Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
File: L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft (raw, json)
Hash identifier: WjWvrX+oTHLZAKJun+cG4l4dYir5D1jN3p55CDjPo2w=
Subject key identifier: 8A:F5:73:59:FF:89:F5:0A:A8:90:23:A9:F3:B6:27:5A:E5:BE:29:50
Authority key identifier: 2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
Certificate issuer: /CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Certificate serial: 01958B4DC28D895DE1C10D61704F729A0C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
Manifest number: 147E
Signing time: Wed 12 Mar 2025 17:01:23 +0000
Manifest this update: Wed 12 Mar 2025 17:01:23 +0000
Manifest next update: Thu 13 Mar 2025 17:01:23 +0000
Files and hashes: 1: L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl (hash: HMRZD7v7brEkJNLcqPc76/JROauOD5bRIrGshvMpxFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:c2:8d:89:5d:e1:c1:0d:61:70:4f:72:9a:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5fab5c9a4e138032e5b300ea3edd9e4d2b6901
Validity
Not Before: Mar 12 17:01:23 2025 GMT
Not After : Mar 13 17:01:23 2025 GMT
Subject: CN=8af57359ff89f50aa89023a9f3b6275ae5be2950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:43:8a:f5:7f:5d:81:e4:fc:ba:a5:96:73:
7c:b2:59:25:0a:bb:a7:0f:17:4a:c7:6f:26:20:ff:
17:6d:b6:18:8a:ac:61:24:64:e1:15:29:07:07:b7:
6e:15:f2:30:7b:1d:b2:d1:2d:33:4c:35:bc:8a:d1:
51:f5:fe:31:10:43:40:d7:be:ae:a3:3b:04:7c:0e:
51:41:d4:b7:ba:aa:46:ce:1b:56:bd:e8:7a:c3:5c:
5b:19:b5:35:a6:c9:73:4d:36:46:da:46:a9:20:29:
f3:8b:eb:03:26:d0:d5:5a:70:8b:7e:c1:ec:2a:89:
49:d7:0f:0f:9f:15:7e:f0:81:d6:49:fe:31:43:56:
c5:64:2f:97:24:4e:21:85:04:ec:ad:57:b2:50:b7:
5a:7e:18:c7:f3:64:c1:02:d5:92:20:96:d4:37:f3:
ca:47:a3:5e:e8:05:98:49:7f:5e:f6:5a:70:5c:db:
17:c2:3e:47:1b:9d:0b:7a:8a:e0:32:84:36:2e:d9:
bb:f0:61:36:fc:60:27:29:e5:f5:6e:86:c2:42:06:
44:9e:f0:5a:cd:00:0e:6d:19:fc:1f:39:8a:2e:1a:
4e:c5:e6:a5:80:a8:3a:92:f5:f2:be:14:40:ce:6c:
e8:65:f0:b1:f8:96:39:2a:1b:18:9d:a8:99:e3:06:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F5:73:59:FF:89:F5:0A:A8:90:23:A9:F3:B6:27:5A:E5:BE:29:50
X509v3 Authority Key Identifier:
keyid:2F:5F:AB:5C:9A:4E:13:80:32:E5:B3:00:EA:3E:DD:9E:4D:2B:69:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1-rXJpOE4Ay5bMA6j7dnk0raQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/9000e0-69d8-413e-b2a3-aa52c00de9c1/1/L1-rXJpOE4Ay5bMA6j7dnk0raQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:69:8d:51:2a:3f:f4:f1:f9:82:83:1a:dd:3d:81:4d:02:
cf:2a:38:0e:44:55:9c:2c:e9:dd:7b:7a:3b:a7:cc:0c:8e:96:
f1:21:71:8e:ff:16:76:8e:3a:50:a6:95:dc:e5:a9:b4:11:bc:
84:70:27:fb:95:16:9c:1b:9f:26:b2:d8:34:0a:13:88:8b:ae:
ae:c5:07:41:ff:5c:7e:d5:be:e2:47:c3:c1:f9:ce:c7:d9:d1:
5a:20:6b:6b:0b:2a:17:df:ea:ff:1e:79:0f:f3:27:dd:d9:45:
59:f6:33:15:5f:05:51:d5:69:78:9f:4f:46:0b:57:03:54:37:
8f:f7:4c:65:1d:07:e6:5b:13:f8:b0:0d:13:24:e7:c2:7b:75:
49:e7:2c:8a:25:1e:16:58:7f:dd:4f:5c:2a:82:cf:8d:4b:5a:
79:2a:54:3a:74:83:15:99:7f:df:71:45:6e:a6:67:28:5f:03:
44:f1:d1:d6:38:b9:f9:b3:77:46:31:33:80:58:1d:f0:82:94:
20:91:6a:d4:9d:e9:65:3f:ee:27:bb:bf:f4:37:d5:39:e9:e2:
fe:f9:22:b6:b5:07:92:72:67:ed:a2:0c:3d:47:5a:40:33:f6:
ac:ed:0d:a0:48:4c:dc:3e:a3:f8:6c:b1:55:17:c4:0d:f6:6d:
ea:ce:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:08 2025 by rpki-client