Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: YVAwk1zORFQucfryS7oUs7LEfBOlXXKSauqDZvyu/jM=
Subject key identifier: 21:26:F3:F4:B2:50:80:E6:AD:D1:1E:9A:57:F1:FC:40:69:83:CF:A5
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019510C7B0BCF84101F65913E0335812A029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:17 +0000
Manifest this update: Sun 16 Feb 2025 22:01:17 +0000
Manifest next update: Mon 17 Feb 2025 22:01:17 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: Nu8D++9ZQOhD/vWMQTaZWsB6PHL8RP+DSZyPZCHF2NE=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b0:bc:f8:41:01:f6:59:13:e0:33:58:12:a0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Feb 16 22:01:17 2025 GMT
Not After : Feb 17 22:01:17 2025 GMT
Subject: CN=2126f3f4b25080e6add11e9a57f1fc406983cfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:9a:ee:34:ed:8f:e7:a0:f7:da:b8:20:ed:
a4:4e:c8:fb:d1:32:4c:d1:77:77:35:b8:0e:cd:42:
90:a7:7a:2e:0f:fe:05:76:ee:63:c7:00:9f:5d:f8:
20:74:b2:7f:8d:19:73:cf:d2:78:29:76:1a:a6:dd:
3e:78:09:14:a6:ca:df:00:94:a4:93:92:b4:c4:85:
78:7c:86:6f:46:1d:8e:d9:bf:89:14:31:a1:1f:55:
ad:85:7b:3b:bb:19:43:c8:8f:f0:df:be:ee:86:12:
22:39:9c:3a:cb:1a:ae:aa:22:e9:62:d4:88:f1:be:
e1:4b:d4:94:12:5b:b8:d8:d4:29:50:f7:20:5b:b1:
5b:96:9f:92:cb:90:67:ca:61:bd:30:b9:ec:96:7a:
3e:02:71:42:c3:c9:0e:f4:e9:61:8f:aa:82:75:7f:
1a:fe:61:cb:26:b2:b7:e6:ce:fd:2a:21:41:ac:78:
50:f5:df:e8:9b:4f:90:23:12:c4:57:60:11:85:0e:
2f:89:17:5a:76:b5:a5:f7:e7:bf:64:5b:1e:68:47:
97:87:e8:8c:72:1b:96:3c:01:be:ae:fb:4b:36:b8:
82:c9:aa:1e:8b:4b:1c:c8:9c:27:cc:63:be:a0:ff:
f9:70:c9:68:f8:66:ac:30:c0:06:fc:d2:4f:c4:1b:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:F3:F4:B2:50:80:E6:AD:D1:1E:9A:57:F1:FC:40:69:83:CF:A5
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b7:ba:4f:79:79:e2:a2:0b:73:03:d4:34:1f:42:4c:af:b3:
23:fb:ba:6b:fa:5f:33:95:33:88:ed:1c:ab:02:32:31:a4:2c:
af:a3:a6:e4:b5:64:64:a6:ff:c4:de:d4:40:a6:c1:e1:ee:af:
c7:ac:63:05:a6:db:d7:29:5d:ee:c8:dc:27:1f:2b:e1:fb:1f:
99:80:7f:da:4b:6a:0d:b5:93:54:4d:1f:63:7a:86:07:92:24:
5e:13:32:0d:37:2e:8f:ff:60:5a:16:46:68:40:f2:3b:96:46:
30:64:95:36:02:4f:93:35:42:9b:d0:68:11:d5:b8:ce:8b:eb:
a6:fb:96:24:59:98:2e:59:8c:32:9c:03:07:1c:ce:4c:94:ec:
61:f6:17:4c:41:f8:41:43:4e:fb:94:12:c0:09:72:bc:ea:81:
78:a2:c6:05:c9:ec:ef:ca:16:50:7a:2a:de:78:f9:88:84:4f:
4e:4e:14:8e:b3:f9:1a:67:b7:9f:0c:bc:67:f4:d4:2e:a5:f0:
f7:d6:d5:95:16:66:66:a2:72:6e:b1:43:f5:81:ac:a5:89:17:
e8:a0:50:d0:f2:4d:95:d9:4e:76:dd:a9:03:d4:f5:4b:81:aa:
25:4f:fb:0b:0f:7b:04:87:35:1e:26:a8:a3:67:81:ee:70:c5:
91:47:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:03 2025 by rpki-client