Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
File: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft (raw, json)
Hash identifier: yuPeLE+5uaRuSosYLiASGQ0P1wEbLJbhFRmPPajcpuI=
Subject key identifier: FB:CE:90:60:14:C0:77:97:9D:15:DE:45:BA:DA:B1:C9:AD:BD:BE:2E
Authority key identifier: 3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
Certificate issuer: /CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Certificate serial: 0195116B93AF023F362E93DB7C0E10A7A04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 01:00:17 +0000
Manifest this update: Mon 17 Feb 2025 01:00:17 +0000
Manifest next update: Tue 18 Feb 2025 01:00:17 +0000
Files and hashes: 1: PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl (hash: Dr0plMY2x4l47MZ5GM/ek4PfYR+AfoJZoKz8tL6Z4eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:93:af:02:3f:36:2e:93:db:7c:0e:10:a7:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f23ab7305304792dc2ce81780b5db889d8f7f3a
Validity
Not Before: Feb 17 01:00:17 2025 GMT
Not After : Feb 18 01:00:17 2025 GMT
Subject: CN=fbce906014c077979d15de45badab1c9adbdbe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:0b:90:fe:3b:16:df:f0:50:c6:88:fe:9f:
e0:05:2e:15:c3:dc:2e:ad:92:bc:a5:4b:36:17:8a:
e3:b4:96:ac:32:97:73:60:5c:93:48:1c:57:45:94:
bd:bc:80:ae:4b:ea:cc:2f:4f:d4:19:27:9e:10:8e:
96:72:3b:2e:55:ea:00:7e:ad:6a:68:90:7d:37:cb:
3f:ae:07:49:d3:c2:3e:d0:31:7b:1d:43:7f:22:04:
05:d9:84:67:a8:ca:f5:4b:89:04:ca:d0:91:9c:81:
ef:1e:6b:3f:8d:e8:e5:57:b6:a6:24:b7:fd:f0:36:
b3:d2:78:6c:90:23:e6:bd:5b:5b:70:b4:ff:51:59:
e8:13:c1:45:1f:c8:df:44:54:fc:66:55:c6:68:79:
30:7c:48:d9:7b:ce:8a:44:a4:ac:2b:2a:cc:de:ec:
af:9f:91:37:43:b1:3b:c4:3b:ca:5f:40:95:73:f2:
4c:eb:b0:10:9e:51:81:e6:d2:95:ea:fa:6f:e4:10:
1e:7a:76:b4:98:82:91:c5:5d:bd:44:b6:6f:b8:f3:
2f:4a:b1:c4:a0:18:d6:d6:39:4a:61:a7:9c:cf:fb:
30:4e:ab:c9:e1:76:06:20:d9:f4:5f:35:6b:1e:8a:
0c:a3:ca:06:40:85:3f:39:eb:dd:8b:96:14:8e:d7:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:90:60:14:C0:77:97:9D:15:DE:45:BA:DA:B1:C9:AD:BD:BE:2E
X509v3 Authority Key Identifier:
keyid:3F:23:AB:73:05:30:47:92:DC:2C:E8:17:80:B5:DB:88:9D:8F:7F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f7db9d-fcd9-4f21-91c2-60033d5b03bb/1/PyOrcwUwR5LcLOgXgLXbiJ2Pfzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:21:93:09:c9:2c:f7:e9:7d:fc:99:32:af:cf:0d:23:91:fd:
e3:2d:e0:1b:2a:a4:c2:03:04:a9:a7:27:93:e6:5a:1c:3c:e6:
0a:f9:cd:20:25:3e:a2:d5:cb:98:f3:e4:db:8d:fd:52:14:08:
4b:47:ed:e0:c5:3d:e2:d3:f3:a1:a0:cf:df:de:de:c4:46:0e:
5d:3f:36:94:43:11:8e:69:4e:68:31:42:6f:5c:12:db:41:e5:
5d:87:60:a9:bc:2a:f1:78:de:34:86:8f:ec:a0:72:1c:dd:6e:
a4:ff:8c:53:ef:2c:c3:ec:7b:d7:41:d9:ef:55:8f:59:da:f1:
4b:62:76:39:dd:84:83:b0:db:1a:1e:a5:28:00:be:b6:26:c1:
67:17:c3:0e:03:a0:a7:40:91:e6:0b:ab:42:9f:08:5a:18:c8:
f9:f0:04:1d:d9:6a:58:c7:55:83:71:95:f6:80:c3:ba:a8:3d:
5f:b5:c2:82:5d:25:b5:3f:0b:40:79:7b:0f:5d:7c:13:03:f6:
ce:27:29:c5:f8:d8:47:1e:29:ca:ed:84:dd:47:0d:45:bd:ce:
0a:14:f3:a7:76:9e:92:87:97:d4:15:ee:8e:40:68:f6:1f:ae:
c5:22:4e:df:8a:40:77:13:e7:0d:32:50:aa:df:b1:da:f8:9e:
01:a8:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:29 2025 by rpki-client