Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: k8VqaO22zv10TDqV1uCR8orM3+FyMy0w8KPe06hozEM=
Subject key identifier: 50:E2:CB:D9:BB:CD:33:4A:F0:80:FB:6A:C6:1A:44:BC:E6:37:40:65
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 019510C68DAFA10ED4927C4D39C96512D463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 1450
Signing time: Sun 16 Feb 2025 22:00:02 +0000
Manifest this update: Sun 16 Feb 2025 22:00:02 +0000
Manifest next update: Mon 17 Feb 2025 22:00:02 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: baCwe+ve7e/6cydNPO9GOWZkRspWeXqC7nI/cDhccRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:8d:af:a1:0e:d4:92:7c:4d:39:c9:65:12:d4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Feb 16 22:00:02 2025 GMT
Not After : Feb 17 22:00:02 2025 GMT
Subject: CN=50e2cbd9bbcd334af080fb6ac61a44bce6374065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:69:25:9d:38:fa:0e:1b:f8:2a:70:b7:31:
5b:85:9d:c7:96:5d:06:1a:73:46:90:10:c3:06:b2:
50:5d:fd:82:8d:75:71:a8:f5:02:95:6d:cb:1d:83:
fc:1b:06:e5:88:19:96:91:1c:28:76:bb:31:a8:d3:
10:19:91:ef:c0:3a:00:b5:27:83:7a:f4:f2:ca:77:
ae:f0:8e:71:92:c5:c8:88:75:84:a3:05:03:e3:35:
81:b3:78:c0:80:af:b4:6b:fb:45:e6:13:52:ee:35:
ca:32:29:6a:e9:54:64:a4:46:0c:f5:f8:ff:31:59:
07:ee:b8:28:23:68:4e:f9:cf:a6:50:bd:84:a9:5e:
30:a7:5c:4f:67:d8:b0:42:40:70:f8:72:9a:97:5e:
2c:5e:44:d0:64:8c:e0:a8:37:47:74:3b:f5:b4:23:
81:54:b2:bb:99:91:5e:a4:81:e9:fc:85:80:77:0d:
ec:e0:bf:57:a5:c8:32:56:b7:fb:45:0e:34:c5:db:
a7:2e:62:88:28:e5:b8:f6:51:85:b0:e8:6d:f1:b9:
9f:49:d3:2e:4d:1a:18:53:8b:41:fa:09:2a:84:54:
de:40:57:cf:96:e1:27:5d:68:30:ec:5e:f5:10:35:
39:ce:9c:0a:63:ab:f5:c5:d5:f8:57:12:50:a5:2a:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E2:CB:D9:BB:CD:33:4A:F0:80:FB:6A:C6:1A:44:BC:E6:37:40:65
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:8c:72:b0:6b:75:d3:2b:0c:54:11:a2:30:ac:0e:1b:39:
47:62:93:ac:76:0d:47:2a:6c:fb:bb:83:88:cb:88:2a:92:f9:
76:14:08:1b:2d:af:82:4d:1c:76:21:cd:55:93:0e:ae:6c:f7:
a3:36:83:69:d6:3d:51:7b:17:a8:bc:02:9e:fd:4e:75:8d:45:
da:cb:22:5b:c4:3c:0f:ea:f7:03:ed:60:47:f7:2e:4a:e3:d5:
8d:73:85:c1:a2:95:32:0f:b5:54:0c:8e:83:f1:7d:fd:02:2b:
4c:7f:2a:a4:51:a2:91:3b:08:db:bd:71:eb:1f:9a:21:ca:8b:
92:83:5e:9b:da:6d:fe:12:75:42:37:56:e9:47:1a:42:cc:5b:
da:5e:15:81:76:92:93:ce:fd:b5:48:dd:1c:bf:e8:b9:1a:53:
26:26:b3:a1:a8:ce:a8:00:a6:7a:c9:ed:64:4b:33:b2:28:92:
e2:04:9d:f1:22:94:d4:13:75:c1:4b:6e:75:82:39:ef:64:49:
3c:cf:9d:e7:85:ba:aa:6f:85:77:98:b6:62:f4:ed:7e:80:33:
87:21:67:cb:70:7b:42:13:1d:7c:8d:1f:93:f2:2d:59:57:46:
87:c9:00:b9:a6:38:b3:0f:9c:4c:cd:61:39:d1:aa:28:37:bf:
a5:5e:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:51 2025 by rpki-client