Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: 6Yd+J7+6QqflOkxZYApRajroBo0ZOl8tklIIcXzbkzQ=
Subject key identifier: E3:A7:26:E4:A8:D6:9C:2C:73:D4:33:05:10:40:28:2F:D0:2B:D1:19
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 019510C7B8455ECE470210CA0D99D5B533BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:01:19 +0000
Manifest this update: Sun 16 Feb 2025 22:01:19 +0000
Manifest next update: Mon 17 Feb 2025 22:01:19 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: vj2ARhNQTRuTE/HQzeLSOBFpTOon4VS9OL7+Wd4oLkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:b8:45:5e:ce:47:02:10:ca:0d:99:d5:b5:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Feb 16 22:01:19 2025 GMT
Not After : Feb 17 22:01:19 2025 GMT
Subject: CN=e3a726e4a8d69c2c73d433051040282fd02bd119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:88:c9:73:23:f3:a3:6f:a9:64:3f:b7:31:
12:88:6f:7e:3d:9f:11:a0:3b:67:f6:7c:05:d1:f0:
56:95:c3:6c:03:a8:a5:02:d8:9f:02:9e:88:3c:1a:
db:2d:0a:1c:4e:0b:20:71:4a:f7:61:cd:96:bd:28:
fe:b9:c7:2b:d4:4b:31:6e:cb:57:45:e4:d8:e2:ba:
78:50:5e:f5:58:85:c1:01:6a:e0:45:8f:b8:84:ce:
2a:43:aa:4f:f2:13:0f:b4:2e:99:ee:ba:5b:9d:40:
ee:a1:20:b4:34:50:cf:91:18:f3:9b:d6:bd:f4:3b:
c2:5a:6b:a7:ea:cb:21:d9:66:6e:6f:04:4d:db:5f:
dc:56:17:f8:ba:36:85:1b:5c:08:cd:52:36:4e:7c:
fe:4c:39:0e:21:68:8c:4e:19:4a:af:f4:d4:52:a5:
f9:70:67:94:73:23:2f:94:0b:e4:55:76:90:b5:0e:
33:59:58:3b:47:2d:b7:40:60:f7:33:2b:fb:89:1d:
8d:3c:30:b4:6f:82:59:81:a9:18:bc:e8:ff:4d:62:
1f:5b:67:c6:03:ed:dc:ba:b5:f2:6f:04:e4:51:cd:
c5:71:ff:ec:19:0e:a1:8b:d1:e4:bf:f0:43:ae:f6:
38:ac:c7:eb:0c:51:98:b8:0d:f3:62:9b:57:45:4b:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:26:E4:A8:D6:9C:2C:73:D4:33:05:10:40:28:2F:D0:2B:D1:19
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1e:b5:3d:ed:af:3c:c8:62:7c:4c:16:99:85:cd:f1:af:5f:
ba:c7:11:d5:5d:ee:62:e5:7d:c2:a5:de:4f:06:f9:ca:e9:4b:
c2:a2:94:b1:59:a9:5a:a3:1b:ea:55:e8:fc:e1:51:66:40:d5:
15:11:70:ed:fd:1a:29:5a:0a:41:2f:f6:83:42:de:26:7d:ec:
e3:6f:35:26:5a:b8:cf:b3:20:5b:5c:95:8a:bd:72:d1:1b:e5:
66:9b:f2:d4:4e:d4:7d:35:44:08:9c:4b:ef:2d:e0:f4:d2:20:
a0:1d:3c:40:5f:0e:21:f1:8d:cc:a2:7a:75:38:76:da:00:14:
14:bc:c6:17:95:cf:ce:84:ec:dd:65:03:ad:c3:d9:c0:87:d0:
ed:c0:a1:29:bc:4a:b9:02:ff:f0:59:b4:f3:3d:48:fc:35:a7:
46:b3:0a:14:cc:15:00:9a:be:c8:f6:fd:91:a6:83:07:82:8f:
e6:66:ad:33:d1:22:83:73:5a:6b:66:67:d6:97:f4:29:55:06:
e1:c6:bb:94:a3:0c:00:10:bb:3d:f2:4a:4b:c2:f5:49:cb:01:
d4:ef:16:95:f3:40:c5:d2:48:e0:7f:26:c0:d7:36:34:50:ee:
52:cf:de:32:4f:ec:a2:e0:c0:eb:72:4c:8b:f2:e7:1a:68:0b:
d9:5b:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:44 2025 by rpki-client