Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: 4XVJLHTWAArMT7Y4oruX8N2LufzTDnQ7hhSaehO9Wp0=
Subject key identifier: 67:12:7C:76:F8:E4:B0:CC:17:53:85:34:B7:6B:8F:23:3F:C9:34:DF
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0194BB298FD76E39C9102944FB5614D9B556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 0FF8
Signing time: Fri 31 Jan 2025 07:00:50 +0000
Manifest this update: Fri 31 Jan 2025 07:00:50 +0000
Manifest next update: Sat 01 Feb 2025 07:00:50 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: addrCCk+kONclKKd3M2nJchsHYcWbLWhm+UbBIabDIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:8f:d7:6e:39:c9:10:29:44:fb:56:14:d9:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: Jan 31 07:00:50 2025 GMT
Not After : Feb 1 07:00:50 2025 GMT
Subject: CN=67127c76f8e4b0cc17538534b76b8f233fc934df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:7a:bd:55:ff:98:78:9f:db:ee:3f:9f:6f:
57:23:9a:c2:8b:b7:d6:61:21:5c:8f:76:52:7f:c4:
a9:f2:42:6d:5f:da:4d:36:3c:91:89:ae:f0:be:a1:
c6:14:4c:33:83:37:50:c3:ac:fc:91:eb:6d:f2:20:
57:7e:98:97:e0:76:02:2b:ef:7a:62:15:20:56:e8:
f7:3f:74:38:60:2b:73:44:7f:92:f9:3b:a9:95:27:
e7:be:91:c6:5f:37:7e:c2:7f:3b:34:e4:48:45:ba:
51:0a:2d:1d:d1:9b:98:8b:d6:46:1d:d7:c4:52:98:
27:23:e2:3b:21:b4:ae:82:3b:33:09:b3:f9:9d:f4:
43:cd:90:28:4b:58:b3:f0:ec:e5:98:3e:3c:cb:dd:
9f:85:52:f0:43:67:97:14:ab:c2:2b:2c:0e:4b:a6:
fe:4c:32:07:04:c5:f7:a0:17:b2:6f:f9:b6:e7:5a:
a6:0f:61:78:d1:a5:4f:63:60:e0:ce:a2:f3:60:f6:
98:7c:1e:6a:0d:f3:af:a5:c9:85:e2:49:ae:82:f8:
01:2d:81:78:82:59:cc:75:21:21:b1:73:51:eb:8e:
5d:2b:c3:49:18:f1:7d:51:c3:3c:bd:3c:42:8b:21:
10:7c:66:ef:e1:80:25:39:be:d2:a1:1d:cb:72:e3:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:7C:76:F8:E4:B0:CC:17:53:85:34:B7:6B:8F:23:3F:C9:34:DF
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:23:3c:f1:6b:9d:fe:22:4d:99:e1:42:fd:67:e7:8c:81:1e:
95:70:d4:06:2a:04:00:a0:93:f2:79:76:77:ec:53:4a:59:f0:
c4:d8:b8:ec:78:b0:cf:36:42:da:25:16:1d:18:aa:61:70:81:
34:4e:54:53:33:51:07:19:99:c2:a9:b1:24:78:d2:83:5b:17:
4b:f7:c0:0b:aa:36:99:88:92:05:be:bc:d2:e0:79:7b:89:3a:
61:47:88:54:bd:e1:55:4f:58:65:a2:f0:e4:08:21:06:89:84:
55:bd:81:a2:75:54:26:52:32:9c:4e:e1:7b:55:9d:57:52:71:
b4:dc:2c:ca:c7:6a:93:ff:c5:59:f8:e7:46:2f:64:2d:cf:7b:
62:df:08:80:23:cd:95:bc:96:49:86:a1:7a:e0:3f:d2:44:4f:
cb:48:21:d3:fb:b3:4c:b0:b3:07:36:67:38:32:a0:4c:94:04:
8b:f1:c6:d2:4e:89:f7:2e:7c:74:e5:40:19:69:5e:fc:44:d1:
a1:e8:c5:80:78:b3:91:a4:69:90:8f:17:1c:1b:17:b9:d7:82:
7b:03:47:b3:78:69:8c:cb:74:42:04:85:67:55:a1:e1:ae:22:
0d:4c:00:10:53:28:e5:47:f6:cf:de:65:41:cd:62:d6:c9:0a:
6a:25:fe:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:54 2025 by rpki-client on console-fra.rpki-client.org