Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
File: la6L0zJJzx7V8NQ5gUfv0y0lQho.mft (raw, json)
Hash identifier: 9NRwgRMv3D79dMb7Hvfrw8UZPILXJu+Gz1TWwfDk8C8=
Subject key identifier: C3:8B:CF:21:97:93:5A:FB:05:A1:0F:3A:0B:69:0F:31:89:8B:D1:AE
Authority key identifier: 95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
Certificate issuer: /CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Certificate serial: 019510C81572AE47903294AE81CABB945A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
Manifest number: 0BC5
Signing time: Sun 16 Feb 2025 22:01:42 +0000
Manifest this update: Sun 16 Feb 2025 22:01:42 +0000
Manifest next update: Mon 17 Feb 2025 22:01:42 +0000
Files and hashes: 1: la6L0zJJzx7V8NQ5gUfv0y0lQho.crl (hash: rjYDWQ1BEngqBv8SjmVtSxebqK17zQbyhX7z2TSzuVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:15:72:ae:47:90:32:94:ae:81:ca:bb:94:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ae8bd33249cf1ed5f0d4398147efd32d25421a
Validity
Not Before: Feb 16 22:01:42 2025 GMT
Not After : Feb 17 22:01:42 2025 GMT
Subject: CN=c38bcf2197935afb05a10f3a0b690f31898bd1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:ed:25:14:37:09:57:a3:a3:be:75:74:bf:
f7:77:cc:d1:ad:7f:f0:0b:7f:d0:e5:76:8f:f3:3a:
34:32:ac:2b:fe:ea:70:a3:3b:98:1d:af:6c:60:97:
72:22:35:a4:b8:be:fc:ee:4d:bc:10:b4:bd:71:f4:
e3:17:28:25:35:e0:26:2f:a6:56:2b:94:47:34:65:
56:35:0f:55:9b:84:c8:af:fd:cb:15:a4:f5:98:22:
b9:3c:ed:20:ac:ba:5e:3a:ad:ad:94:c1:a7:75:e1:
79:17:37:34:9b:72:da:27:1a:1f:68:89:9e:f3:1d:
9f:ec:30:36:a3:4a:a2:f5:33:e3:cb:f6:ae:87:92:
04:1d:c7:be:27:99:2c:6b:5d:22:bd:f2:e2:b7:fe:
19:50:5a:78:8a:da:72:87:c3:5d:b4:63:2f:c4:40:
ba:34:d6:5e:b1:b9:4d:ab:05:35:18:c2:0c:e3:82:
e7:cd:e9:bd:4f:aa:78:7b:27:45:b0:f4:dd:9a:d2:
5f:97:44:25:7f:91:55:0d:f8:eb:51:ca:ca:81:29:
38:45:41:a4:16:86:55:91:44:99:15:39:63:96:65:
e2:24:84:51:93:9f:e3:f9:15:80:ae:c9:da:9b:68:
25:6a:1e:91:d2:b8:36:0e:25:a9:c8:d2:7b:00:9e:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8B:CF:21:97:93:5A:FB:05:A1:0F:3A:0B:69:0F:31:89:8B:D1:AE
X509v3 Authority Key Identifier:
keyid:95:AE:8B:D3:32:49:CF:1E:D5:F0:D4:39:81:47:EF:D3:2D:25:42:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/la6L0zJJzx7V8NQ5gUfv0y0lQho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e27d9b-931a-488b-ac35-8ffbd6c73bf5/1/la6L0zJJzx7V8NQ5gUfv0y0lQho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ec:dd:80:10:fe:77:60:54:17:ba:20:85:43:12:4f:b3:ee:
e6:a7:14:3b:dd:22:87:61:9c:40:15:56:a7:6f:2f:17:67:19:
70:05:25:f6:59:13:bb:7d:bc:1a:c6:91:19:05:e4:5d:28:82:
80:aa:6a:da:56:3e:a6:72:dd:6f:d4:dd:a7:59:96:b9:22:80:
28:ed:b3:6b:c5:78:c9:a0:10:0b:18:e6:eb:be:01:45:bd:d0:
78:25:a5:43:5d:91:af:ad:9e:f4:11:33:14:79:46:14:35:b7:
3d:6b:eb:de:6f:1d:81:25:fe:a9:1d:7d:d1:68:c4:43:14:6b:
e4:f7:d6:07:86:65:0d:53:5a:3a:9e:f5:ca:87:56:df:f2:15:
a8:b8:cb:24:67:e8:01:a0:4e:11:59:d7:98:3a:93:76:69:7e:
fd:39:fb:b5:52:f8:52:da:c6:fc:c0:09:67:08:05:c0:0e:64:
b4:99:85:1f:3a:da:bb:f2:78:df:17:bc:67:39:d3:e5:cd:ea:
f9:0d:9d:09:c2:72:76:50:69:44:fd:da:0c:2b:a9:3b:e7:57:
49:99:cc:86:d5:a7:b9:ce:68:cf:46:12:f7:fe:9d:1d:7c:a2:
b4:95:49:e5:31:36:1e:86:a8:d4:6f:8c:66:9b:28:4b:f9:b5:
5b:1c:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:50 2025 by rpki-client