Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File: 5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier: S6LMkI3h9cXciE2mR6YcX6F5B5jhkKWvFwxQQsuMZa0=
Subject key identifier: E7:B7:BB:F2:72:35:B8:F0:9E:C1:BE:6C:F2:56:50:F6:A8:24:EC:0A
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer: /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial: 019510FDAC1166C7584C214AF0D2958CA77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number: 013D
Signing time: Sun 16 Feb 2025 23:00:14 +0000
Manifest this update: Sun 16 Feb 2025 23:00:14 +0000
Manifest next update: Mon 17 Feb 2025 23:00:14 +0000
Files and hashes: 1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: awW5qQ8uYhhy9l43WZid/BR9oX1BkMZbBJnXWQdqFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ac:11:66:c7:58:4c:21:4a:f0:d2:95:8c:a7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
Validity
Not Before: Feb 16 23:00:14 2025 GMT
Not After : Feb 17 23:00:14 2025 GMT
Subject: CN=e7b7bbf27235b8f09ec1be6cf25650f6a824ec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:70:1f:79:14:96:75:59:94:30:1e:53:b9:
6e:24:9b:22:04:ac:22:e7:de:ac:04:04:8b:68:dd:
a5:bc:a1:b3:41:83:65:b8:fa:e5:fb:40:38:7b:6a:
5f:a4:97:db:b1:7f:18:4a:b8:f4:49:f1:14:01:44:
b9:77:9a:fa:74:bf:85:10:76:56:4a:f3:f1:ce:85:
3c:bd:a7:83:10:97:ea:d1:35:86:b6:68:54:f9:29:
a5:9b:6f:29:27:ec:ff:9f:25:ca:65:f5:ff:bf:cd:
25:7b:66:03:2a:e9:11:cd:60:b8:58:3a:e3:d4:b8:
ef:59:ce:32:d2:b2:4a:6d:b4:b6:cb:7e:39:8b:ed:
aa:ca:d6:a4:2e:2f:58:41:df:34:90:5d:b3:6b:66:
04:30:85:14:a2:08:65:bd:77:d9:e3:f7:94:f2:1c:
93:c7:3b:3a:93:f4:82:8d:de:27:b0:1c:49:26:9f:
b2:42:bf:4c:14:54:51:e3:da:02:28:f6:6f:bd:63:
3c:dd:87:8e:6d:a0:8b:85:90:c3:85:97:0a:9c:5d:
71:98:8f:b2:f4:c2:8b:8a:88:63:fb:51:e4:4a:21:
f1:37:e5:93:0e:bf:1c:68:a3:06:b4:c6:63:80:4e:
51:f4:42:a4:b5:29:0d:b2:74:89:7c:f7:f4:93:45:
08:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:BB:F2:72:35:B8:F0:9E:C1:BE:6C:F2:56:50:F6:A8:24:EC:0A
X509v3 Authority Key Identifier:
keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a2:2c:83:78:bf:24:81:71:3f:7d:e8:74:18:bc:34:8c:ef:
24:22:98:87:62:1d:63:f0:70:f9:44:76:a5:51:e9:3f:e2:93:
12:a4:f5:32:db:f7:63:b6:0d:22:06:23:16:a1:14:3f:e0:49:
17:d4:6e:6d:cd:50:b8:ad:9c:84:48:ec:51:98:7b:75:58:18:
2b:dc:55:6c:6e:0c:d1:52:6e:9c:c4:5e:c4:3e:c0:f8:cf:02:
f4:0f:5c:de:b6:44:9f:9e:0b:6f:b0:b0:2c:f0:75:1f:4d:95:
33:31:f4:ec:83:e7:c9:81:93:30:d5:27:d6:4b:bf:cb:9c:c0:
db:66:e7:93:3e:1a:63:4e:34:2e:54:c5:c9:80:82:aa:42:dd:
32:1d:bb:d5:31:fc:f8:d8:08:84:f2:f6:d0:a7:24:cf:8d:1f:
28:43:c3:2a:37:33:1d:c9:85:5b:30:f6:9e:96:12:b0:9d:91:
8b:b0:bc:20:f9:a9:ef:c9:b5:90:1f:f7:f7:64:54:69:5e:b7:
73:bf:7b:c3:f8:c9:68:98:33:f6:88:e3:29:99:78:02:01:47:
37:a9:b5:b1:9b:7a:f7:ad:b1:23:55:69:73:98:90:ff:8a:e7:
ec:3e:59:b3:04:88:05:f8:2b:cd:c4:6f:de:bd:12:95:c8:81:
43:fd:9d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:52 2025 by rpki-client