Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: YzwOrM/YVBXSsOULlCoNDN7AKf1O6/RvCX+mccVJBxY=
Subject key identifier: 6C:02:4D:37:B4:66:A9:74:70:29:2B:B1:65:53:58:94:8F:98:58:7D
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 019510C6ABE2A74189022F99804CD413E089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 1451
Signing time: Sun 16 Feb 2025 22:00:10 +0000
Manifest this update: Sun 16 Feb 2025 22:00:10 +0000
Manifest next update: Mon 17 Feb 2025 22:00:10 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: PdzrITDnaWdNjEfs6fFyUtJnR+muasGGyU6z7dL5KNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:ab:e2:a7:41:89:02:2f:99:80:4c:d4:13:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Feb 16 22:00:10 2025 GMT
Not After : Feb 17 22:00:10 2025 GMT
Subject: CN=6c024d37b466a97470292bb1655358948f98587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:bb:71:eb:53:21:68:a9:23:c3:9f:95:3a:
9e:d1:a4:97:20:d7:11:83:d1:30:90:54:aa:00:2e:
6a:0e:0b:06:66:e9:fe:4f:20:8d:eb:04:b1:a5:65:
c6:88:9d:1c:06:00:f3:03:56:bd:bb:2c:d9:15:0a:
cb:d6:bb:a8:f0:43:2e:0d:0b:da:28:96:02:02:ec:
7e:50:3e:32:d0:b6:69:5e:76:b6:06:74:94:6d:7f:
48:5b:c2:ad:d2:47:aa:22:95:2c:5a:39:69:c9:6d:
f6:be:10:11:2f:98:c0:49:67:a8:67:d0:d4:4c:71:
2f:60:74:ae:2d:28:c4:6c:83:74:da:f4:8d:2c:62:
c8:bd:6d:28:97:63:d1:62:97:de:f0:bc:cd:11:6d:
56:6f:9e:46:f5:d7:08:81:f8:2f:e6:b6:93:a6:a4:
11:9c:08:db:d2:94:47:97:43:1b:48:cf:47:ba:1c:
12:b2:c2:ad:ea:eb:da:50:0a:9a:71:05:52:9e:35:
a5:d6:3d:04:14:88:1e:8f:f5:b7:46:0a:eb:7a:b4:
d0:5b:6a:41:7d:bd:ae:c4:0a:22:49:2c:41:95:03:
fd:df:11:fd:a8:8b:06:70:5c:42:93:27:c0:c3:aa:
a1:15:6a:4c:97:97:c5:be:3e:e8:dd:08:46:17:4f:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:4D:37:B4:66:A9:74:70:29:2B:B1:65:53:58:94:8F:98:58:7D
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:68:8f:48:97:be:73:3a:d2:c4:69:5a:1a:de:13:2e:74:e8:
c3:11:58:f2:67:f1:6e:4e:c5:a9:a9:7f:f7:bf:1c:3f:c2:46:
37:a0:7e:91:22:60:25:8f:c4:74:6d:61:88:d5:7e:15:c6:94:
9d:43:d4:03:ed:f3:dd:c6:25:8f:e6:c6:93:1c:04:46:0f:9a:
14:45:a0:67:12:5a:54:38:be:38:fc:ef:34:46:2a:20:94:c0:
bd:23:52:ad:a3:e3:89:ba:80:7b:30:fc:d0:1a:8c:b9:76:62:
a3:c5:53:51:cf:6e:b2:dc:c5:6c:ca:4a:b8:df:91:33:53:8b:
72:b5:31:d0:bb:71:56:9b:af:77:65:28:5c:09:f4:9d:a0:43:
bf:e0:34:fa:98:1b:68:6a:58:5c:4d:aa:67:8e:37:04:3d:f4:
16:f3:17:2e:08:15:ac:e1:20:87:f9:48:50:5c:27:ab:5c:a8:
42:43:aa:11:bb:f6:26:fb:de:0f:b8:a0:a3:ac:83:1c:9e:c1:
c5:58:37:37:f6:97:94:e5:a3:98:67:e7:6e:b7:e0:dc:ef:40:
84:86:6d:aa:33:0f:05:c1:c9:55:9b:4b:50:71:63:43:2c:4b:
91:b4:41:f6:4f:5d:5a:da:85:56:66:a8:92:0d:84:e1:b3:48:
d1:4f:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:03 2025 by rpki-client