Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File: l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier: wGamoPSNNDl/I9VhR4vaq3B11dTXzQ0w0jZpaKO453k=
Subject key identifier: A7:44:71:41:98:B3:E1:43:80:02:D0:B1:9F:A6:87:53:76:81:76:79
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer: /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial: 019510C7642F8252764C4BEF3FD628A03933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number: 045A
Signing time: Sun 16 Feb 2025 22:00:57 +0000
Manifest this update: Sun 16 Feb 2025 22:00:57 +0000
Manifest next update: Mon 17 Feb 2025 22:00:57 +0000
Files and hashes: 1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: oFvGYDYTbDi0owwD5GHAjsVkSaybkNxq3EiScwZRpEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:64:2f:82:52:76:4c:4b:ef:3f:d6:28:a0:39:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
Validity
Not Before: Feb 16 22:00:57 2025 GMT
Not After : Feb 17 22:00:57 2025 GMT
Subject: CN=a744714198b3e1438002d0b19fa6875376817679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:fc:fa:15:e6:df:5c:30:05:7d:71:67:b9:
05:6c:c4:be:82:25:f1:d6:2c:20:5b:97:45:4d:5b:
16:8d:cd:9f:18:d0:bd:6c:fa:1f:0e:5a:b2:94:18:
ee:f1:63:37:b7:03:e3:fb:10:23:7c:5b:b3:6f:7b:
94:ed:e0:9d:a3:f1:ab:25:7e:5e:cf:da:66:8b:da:
66:3b:c0:56:55:e8:bf:99:01:ac:3d:31:b4:09:08:
f9:78:14:b1:a2:0d:d2:c5:d5:99:b0:4a:95:80:0e:
b1:d3:c7:66:2e:1e:94:45:d4:cb:f5:55:fd:83:98:
9c:be:2b:b8:99:c5:2a:bb:89:89:3f:e1:9e:56:55:
e5:22:9f:cb:62:8f:c7:01:9a:70:25:6c:73:fc:72:
00:ae:86:c7:4c:3b:aa:2d:1f:71:14:e8:81:a3:e7:
f8:1b:52:c1:3a:3e:11:8d:e1:77:a6:7d:19:79:02:
61:a9:0e:d3:0e:03:b7:dc:ea:87:2b:3c:a8:65:a0:
73:e5:d1:0a:82:8c:ed:da:60:f6:07:97:3f:fa:51:
1b:fc:ac:a0:94:79:fe:a6:46:8b:d8:1e:85:24:87:
2f:2d:8e:53:9f:aa:09:fa:07:e1:59:75:74:b0:e8:
34:af:e4:90:cd:85:d3:4a:9d:95:0e:d3:30:81:7b:
a2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:71:41:98:B3:E1:43:80:02:D0:B1:9F:A6:87:53:76:81:76:79
X509v3 Authority Key Identifier:
keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d4:7e:96:26:9c:17:4b:b0:00:08:62:ab:eb:f5:c4:66:e3:
71:1f:aa:4d:39:15:3e:b8:f3:d0:69:c0:b3:36:9c:61:bb:4f:
22:46:ea:c4:04:72:3b:28:e3:f8:45:6e:05:05:39:70:48:a2:
a7:69:eb:10:47:7f:93:6f:6d:6f:95:25:d4:e6:50:e3:36:ab:
2d:1f:f9:a1:35:20:02:94:72:a5:e8:6b:03:47:d8:77:29:9f:
5c:9b:c9:d5:8d:94:c8:73:8b:fb:79:aa:c8:b8:bb:b0:ef:ac:
8a:c8:0d:58:a6:55:76:8d:5a:de:7e:a2:e3:b7:69:b8:97:cb:
23:62:03:54:1b:2e:95:11:9b:9a:ab:10:d6:56:5a:9a:47:a0:
02:c5:8e:41:26:fa:3f:44:cc:0f:6b:93:92:c1:8a:7d:4d:48:
77:99:a2:99:b8:8c:9d:df:aa:ac:2c:3e:d2:f1:85:b7:e0:04:
20:9a:bc:eb:6f:9d:f0:0b:33:98:b0:75:ff:c9:6e:da:c4:48:
15:f3:c3:39:19:60:8e:ba:92:8b:14:c3:2e:85:bf:cb:8d:c3:
78:d1:95:9e:79:5f:cd:a1:7c:a5:cf:71:0c:34:bc:4f:45:44:
d6:66:e9:ec:90:d5:e2:ae:64:0c:68:73:78:b4:fe:40:e7:ea:
ad:b0:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:28 2025 by rpki-client