Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
File: leN5E1KsgsnSB0NCTNxhcAlvT68.mft (raw, json)
Hash identifier: TvCFf/ymoWIhDX8CzOO/E7UAAVOt++oBwSo45onKEog=
Subject key identifier: D4:97:B2:B7:72:44:B7:EC:8A:8E:71:61:A3:66:47:7F:C8:C5:50:4E
Authority key identifier: 95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
Certificate issuer: /CN=95e3791352ac82c9d20743424cdc6170096f4faf
Certificate serial: 019510C7F9C8BE610DA35D707949A99C9D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:01:35 +0000
Manifest this update: Sun 16 Feb 2025 22:01:35 +0000
Manifest next update: Mon 17 Feb 2025 22:01:35 +0000
Files and hashes: 1: leN5E1KsgsnSB0NCTNxhcAlvT68.crl (hash: HcJtr5neZAMwCL9+fCqxYb0eL0lziBQm7d9sg56+lHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:f9:c8:be:61:0d:a3:5d:70:79:49:a9:9c:9d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e3791352ac82c9d20743424cdc6170096f4faf
Validity
Not Before: Feb 16 22:01:35 2025 GMT
Not After : Feb 17 22:01:35 2025 GMT
Subject: CN=d497b2b77244b7ec8a8e7161a366477fc8c5504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:b9:c8:e9:db:dd:02:9e:19:3e:f6:f5:b2:
65:73:a6:38:e7:b2:9e:e7:ef:a2:ca:64:d0:d7:a3:
5d:d6:33:af:af:6a:c9:4c:a0:69:c3:41:8f:46:20:
0f:ad:79:75:d8:0f:c9:df:ac:f2:ef:59:18:1a:e0:
ae:87:c8:07:c5:18:55:2a:2a:35:de:6a:5f:c4:40:
af:d5:1a:4e:82:78:97:f6:e8:f0:98:7f:85:50:3e:
61:7b:25:56:e1:7d:6f:af:56:c8:05:45:ca:66:01:
66:60:f2:b3:aa:bd:3e:8a:0d:4c:f7:03:b1:85:76:
e8:dc:44:a6:27:6b:f6:ff:b5:3b:79:dd:2c:5c:2c:
78:b8:14:e6:06:03:fe:d2:a8:42:f4:16:0d:e5:a6:
78:f8:57:8d:25:d5:ec:6c:3d:67:4e:3e:68:18:c7:
55:68:df:93:cb:c0:1a:b8:c7:b2:31:e5:90:48:03:
30:06:5b:87:dc:27:84:53:01:8d:f0:3f:d1:43:d5:
71:e1:69:cc:c5:9d:84:81:65:b8:28:3b:0f:24:2b:
75:2b:fa:39:52:94:e3:45:cb:e8:6e:b0:c4:93:9a:
c2:57:77:70:5a:3c:cf:ce:e0:f9:08:42:7f:6b:38:
bc:8e:5a:2e:6c:3d:1c:3c:42:d5:01:05:e9:d4:ed:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:B2:B7:72:44:B7:EC:8A:8E:71:61:A3:66:47:7F:C8:C5:50:4E
X509v3 Authority Key Identifier:
keyid:95:E3:79:13:52:AC:82:C9:D2:07:43:42:4C:DC:61:70:09:6F:4F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leN5E1KsgsnSB0NCTNxhcAlvT68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1a472f-a137-42c9-ac9f-4c2c0c8f2462/1/leN5E1KsgsnSB0NCTNxhcAlvT68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:49:a8:74:0e:71:26:16:12:7e:a1:c5:bb:d9:91:42:30:38:
1a:26:9a:86:d5:5e:fe:16:a0:52:22:2f:db:5c:af:b5:d5:f2:
13:ca:83:49:98:04:cb:36:13:47:a3:2e:9c:b6:5a:78:84:33:
eb:35:6a:47:f8:a7:6a:6a:43:97:2a:80:e2:d1:b3:6f:19:eb:
06:36:15:2f:1c:02:b6:43:ff:24:e3:1e:0e:61:91:09:f9:74:
91:8b:7e:d6:e8:3f:01:8a:d7:a6:42:7f:b7:2f:3d:15:e8:36:
2f:a8:7a:19:53:b9:01:89:ee:09:2c:cb:6c:44:f1:8f:8b:9e:
a9:d9:54:88:31:4b:77:20:42:e3:9f:ea:ef:0d:41:2d:c2:08:
f2:a4:71:6f:e3:42:ee:bc:17:6e:fd:cd:59:d7:ea:04:3d:07:
22:3d:55:fb:9d:6f:88:8f:c7:11:52:22:2e:03:1b:ab:18:4e:
f8:cf:22:ac:29:a8:88:c9:bb:74:10:d6:c3:ab:7b:41:42:26:
66:a9:42:79:af:51:d5:ab:fc:c1:d3:b8:1b:de:ee:33:7e:6e:
84:28:7d:b6:0d:ac:96:c0:67:fb:99:82:e4:88:eb:3a:9a:a9:
a6:8c:55:77:5d:58:be:e3:21:58:5b:0d:49:5c:ed:05:08:d5:
e7:54:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:06 2025 by rpki-client