Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
File: guS0v-5FTQqkcKXAqUEDSdSh13Q.mft (raw, json)
Hash identifier: kA4I0GdtR4gfVhFmJh4C2Z1N2IWDFs2VOtwdq7F2lMM=
Subject key identifier: 7D:A4:1A:2B:5A:1F:5F:59:28:1E:B2:E3:B4:AC:FF:EE:DD:05:CC:58
Authority key identifier: 82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
Certificate issuer: /CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Certificate serial: 0194BA848D44436C0AD4EE7F377B2A3EDCDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
Manifest number: 0D72
Signing time: Fri 31 Jan 2025 04:00:36 +0000
Manifest this update: Fri 31 Jan 2025 04:00:36 +0000
Manifest next update: Sat 01 Feb 2025 04:00:36 +0000
Files and hashes: 1: guS0v-5FTQqkcKXAqUEDSdSh13Q.crl (hash: rqggCq14DotbRbpGX/i0PRdl9LxHsCif4lJTkf6aQsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:8d:44:43:6c:0a:d4:ee:7f:37:7b:2a:3e:dc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e4b4bfee454d0aa470a5c0a9410349d4a1d774
Validity
Not Before: Jan 31 04:00:36 2025 GMT
Not After : Feb 1 04:00:36 2025 GMT
Subject: CN=7da41a2b5a1f5f59281eb2e3b4acffeedd05cc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:28:b3:e0:29:dd:21:45:96:f3:ce:c3:f3:
3c:20:01:c4:15:bb:08:e3:81:b2:50:b0:14:7a:6f:
dd:70:22:a7:64:2c:83:73:39:86:07:be:08:3d:2f:
dd:60:23:bf:ae:82:c6:06:34:e3:5c:87:85:c5:b9:
f2:6b:db:3d:33:e5:41:d0:9a:59:9b:13:69:71:64:
86:cb:d1:b5:9b:26:a7:7b:cd:23:02:07:e3:ad:43:
06:9d:3a:74:b8:ce:35:41:d5:43:58:82:10:1d:60:
1a:71:eb:14:67:64:f1:68:50:b3:ad:23:62:62:02:
a0:ca:39:2a:40:88:37:67:42:d9:32:66:23:a8:00:
fa:a1:db:ad:f6:1a:80:74:2e:aa:09:58:8d:33:69:
50:47:26:41:20:26:e1:6d:6c:4c:4b:e6:4d:a2:61:
41:df:ab:55:08:eb:aa:91:ae:25:93:f0:bb:1d:ce:
0b:70:c6:02:39:6c:7f:97:85:64:4b:aa:f8:9e:90:
af:67:bb:fd:f0:d1:31:ca:81:2e:7e:10:c1:d3:56:
8a:88:d2:a1:19:e3:b9:ae:d7:91:b4:50:6a:fb:68:
a8:f8:ec:56:1f:23:2b:c5:fb:0d:fa:ea:bf:39:0e:
d8:d4:b7:0f:e3:7b:38:ad:d2:f7:d0:cb:81:99:45:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:1A:2B:5A:1F:5F:59:28:1E:B2:E3:B4:AC:FF:EE:DD:05:CC:58
X509v3 Authority Key Identifier:
keyid:82:E4:B4:BF:EE:45:4D:0A:A4:70:A5:C0:A9:41:03:49:D4:A1:D7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guS0v-5FTQqkcKXAqUEDSdSh13Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/e0ccb4-0faf-4865-961f-37abe97960d5/1/guS0v-5FTQqkcKXAqUEDSdSh13Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6e:b4:aa:04:37:94:5d:a2:b3:2a:43:03:4b:69:96:0b:c8:
1d:15:2f:69:30:9e:e6:7a:07:65:13:fd:f7:67:1a:7f:a9:27:
34:1f:fc:01:5c:e3:bd:d2:3f:ac:0d:e2:96:5b:a1:aa:cb:5d:
2c:0d:37:aa:0a:43:4a:57:5a:db:1b:8c:e8:9b:82:5c:2d:3a:
65:02:d6:53:08:f2:03:41:9b:45:9a:36:da:91:7c:b9:58:ef:
0e:15:71:a9:42:90:c9:7c:d6:6c:5f:29:a4:d7:79:2e:d5:25:
7d:16:b7:d8:f6:2c:c7:70:a0:5d:6a:18:55:12:82:18:c4:6d:
73:ac:ae:d8:e9:c6:aa:32:47:5e:5b:f4:30:36:b4:c8:4c:ed:
7b:0f:a6:5f:a6:4d:f6:27:df:58:81:93:0e:4f:19:5a:51:a6:
68:b8:72:85:ba:fa:7b:30:8b:d2:60:32:78:16:31:6b:27:3b:
f6:7e:96:03:31:81:e8:9d:76:c3:46:51:52:34:75:a6:9c:a2:
fe:87:bc:cd:b7:ba:65:ac:66:fe:9a:75:a4:e2:69:95:c1:56:
9d:dc:7f:f7:dc:fe:0b:ae:f1:cf:62:59:ff:14:06:2d:55:c6:
32:7d:5e:db:ec:bc:bc:18:5d:50:d9:de:89:09:6a:ba:73:0c:
9d:a9:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:53 2025 by rpki-client on console-fra.rpki-client.org