Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: Z/X7pmxA0kSQQGAXuGl693UoT2AZk3xXBkXleTfrwEM=
Subject key identifier: 1A:D6:54:41:34:F6:14:33:3C:22:90:2D:C8:8F:DD:AC:15:D9:88:DF
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019511A283E9229161E371005D07F2DFC322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0B28
Signing time: Mon 17 Feb 2025 02:00:18 +0000
Manifest this update: Mon 17 Feb 2025 02:00:18 +0000
Manifest next update: Tue 18 Feb 2025 02:00:18 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: jtRDyb0Pf2Pn7MiPUud59fmxBNGubiqaZGZhvF0KslE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:83:e9:22:91:61:e3:71:00:5d:07:f2:df:c3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Feb 17 02:00:18 2025 GMT
Not After : Feb 18 02:00:18 2025 GMT
Subject: CN=1ad6544134f614333c22902dc88fddac15d988df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:3c:11:5b:4f:28:de:f6:19:a7:23:a6:bf:
a7:2f:fa:05:9a:d0:ee:90:0c:41:89:68:98:51:5e:
d8:ad:aa:91:71:39:c1:ae:a4:82:54:a8:12:4b:94:
94:00:15:24:43:45:8e:92:68:da:44:3d:21:60:61:
c8:c6:52:7b:72:89:7b:fa:5a:d7:c2:05:f8:e4:1b:
5d:bc:1f:ea:3b:2f:9e:4e:39:57:bc:8b:2c:c8:9e:
1d:47:fe:d7:37:c7:d0:5d:d1:a2:a7:60:9a:0e:41:
2d:d0:bc:d1:39:e0:7f:41:a9:f0:1c:e1:b5:50:8c:
06:9c:02:f0:ef:4b:19:8d:71:e1:ea:e2:b2:02:05:
99:ae:70:78:61:a3:0f:b2:6a:92:7f:a7:73:f5:1b:
c0:2c:a8:e6:89:e3:2f:47:4d:d8:4c:07:57:58:36:
72:95:f8:72:3a:93:fa:87:39:5a:88:a5:43:a5:31:
a4:d9:c9:d3:c8:bd:86:a8:66:89:dc:e1:72:12:12:
45:8e:c4:2c:be:3a:db:56:78:17:81:f1:bb:66:0b:
74:d1:1c:24:ef:77:0f:c4:89:49:5e:26:27:94:9a:
4a:24:10:b3:91:ee:97:2f:e5:e7:a4:fb:bd:5d:61:
03:be:66:b6:a1:a0:59:5d:1c:6c:fb:72:28:b0:da:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D6:54:41:34:F6:14:33:3C:22:90:2D:C8:8F:DD:AC:15:D9:88:DF
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3c:02:77:62:55:20:27:df:56:1f:56:9b:ea:f9:75:69:db:
dd:81:95:39:73:39:1f:f1:58:fd:be:10:f4:3b:5b:7d:fc:bf:
2a:2f:73:9d:d2:bd:95:ef:e7:9a:18:c5:ff:ef:ae:98:a5:1a:
8d:04:e9:00:e9:ba:1e:e3:d0:cc:de:ac:b1:f6:b1:24:fa:59:
37:4f:be:c3:c2:de:9e:f5:41:9c:71:cc:88:65:15:ed:a5:dd:
6b:38:f2:a4:cf:ef:3a:aa:42:7c:e7:30:7e:45:fd:89:ea:7c:
72:1c:bc:3d:fb:02:a6:b1:ca:19:f7:64:b1:68:d1:76:80:81:
ab:9e:95:07:ea:d4:d6:cf:23:cf:d9:d8:75:fb:65:d5:d2:60:
01:ce:ee:db:b8:e4:56:f9:f3:f7:ff:49:c7:33:ee:9c:e7:6d:
31:8a:85:22:a4:a0:0c:30:a3:eb:a9:22:0f:58:c6:c5:79:29:
50:31:8d:48:d6:06:82:8a:7b:d7:ee:c2:cf:1e:c5:ca:2e:5a:
64:5b:93:db:aa:ec:6e:a8:1b:c6:a0:be:56:5f:e2:86:91:11:
87:33:4d:40:d1:a2:28:dd:e6:bc:9f:31:02:3f:1b:54:d0:df:
55:20:31:84:dc:9f:2e:e8:3d:ee:cd:c7:30:39:1e:fd:89:9b:
46:28:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:13 2025 by rpki-client