Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
File: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft (raw, json)
Hash identifier: kKNSgpMaO1eAFPn6baL6/Yncs0HalWh3Fp/EBLRMPHE=
Subject key identifier: 48:94:77:DF:85:D0:84:4C:D0:8B:CE:65:8B:96:7F:D1:67:88:84:04
Authority key identifier: 49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
Certificate issuer: /CN=4911e41f8bbee80c655c153f28a819d016c8271b
Certificate serial: 0194BA84AD31C676E43A562520D96EC83AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
Manifest number: 08B3
Signing time: Fri 31 Jan 2025 04:00:44 +0000
Manifest this update: Fri 31 Jan 2025 04:00:44 +0000
Manifest next update: Sat 01 Feb 2025 04:00:44 +0000
Files and hashes: 1: SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl (hash: C6iY7ghepbE6ydBvBXc6O0Z/sEkzs7SpM8y6XXxTx8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:ad:31:c6:76:e4:3a:56:25:20:d9:6e:c8:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911e41f8bbee80c655c153f28a819d016c8271b
Validity
Not Before: Jan 31 04:00:44 2025 GMT
Not After : Feb 1 04:00:44 2025 GMT
Subject: CN=489477df85d0844cd08bce658b967fd167888404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:a8:e7:3d:a9:04:5e:9d:51:72:7d:85:da:
3f:a4:63:0e:4a:48:16:4c:cd:56:b1:7d:8c:d7:7d:
5c:66:07:3b:35:9f:16:18:59:88:3c:d5:ae:93:65:
1c:f0:08:88:00:39:49:bd:60:2e:e1:25:70:15:57:
79:53:80:06:83:26:6d:b7:6c:0a:ec:e2:60:b5:a5:
be:fd:5d:b9:31:91:5b:08:08:3a:ab:45:85:5e:65:
b1:43:3d:56:c0:01:cd:2d:c8:7c:d1:ac:62:9f:c9:
23:90:91:c9:66:fe:00:e4:86:90:ae:31:72:c7:e0:
db:7f:7d:b9:c4:4e:e0:8d:bd:47:82:01:4b:4f:a4:
6d:78:29:54:c0:a9:a8:39:74:a9:89:f1:99:4f:4f:
94:f6:27:e3:33:12:4d:c1:a6:f1:29:04:7a:3e:e5:
f7:70:5b:29:9e:3c:a6:3c:81:b6:72:0f:06:29:59:
66:be:ac:18:8b:13:f4:52:c1:bd:5f:8a:8d:a3:14:
a8:4e:cc:f4:f5:3c:b8:82:3a:bd:01:8a:bc:bc:e0:
81:d6:e4:43:a6:bc:3a:88:ab:a6:f4:59:e9:f2:d1:
3e:67:f4:eb:82:12:4b:d5:e1:08:7b:9a:c4:40:4e:
bf:f9:48:81:cf:86:ac:d4:07:46:69:99:bf:4c:be:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:94:77:DF:85:D0:84:4C:D0:8B:CE:65:8B:96:7F:D1:67:88:84:04
X509v3 Authority Key Identifier:
keyid:49:11:E4:1F:8B:BE:E8:0C:65:5C:15:3F:28:A8:19:D0:16:C8:27:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/59128b-e506-47c7-86c9-f77e2c8801ef/1/SRHkH4u-6AxlXBU_KKgZ0BbIJxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:25:17:29:8c:1a:75:f5:09:7d:00:12:31:bf:01:ae:91:
07:54:2b:38:ff:28:99:a7:2b:d0:d3:39:02:5e:38:05:6a:f3:
94:28:43:8d:44:9f:0b:0e:89:25:8e:18:b5:ee:74:95:13:57:
de:e6:e2:73:3a:38:d3:d7:c7:2e:4b:ff:34:c9:e8:93:12:c7:
f8:b5:d0:de:5a:43:b8:71:c1:c0:3d:73:4d:c5:92:99:75:d1:
c7:f3:dd:89:9c:65:76:cf:d7:ed:e4:02:d6:d5:02:41:aa:99:
6a:87:d2:21:9c:b6:ac:35:ff:13:52:10:5d:f3:60:03:2a:96:
19:6b:ee:76:b8:11:fc:85:05:d6:4d:cc:ad:b9:db:88:41:16:
86:66:f4:58:52:08:e2:7c:35:d2:f9:d7:51:6d:03:c1:b2:19:
58:77:ea:41:9f:52:be:32:a0:27:c4:76:74:f8:67:6b:6f:a8:
74:5f:cb:4d:cb:9e:53:34:f9:0d:21:36:29:26:69:5c:83:20:
17:6a:9c:5b:e7:78:e3:5d:32:07:02:64:83:9e:7d:32:91:88:
67:ad:fa:53:d9:5e:6b:b9:70:8a:97:52:16:65:61:38:c0:ac:
5e:7a:fe:c5:b2:91:8d:36:5f:d8:c5:c7:b8:3c:43:e3:0b:d6:
d9:97:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:24 2025 by rpki-client on console-fra.rpki-client.org