Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
File: 57oqYl6OZaspsIlfWd3_5Qp8vHU.mft (raw, json)
Hash identifier: +m8SGjzrSmUcIVwBt51VVMO3csQ3PBVC9qKslgkBbAM=
Subject key identifier: 19:73:A6:AB:EC:88:3E:4D:D0:EB:6B:A8:5B:1E:61:75:2A:CF:76:38
Authority key identifier: E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75
Certificate issuer: /CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
Certificate serial: 0195116BC0FF673DB72AB2A648248ED5983A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
Manifest number: 1451
Signing time: Mon 17 Feb 2025 01:00:29 +0000
Manifest this update: Mon 17 Feb 2025 01:00:29 +0000
Manifest next update: Tue 18 Feb 2025 01:00:29 +0000
Files and hashes: 1: 57oqYl6OZaspsIlfWd3_5Qp8vHU.crl (hash: ZK4OZGPM5lVVoFetR7XSuoU5de6ebyA5hMKp7G2i/gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c0:ff:67:3d:b7:2a:b2:a6:48:24:8e:d5:98:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ba2a625e8e65ab29b0895f59ddffe50a7cbc75
Validity
Not Before: Feb 17 01:00:29 2025 GMT
Not After : Feb 18 01:00:29 2025 GMT
Subject: CN=1973a6abec883e4dd0eb6ba85b1e61752acf7638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:e7:7c:6b:c5:20:46:5b:ae:20:ac:e7:c0:
91:c4:6e:4d:6d:e9:89:59:ea:9f:00:ba:30:5a:60:
84:cb:a8:e2:d3:2f:d8:02:30:57:87:6e:5f:81:f8:
41:2a:bd:70:2b:00:cf:46:52:e3:8a:71:e3:97:7e:
c2:3b:b1:1c:cd:77:8a:b7:77:00:04:c0:ab:f7:8f:
21:28:50:ab:ea:15:35:62:dc:bb:9b:63:df:0d:75:
82:76:3d:fa:00:5b:45:3d:28:3c:ba:bb:82:a8:af:
2f:6d:63:70:35:99:da:3f:4d:38:d8:32:95:2e:7a:
ba:fc:ba:d4:8a:e7:77:b6:7f:29:7c:42:09:2f:31:
84:30:00:41:74:e5:2b:8e:38:3b:af:73:f0:ea:6e:
f0:0e:24:74:48:d0:2a:0c:50:4c:8a:4e:f4:af:f5:
96:51:97:82:5a:a1:b1:a0:66:80:1a:87:2b:27:14:
70:45:06:e2:e3:92:f8:cb:10:3d:94:3e:7a:92:c1:
89:12:b7:cd:c0:ab:ad:bd:9c:eb:b1:b4:c6:30:82:
05:45:09:52:f8:a6:36:c9:ac:e9:45:3a:1f:ff:4c:
e4:37:94:d9:47:99:b7:25:6b:c2:b4:35:2e:02:12:
f8:99:2a:4c:1a:77:16:ba:4e:f4:71:b1:7f:88:ff:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:73:A6:AB:EC:88:3E:4D:D0:EB:6B:A8:5B:1E:61:75:2A:CF:76:38
X509v3 Authority Key Identifier:
keyid:E7:BA:2A:62:5E:8E:65:AB:29:B0:89:5F:59:DD:FF:E5:0A:7C:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57oqYl6OZaspsIlfWd3_5Qp8vHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/5c7ac9-c916-48f5-a421-0297634afb7c/1/57oqYl6OZaspsIlfWd3_5Qp8vHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:f0:96:d1:be:be:47:3c:c7:0c:d0:5a:c6:5f:e3:90:f4:
fe:d6:fc:ae:8c:56:ca:47:c1:d1:3f:91:c3:bc:0b:c9:79:e7:
da:68:1d:e6:c6:10:97:89:d2:71:68:d5:58:cb:06:4e:79:85:
c6:4b:63:e6:84:3b:a6:a5:fd:f6:53:0d:3a:e0:5a:1e:9a:29:
bd:e8:73:9a:6f:81:45:75:e1:cd:67:79:c8:1c:23:9d:ec:8c:
29:77:d9:86:ef:0c:0b:1a:13:fd:bb:b4:69:5f:75:cf:b4:56:
4c:1d:a6:ba:49:2d:18:f3:4b:33:14:ea:1e:0f:cf:43:a4:c6:
27:96:4a:cf:f0:ad:8f:4e:bd:c5:91:73:9b:36:23:0b:66:83:
5e:41:a2:4c:f7:8e:76:51:08:9d:55:ec:0b:8e:9a:d5:af:25:
25:b9:18:70:ac:56:92:a0:bb:7f:66:fb:9d:7c:93:15:90:c9:
a8:31:16:26:f6:d3:98:c1:93:3e:57:69:75:cc:04:5f:7a:fc:
96:eb:ed:23:f0:be:e8:80:48:51:50:51:5a:e5:86:32:7b:f3:
58:e9:33:c6:50:cd:a9:cc:c1:1c:b3:f8:a6:f1:b8:4d:f3:7a:
50:66:c3:8e:46:d8:4a:08:80:98:8d:25:f2:db:9c:75:6f:7d:
76:3c:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:04 2025 by rpki-client