Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
File: rARWSrE5dm8d7mSLNaChi702IQk.mft (raw, json)
Hash identifier: oHgOvkiAvTSlqm33Qk/mv2rqkP0jHdpimm9EtKUef/8=
Subject key identifier: 78:B7:09:01:CF:4D:D2:2E:75:2C:37:8F:F0:E4:C1:00:39:4D:11:DE
Authority key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
Certificate issuer: /CN=ac04564ab139766f1dee648b35a0a18bbd362109
Certificate serial: 01951134C9ABA4CB2D224246151F6A83C8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 00:00:26 +0000
Manifest this update: Mon 17 Feb 2025 00:00:26 +0000
Manifest next update: Tue 18 Feb 2025 00:00:26 +0000
Files and hashes: 1: rARWSrE5dm8d7mSLNaChi702IQk.crl (hash: OGpKxwCdv640rt76b1Ue/U/RLEmpokJEacir9WG8VTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c9:ab:a4:cb:2d:22:42:46:15:1f:6a:83:c8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac04564ab139766f1dee648b35a0a18bbd362109
Validity
Not Before: Feb 17 00:00:26 2025 GMT
Not After : Feb 18 00:00:26 2025 GMT
Subject: CN=78b70901cf4dd22e752c378ff0e4c100394d11de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:c4:ba:6e:45:8c:f9:4d:f8:c0:4c:0d:e4:
a2:10:f6:04:2f:ab:ad:fd:e7:e1:b2:1c:e6:4f:a1:
d4:fe:69:54:e3:30:51:8e:4a:53:c5:c3:a6:41:b2:
0e:f6:a1:1b:e3:75:6f:5c:7b:a7:2c:5d:00:77:0b:
03:ef:c7:f5:15:38:32:45:5c:c4:cf:8b:f5:4d:a6:
e3:49:3c:42:84:6b:b1:a3:c8:63:dc:f5:e1:e7:d8:
77:04:a8:4d:73:9b:bd:79:23:fd:ff:ea:c0:da:68:
4f:d5:ce:f6:26:56:98:c4:b1:cc:91:8f:a8:a4:0e:
41:6e:f2:33:88:ef:37:fe:7f:8f:dd:de:3f:52:24:
a1:d7:88:09:69:33:81:36:62:6b:c2:2d:9a:79:14:
c9:85:4e:af:cb:a7:c6:14:98:31:61:66:e9:63:75:
c0:f0:d1:15:ed:47:a6:f7:df:97:4a:47:07:6b:7d:
bd:e5:73:05:a9:cf:dd:b2:d9:21:d1:09:f2:b0:f7:
f5:01:13:2b:1e:b7:64:4b:9e:2e:c8:95:13:9b:a5:
95:6e:6e:cf:97:0a:b8:79:c2:9b:8b:ad:71:d6:ee:
fd:e7:3d:26:12:ca:7e:1f:e1:08:1e:99:57:c3:9f:
ac:0c:2c:d9:46:8d:e3:4e:c4:7f:fc:ba:14:c4:2e:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:09:01:CF:4D:D2:2E:75:2C:37:8F:F0:E4:C1:00:39:4D:11:DE
X509v3 Authority Key Identifier:
keyid:AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:24:cd:86:21:00:89:cf:a8:60:ad:a2:bf:0e:7e:ee:70:
34:bd:33:7e:0f:20:e4:9d:7e:91:ee:db:ef:14:65:a1:f8:bf:
91:e4:b8:6f:07:90:6e:c5:72:49:d3:6a:5e:d5:e8:5f:e6:22:
df:88:8c:23:01:74:68:5e:a1:a9:58:b4:55:0b:41:ee:fd:bc:
c2:ad:46:be:31:60:e5:35:64:50:99:d1:9d:60:e0:cc:d6:3c:
41:54:86:88:85:b9:10:58:72:52:a6:cf:37:d5:75:9f:43:d5:
7e:40:a2:dc:4c:47:10:05:c9:3b:9f:cf:68:e2:da:f0:6e:37:
8e:91:43:6b:95:91:69:c1:53:e5:de:18:c6:91:50:8b:fd:d3:
e1:f9:f8:5f:53:11:a1:62:91:dc:bc:68:30:88:e3:aa:6f:6c:
d3:85:e5:ca:6f:85:d6:db:bf:73:40:86:9a:f6:3a:42:f4:72:
31:6a:f2:df:c0:1a:6e:b9:d0:8d:f8:fb:d3:68:2d:c9:df:e2:
09:91:12:83:58:5d:4b:20:05:d1:a9:81:1a:7e:78:51:e1:d1:
05:8a:6e:2a:28:cc:1e:c4:a8:70:6d:d8:8b:1e:08:2f:e2:93:
9f:3f:75:09:e0:b4:e8:3c:52:71:58:62:d1:cb:c3:62:ce:95:
1e:04:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:48 2025 by rpki-client