Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: 01ZZYd5iVWxWYroTBL+nizxsyTLW04dMinqw4YJXDEo=
Subject key identifier: B2:7E:9D:FF:44:CA:2E:72:BC:76:0F:67:7B:6A:BF:C0:62:59:7B:09
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 01951210874DD29CCFE8EC2981CB05F9DE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:27 +0000
Manifest this update: Mon 17 Feb 2025 04:00:27 +0000
Manifest next update: Tue 18 Feb 2025 04:00:27 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: KYzmgNluMDa1umtvBSlrJKoe7WB5JOrGWkDejnsuWLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:87:4d:d2:9c:cf:e8:ec:29:81:cb:05:f9:de:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Feb 17 04:00:27 2025 GMT
Not After : Feb 18 04:00:27 2025 GMT
Subject: CN=b27e9dff44ca2e72bc760f677b6abfc062597b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:a1:3f:fe:bc:08:63:ad:1a:1d:dc:6f:76:
b9:ee:f4:83:52:14:70:1f:73:31:2c:cc:76:34:0c:
dd:eb:3c:57:fe:2b:b8:61:94:74:3c:99:50:a0:15:
e0:c7:17:45:11:d4:14:47:47:9c:0c:72:4b:13:2e:
34:fc:2f:93:95:7a:b1:c2:be:fa:1a:d4:02:81:4d:
d3:db:f7:e9:b0:5e:6a:4a:da:ba:7c:7c:9b:8a:c1:
20:9c:8f:24:5e:2a:ea:45:e9:10:f5:93:89:8e:b9:
9b:c8:95:d9:c6:38:94:47:b2:b2:92:7f:3f:94:6c:
a0:de:84:38:4f:c0:12:a8:9f:26:d9:f4:65:2b:e6:
96:7f:f8:e8:16:d3:d5:5d:e2:cc:31:4e:a1:ca:67:
30:49:ed:aa:4f:ae:b3:f9:21:20:22:e5:cc:db:57:
40:97:9b:10:4c:c8:8f:f6:75:17:bd:7b:92:b7:86:
f7:dc:36:24:14:2b:80:d9:46:ab:d3:24:42:d0:6f:
4e:71:81:2d:22:bd:b5:90:75:38:10:91:fe:a0:06:
03:73:67:11:65:95:92:7d:1e:f7:f3:ec:0b:b5:10:
e5:0a:72:2b:f4:7e:38:0f:68:f9:88:56:b9:06:30:
b1:89:43:ce:ca:49:ef:a5:0a:42:12:39:86:00:1a:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7E:9D:FF:44:CA:2E:72:BC:76:0F:67:7B:6A:BF:C0:62:59:7B:09
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:00:a2:b4:7e:50:7d:60:fd:d6:99:87:94:6b:87:ab:2c:
1f:93:fe:76:77:7b:5d:eb:eb:be:81:92:5f:47:a1:df:98:99:
09:a0:6f:a8:71:0f:6a:c5:f0:e3:03:7f:ba:e6:1a:8d:f6:b1:
0a:10:dd:1b:ac:54:3d:cf:71:69:08:89:76:bc:18:73:7f:eb:
12:7f:4b:01:e2:74:a9:73:f1:52:25:1a:79:e0:91:73:bb:78:
49:9f:2d:7a:4b:c1:e4:6c:86:6a:1f:01:bb:a6:bb:49:09:11:
a5:02:41:c8:d7:1f:0a:94:e2:8e:f5:b8:5b:9a:a0:8d:c6:b4:
59:ec:28:df:d6:80:00:f7:ed:02:e1:e0:0e:7d:60:6d:47:3b:
4e:2a:e7:80:6a:55:72:9f:bd:3f:e9:ef:cb:ea:e3:75:59:7e:
8b:b3:f9:39:09:3b:e1:54:9f:99:4b:5d:06:0e:7c:ea:dd:29:
7f:b9:b4:64:40:ff:6e:e8:5c:c6:d7:bd:fb:8d:27:54:f6:f5:
7b:94:49:8b:ab:68:78:8a:b5:04:e3:db:98:04:ea:8e:ba:c6:
1a:9e:89:44:5d:76:ac:70:41:1c:f8:d8:ae:60:e1:f8:dd:6a:
72:3d:9b:33:a0:b2:60:be:6d:af:cb:68:6f:f8:71:55:41:7e:
32:84:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:49 2025 by rpki-client