Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: oGORO+ypKpApwt0HS3Td/WOQq/sftUyApOvzd3EdTLY=
Subject key identifier: 19:27:35:C5:9A:6D:C9:51:AF:0A:57:10:4F:DA:AE:D7:96:8F:5B:26
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019510C6B7343996EB9DB06D6142C0DBCB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:13 +0000
Manifest this update: Sun 16 Feb 2025 22:00:13 +0000
Manifest next update: Mon 17 Feb 2025 22:00:13 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: /U+eC/1LX+yR5uHgti7MJrKGeQnXxmGAhAkkcJBRUFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:b7:34:39:96:eb:9d:b0:6d:61:42:c0:db:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Feb 16 22:00:13 2025 GMT
Not After : Feb 17 22:00:13 2025 GMT
Subject: CN=192735c59a6dc951af0a57104fdaaed7968f5b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:cd:df:60:17:6b:ae:a7:9e:45:cd:49:2e:
c2:2d:cb:86:dd:94:65:a7:51:61:c8:cc:02:3d:0d:
23:9b:60:49:a9:7b:93:fc:9e:ba:55:d3:d8:4f:c1:
89:42:08:ba:08:90:3b:a5:e3:71:f3:72:ac:0e:55:
9d:f4:03:e3:73:c5:cb:5b:5a:d9:61:cf:bb:f8:b8:
6a:54:d2:e0:64:52:5a:4d:7d:9c:81:64:4b:d3:fe:
52:86:12:1c:15:c9:05:af:53:3e:06:21:25:85:e0:
18:2c:aa:94:19:1a:2a:75:0b:b7:bd:1f:e8:1c:6d:
c7:a6:67:0e:7a:5e:86:78:de:a7:a4:3a:fc:52:80:
dc:31:ab:d4:be:98:62:c6:e3:c7:fa:8f:ca:19:d8:
63:e9:da:26:47:4d:30:1d:35:a2:4c:97:31:e8:e1:
bb:75:04:37:81:5c:e3:2f:e7:f4:74:fa:5b:e7:16:
fa:35:80:11:0e:0f:d0:3d:80:36:dc:c9:cf:bb:36:
8a:4f:6d:8f:a3:50:3c:8e:dd:bd:fa:9b:3f:cd:a6:
b8:1c:8a:9c:a4:3a:79:c4:b2:0f:ae:dc:e8:68:69:
b1:c0:e1:c0:43:0b:c6:cd:b4:be:a2:49:e8:a3:9b:
22:c5:9a:dd:68:cb:53:e5:c7:29:53:3d:00:fe:14:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:35:C5:9A:6D:C9:51:AF:0A:57:10:4F:DA:AE:D7:96:8F:5B:26
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:41:49:a2:ae:4b:68:a6:bb:75:90:54:5e:49:0f:50:a7:03:
cf:d8:9d:a4:79:74:a1:da:19:81:81:77:65:03:2d:f5:d0:2f:
dc:f3:ae:8b:19:9b:94:40:bf:b5:3e:37:7c:e0:42:e6:c4:da:
91:e5:aa:46:3c:0a:62:eb:f2:55:51:15:5d:ff:f2:ee:13:a0:
a5:e0:bf:ac:36:71:f6:9c:17:9e:ea:bd:c8:3d:89:b7:3f:5a:
80:0d:af:5d:d6:02:86:86:90:c3:7a:ff:d7:28:0f:a4:07:bb:
07:27:fa:24:21:3a:d5:d0:95:14:b5:fc:54:67:0f:bb:ad:91:
d0:31:1e:7c:f0:fa:9d:7d:57:0c:23:cb:2a:46:cb:19:8a:97:
92:de:2d:0c:7c:3a:b8:45:77:d4:c8:75:0a:6e:f7:34:02:65:
99:52:6e:37:3f:02:fe:cc:99:ad:78:7c:41:d2:d4:1d:48:f0:
61:a0:0b:44:48:99:f0:40:6a:e1:27:56:80:d5:cb:6d:97:c1:
f7:0b:70:f3:be:6d:24:d5:b1:45:24:44:34:47:03:a7:a0:e0:
cc:b7:1f:9a:79:34:cb:72:6e:c1:7e:a5:20:15:a5:95:dc:1f:
b5:6b:66:5e:eb:38:c9:30:b5:2f:87:2f:25:0d:c5:c9:f2:84:
24:c5:e7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:14 2025 by rpki-client