Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: 1yl3BQ9mKqPtiLjsKk+t8ISxLyZptfuCvzVstTXrs2s=
Subject key identifier: 64:09:A8:0C:18:5E:1B:DF:CB:59:76:D5:AD:93:2D:4E:4E:3C:B6:AB
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 01951134BAAB7881354B8E6151BAEBB3313E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0662
Signing time: Mon 17 Feb 2025 00:00:23 +0000
Manifest this update: Mon 17 Feb 2025 00:00:23 +0000
Manifest next update: Tue 18 Feb 2025 00:00:23 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: v9HDjMXYxIqc/I9cik7gUxlJkkprVZzC61nXUGb/3ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ba:ab:78:81:35:4b:8e:61:51:ba:eb:b3:31:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Feb 17 00:00:23 2025 GMT
Not After : Feb 18 00:00:23 2025 GMT
Subject: CN=6409a80c185e1bdfcb5976d5ad932d4e4e3cb6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:d2:26:ae:e4:b5:9a:bc:15:17:21:8f:f6:
45:56:54:24:ab:50:f9:f7:88:1d:c4:5c:f8:1a:f7:
84:05:d9:3f:07:6f:1c:ca:ca:4e:66:72:a0:e6:3a:
6e:f9:9a:6e:0e:7c:1b:0e:e1:9f:88:0f:c3:1a:da:
24:f1:a0:3c:94:a1:ab:d3:13:21:53:8d:d6:5a:7c:
72:d1:d8:33:ff:a6:21:a3:96:53:62:46:f8:f7:74:
61:b0:91:af:2c:33:ab:86:3d:e1:14:55:2b:9f:14:
7d:4a:d5:b5:32:f2:e8:f8:f8:88:b7:5d:61:d6:1a:
da:38:1f:04:bf:5a:5b:f1:29:68:76:62:83:2c:64:
13:83:2b:3c:17:8b:8b:54:78:27:b6:4d:38:fe:ea:
e8:38:29:b5:46:c2:9e:f1:d3:23:ac:ac:ec:37:8c:
1a:7a:cf:29:90:c4:ed:92:53:05:61:7c:8f:cc:5f:
c9:f1:d2:67:d8:db:eb:e1:8a:b2:71:74:5a:54:d6:
ac:1d:88:59:16:62:83:52:72:f9:64:87:ef:44:f1:
1b:6f:b8:e5:e2:59:ac:e3:c2:3d:71:db:c0:cc:23:
24:98:71:20:ea:3f:36:9f:1e:5c:96:ff:1a:28:27:
e8:e9:7f:39:85:12:2b:19:88:0f:d8:85:09:24:94:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:A8:0C:18:5E:1B:DF:CB:59:76:D5:AD:93:2D:4E:4E:3C:B6:AB
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:09:a4:95:3c:0f:ad:40:58:0b:2c:3a:22:2b:db:66:c2:48:
ea:0b:60:e9:1e:1c:0e:5f:ec:fc:88:21:bd:c5:84:62:e5:2c:
72:47:ed:de:6f:8d:51:6d:48:4e:0b:9a:e8:b0:bc:e2:3d:c8:
bb:68:1e:98:87:7a:c4:e8:be:7e:a7:29:fc:76:dc:8b:98:cc:
9a:4f:58:ca:39:0d:5d:51:60:25:1f:7f:0d:ec:c6:cf:61:7f:
b7:2b:cd:21:d9:1c:93:dd:d3:fd:d3:0b:8f:62:03:b5:6d:37:
fc:f2:f7:d6:ea:f6:3c:9a:59:9b:a8:08:c5:45:ea:aa:f1:ef:
e3:ce:19:1b:d9:9e:f5:65:de:c8:50:b2:fc:7b:0e:a3:e5:5b:
bb:a7:7a:6a:80:85:b7:33:44:e3:76:7b:ec:31:0e:61:5f:54:
ef:c9:e8:d5:5c:13:b1:fb:6b:23:93:b2:25:2a:f3:5b:ee:60:
d3:b4:66:bc:ab:7e:36:79:15:ff:c1:55:e8:d5:cd:a7:4b:71:
bc:d7:1d:ae:3f:f9:58:99:eb:53:7c:7a:49:81:43:dd:ff:da:
e3:b7:91:63:0e:63:b2:c1:b9:fe:72:7c:0f:ef:6d:9b:38:b5:
b9:0f:72:93:a9:11:e0:ac:8e:78:36:4a:42:3f:63:4a:b4:f1:
a9:10:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:05 2025 by rpki-client