Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: NSPKQ41UPlyVzbj9hlZW7OsuT+S9TBh7KEdVU/SHh0k=
Subject key identifier: 27:63:0A:0F:68:ED:83:5A:6F:96:DF:D0:C2:44:AF:7C:67:B9:FF:BD
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 0195116BCC29378A8F890459801A21BC00C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 01:00:32 +0000
Manifest this update: Mon 17 Feb 2025 01:00:32 +0000
Manifest next update: Tue 18 Feb 2025 01:00:32 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: CGuShhrTFC/NKdsU/HRL8WZmZFNHTAFlQwDamF9VxyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:cc:29:37:8a:8f:89:04:59:80:1a:21:bc:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Feb 17 01:00:32 2025 GMT
Not After : Feb 18 01:00:32 2025 GMT
Subject: CN=27630a0f68ed835a6f96dfd0c244af7c67b9ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:3f:bb:b6:82:dd:bd:88:92:67:ed:4e:a1:
81:7f:4f:31:26:17:13:32:67:fc:f6:fa:51:aa:0a:
e3:fb:d2:64:33:8d:aa:af:34:37:2e:53:0b:b0:98:
4a:ae:ff:b4:83:b4:d9:b7:e4:e7:87:df:a0:fb:1c:
e2:c3:c8:1b:76:92:f4:c3:a6:55:85:c9:1c:73:c9:
ff:4a:90:18:75:89:47:16:3c:d2:b5:52:7a:a5:32:
7a:16:67:dc:da:4e:50:7f:15:65:03:e3:f0:d3:0a:
e7:d9:e9:3d:da:ec:15:f2:26:b6:f1:46:19:b2:04:
b2:df:04:ed:a3:5f:2d:57:e7:44:aa:2f:6e:dd:64:
2a:43:c5:73:20:cc:70:62:2e:44:75:61:db:b3:ac:
9e:c6:ae:e4:7a:8b:19:36:f5:69:c4:39:8b:9a:f1:
a8:ce:4b:81:50:d6:d0:c0:db:31:c7:87:2d:74:2e:
d1:ec:7a:8b:01:db:ee:25:b7:7a:27:9c:94:4f:70:
7b:25:88:88:d5:74:2a:3a:5e:a0:f4:ca:b0:bc:58:
91:95:98:99:fd:1b:ff:68:50:12:9b:46:bc:e4:0d:
ea:b8:5a:82:a8:f7:77:1d:6f:a3:a3:47:b0:10:bf:
05:1b:ce:68:9e:e2:df:02:8d:64:0d:6e:9f:7b:12:
9b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:0A:0F:68:ED:83:5A:6F:96:DF:D0:C2:44:AF:7C:67:B9:FF:BD
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:33:7c:59:85:7c:17:33:b5:08:32:22:2e:4c:92:b6:cc:dc:
c0:34:4f:94:4a:00:c6:c7:37:69:2b:c6:80:bc:6b:e6:7f:5c:
86:2e:34:88:3a:46:e7:91:1f:75:92:8e:2e:87:d5:25:4e:1a:
4e:33:b4:f0:a4:95:14:6a:fc:16:48:03:88:00:b0:7b:ca:d9:
1a:49:1b:2c:aa:ff:cd:66:ad:dc:df:d9:35:dc:ec:ac:31:8a:
46:a5:81:53:da:bf:d1:e3:b9:63:4b:62:f2:33:97:2a:99:e9:
8c:01:65:da:3b:19:b3:3d:0e:77:40:f7:35:b9:8b:1b:fc:c4:
fd:4e:85:d7:1a:dd:d9:06:aa:ce:b9:2d:ac:61:37:eb:4b:41:
e3:60:9c:0b:53:d1:a3:d0:ec:fe:fc:36:80:b5:92:13:d6:5d:
6c:d3:24:57:72:a4:11:3e:6a:6e:37:08:64:d9:2a:f5:47:8a:
4a:d9:1f:85:ab:d9:b6:3f:4d:57:cc:42:09:8a:f3:b3:3d:88:
03:85:d4:4f:ee:f9:30:33:69:e0:ad:50:0b:4f:a4:8d:71:2c:
ad:c9:39:64:60:fd:f5:c3:2a:71:3d:a1:28:bf:69:f8:73:1f:
94:e9:42:0d:e7:19:68:31:32:d0:ab:30:f7:4e:86:20:52:76:
28:c7:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:56 2025 by rpki-client