Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: dNHF7ySFesbPwvjYWh4DkwGxRYOgSfBubl+7wUm+f7U=
Subject key identifier: C0:45:C4:1A:53:AC:29:84:22:99:47:ED:D2:A7:C3:0B:EB:AA:CB:F2
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 0194BB601995309B15DFEB7552F271CCF3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 025D
Signing time: Fri 31 Jan 2025 08:00:24 +0000
Manifest this update: Fri 31 Jan 2025 08:00:24 +0000
Manifest next update: Sat 01 Feb 2025 08:00:24 +0000
Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: x2YZfVhPYMtrtDDSwWGy/EXy0EpjuEqBUEbmDZ3ilQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:19:95:30:9b:15:df:eb:75:52:f2:71:cc:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Jan 31 08:00:24 2025 GMT
Not After : Feb 1 08:00:24 2025 GMT
Subject: CN=c045c41a53ac2984229947edd2a7c30bebaacbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:de:a8:ab:de:0f:5b:b8:7d:d6:cd:d9:a0:
0b:7c:7c:a5:41:97:e2:04:f1:09:f1:66:7f:89:4f:
b6:79:dc:b0:a0:46:d6:4c:c1:bb:3e:4b:48:1d:56:
52:f1:b7:15:ed:e6:21:a7:34:ca:d2:d3:13:37:8d:
d6:22:a5:ec:55:3b:9d:0e:30:b1:b5:59:dd:bc:40:
5b:e1:c3:37:dd:53:ce:12:ad:90:4c:47:38:9b:f3:
5d:db:c3:f4:4b:f9:0f:6a:4a:95:97:b4:8a:8a:d3:
6f:2e:9a:18:30:3f:84:89:ea:54:27:e2:6a:ac:78:
1d:77:df:26:64:a5:ed:3d:be:2b:ef:64:e6:39:97:
7a:33:5b:86:ec:3d:76:6d:99:0c:d1:bf:a5:18:fa:
76:92:3e:b0:fe:16:ae:4d:04:82:5d:c4:0e:74:63:
ce:bc:de:cf:a5:7d:af:f9:f9:2f:af:7c:97:47:c4:
aa:bb:50:aa:00:89:00:03:b5:56:c9:7f:d8:32:4f:
9f:7b:c3:8b:fd:8f:f0:50:05:76:c9:d3:d5:73:6e:
46:43:a0:d7:0d:d3:fa:d8:a3:92:a4:b9:ea:c9:32:
57:6f:4c:13:ab:14:22:f1:df:80:89:ad:a1:eb:4d:
ed:24:d1:16:3b:b7:a2:58:99:66:f0:0f:76:99:1a:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:C4:1A:53:AC:29:84:22:99:47:ED:D2:A7:C3:0B:EB:AA:CB:F2
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:31:a0:22:8d:9e:f5:dd:04:74:e5:00:b2:3d:23:94:3b:6a:
a4:fd:ad:22:54:43:c4:e1:cb:5c:6f:e5:25:74:39:31:bc:64:
01:58:f9:ea:f9:21:43:82:72:fd:30:b4:0f:a7:35:c1:41:06:
c0:65:37:ff:5a:a1:0d:66:48:d0:92:c3:b2:66:a5:9d:ba:a4:
1e:d0:5f:96:9e:7c:03:2c:14:ed:d8:72:92:83:9b:6a:bc:3b:
db:93:c1:6e:a4:c3:d8:53:be:b0:6a:93:02:6a:83:ff:dc:d3:
d9:50:45:42:63:98:fe:3c:74:6a:69:0f:40:bf:06:c0:8f:21:
30:34:91:d4:91:e3:61:ad:75:80:e6:5f:6a:9a:f6:51:4c:4e:
81:74:cb:51:86:67:9a:ef:f4:0f:37:b9:c0:76:06:18:5c:df:
df:de:3d:c6:ae:b6:36:ee:84:57:29:34:4c:7f:b6:c9:01:8e:
a3:d8:6e:fe:09:90:5f:a2:7a:57:d1:f9:70:09:0a:a5:ad:29:
e1:41:74:e1:97:d4:53:f9:41:ab:ed:b2:3a:bc:55:9e:50:04:
69:fa:65:c8:0c:4d:d8:ce:d0:f8:8d:b7:bc:b1:f3:30:76:e0:
2c:f4:e8:d3:77:20:02:02:bc:7d:4c:22:2a:1b:98:f5:99:b3:
f8:03:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:52 2025 by rpki-client on console-fra.rpki-client.org