Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: Ub+02Y80RUxSwQU5vW+De/IdCLIoMTwmJbEcNdAGdoo=
Subject key identifier: 0C:BF:06:81:70:CB:60:B2:69:47:11:C6:36:F1:24:D8:AD:1B:4D:5D
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 0194BB28F23AA09FDC7396DB7701D739CEB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0D4E
Signing time: Fri 31 Jan 2025 07:00:10 +0000
Manifest this update: Fri 31 Jan 2025 07:00:10 +0000
Manifest next update: Sat 01 Feb 2025 07:00:10 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: TG62Kx37Vt+/JnZm2hURjOwgOY8Hb3HiyHMXrhFf8c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:f2:3a:a0:9f:dc:73:96:db:77:01:d7:39:ce:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Jan 31 07:00:10 2025 GMT
Not After : Feb 1 07:00:10 2025 GMT
Subject: CN=0cbf068170cb60b2694711c636f124d8ad1b4d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:e9:1f:d0:f3:25:7d:ba:b5:4a:49:7d:8b:
10:73:f6:ed:4a:b1:4c:5b:ce:14:56:f2:5c:6f:f8:
a0:0e:c1:e1:2b:5c:ff:d9:d6:df:94:15:1f:a5:54:
0b:36:d6:78:6d:62:ee:76:c0:a6:e8:12:e0:01:5c:
57:ea:01:49:6e:e2:37:92:a7:8f:10:90:fd:d5:76:
b1:d0:70:6f:37:92:09:fe:2d:e8:a1:7b:45:27:06:
b0:e6:00:fa:a1:3b:56:11:3b:2d:99:6f:de:1f:98:
37:87:52:b6:f3:3c:f0:22:38:72:c9:c7:8f:e6:8a:
df:8d:84:07:4a:70:59:bb:23:62:10:f6:24:3d:1c:
e7:c8:5e:d4:3b:6f:e2:88:60:b0:c9:99:51:e9:e1:
68:63:5c:c1:dc:9b:cc:2b:6c:89:a4:f8:6e:df:57:
e0:5e:4b:6a:25:97:19:f9:ff:61:60:62:29:05:b1:
de:e8:88:80:49:c0:2b:49:31:a0:19:e2:41:9e:84:
19:3b:49:96:3b:07:93:76:9a:42:d6:45:f7:6d:87:
f7:01:13:0e:7d:6a:bb:2a:77:43:5b:c3:2e:d7:46:
0f:1b:f0:07:f6:1f:6d:35:2b:11:ab:ef:b2:91:3e:
db:42:fd:09:c2:d5:2f:6e:09:56:66:39:28:e5:f9:
7d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:06:81:70:CB:60:B2:69:47:11:C6:36:F1:24:D8:AD:1B:4D:5D
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e4:81:0d:41:4d:f8:ef:05:cd:72:68:2e:d6:9c:3c:a5:7f:
d3:a8:1d:c1:50:ed:f2:b0:83:f4:8f:63:0f:3f:e2:0a:65:e3:
66:8d:6e:29:a1:38:d4:ec:9d:ba:dc:81:8c:79:59:07:25:4b:
9e:69:88:83:c1:4e:af:c4:90:b2:cb:13:f9:77:07:a7:82:6d:
fd:ce:bc:27:a1:f3:4e:4c:4a:04:49:66:9f:81:9c:57:52:9c:
86:26:5d:43:de:15:24:a5:f0:74:e4:fa:9f:4c:08:94:81:94:
ff:ec:7d:81:43:d5:53:d6:cc:7d:22:7a:33:af:ad:9c:81:40:
96:27:16:1d:36:c6:6a:90:21:5a:32:4e:5f:a5:a2:a6:02:2e:
6e:a0:07:15:db:76:01:00:4b:58:fe:78:e8:7d:28:f9:a3:ca:
ca:05:a6:31:13:86:90:90:fb:d5:af:5e:70:81:f0:72:d9:e5:
e1:de:3c:7d:30:90:64:56:5c:54:63:da:ff:8b:ab:59:a3:c1:
57:44:73:00:f5:47:7c:9b:53:87:76:58:5a:89:35:90:93:73:
9c:ee:39:01:f4:8d:5f:bd:f2:62:52:b7:51:7c:6c:90:5b:ad:
0e:9f:4d:fd:4d:c9:87:e5:64:d6:9e:2e:c9:65:00:52:ee:cd:
6d:03:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:55 2025 by rpki-client on console-fra.rpki-client.org