3a:54:9f:28:e2:fc:b3:fb:ef:62:db:
22:6b:56:42:88:40:1f:11:2b:9a:38:fa:e7:58:6e:
f2:8e:94:f1:ae:b3:e5:b2:85:d9:78:b6:96:e3:e5:
d6:2b:3b:80:fe:72:2f:f1:86:c3:bd:8a:ff:ca:5f:
4f:35:17:6a:ae:56:5d:8f:6d:2a:9b:80:83:fc:e9:
23:1c:c1:58:47:dc:0b:c1:ed:4b:c5:2e:3c:41:9f:
20:d4:1a:e4:a2:91:22:b6:90:81:1e:b6:39:6a:6e:
02:c1:f3:11:e4:6f:c0:4d:b3:9a:76:59:2e:48:14:
31:c4:76:7e:91:1d:95:aa:aa:65:a4:fa:c7:92:0c:
bc:f2:02:c3:8a:38:74:47:81:80:a0:cb:ec:f3:1d:
02:19:19:07:56:c7:2f:7e:4e:ac:c5:d9:a5:4f:87:
aa:cf:79:52:84:3c:e9:92:22:60:50:4f:f4:f9:ab:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:85:BE:25:AC:15:FB:0C:16:74:F1:61:DE:A5:5B:2E:94:E0:BE
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:39:ce:c3:20:d9:af:c5:97:af:fa:0f:82:12:b0:71:f7:4c:
3d:b7:72:eb:18:1d:cb:de:61:b9:ef:d8:40:53:a3:9f:27:5e:
ba:cf:4b:6f:80:dc:88:62:ac:cb:21:a3:a4:e3:e2:eb:0b:9b:
92:22:16:7d:dc:71:54:5b:76:d4:5a:0f:be:1b:e9:50:25:31:
bb:52:bb:74:43:02:31:0a:4b:ca:a2:3e:2d:10:aa:c7:86:06:
25:1c:86:3a:13:b8:76:3e:77:ec:28:fc:30:1b:aa:41:58:ab:
c6:87:ee:58:08:73:46:bd:e5:3f:a7:9a:1f:95:ff:6a:bf:36:
95:fd:65:b6:62:e7:4b:bf:6c:76:42:6b:74:10:7d:8f:05:1b:
02:1d:b0:67:59:6c:04:ee:0c:46:b2:84:83:b9:ef:da:76:40:
e9:3f:30:43:f2:b3:ef:1d:8e:70:3e:1d:17:ad:cb:b9:df:f6:
d6:da:e2:f2:87:82:61:ec:05:1e:4c:d5:5c:d0:f3:bb:c9:cd:
2b:8d:4e:12:e7:b0:21:af:d9:6e:5a:2f:96:dd:a7:24:04:c1:
f2:83:1d:a4:ad:1a:da:7d:5d:dd:9c:49:e8:7d:76:28:eb:c1:
91:68:0d:02:1d:59:29:be:89:c0:a8:e3:60:f4:95:67:f9:57:
68:d6:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:36 2025 by rpki-client