Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
File: _sl9DBu8zD2GcSKhFxD1X3AjAI4.mft (raw, json)
Hash identifier: OkSPi/ZEKeOupwUo+5Ys5uJ2nOrzwUVgPoPrkFm/H+Q=
Subject key identifier: 7E:E4:B0:FF:CC:C2:FF:05:3C:3A:04:58:51:91:7B:57:8D:6D:41:6E
Authority key identifier: FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
Certificate issuer: /CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Certificate serial: 0195116BC6606F0E7FF94474D01F25D6AC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
Manifest number: 034E
Signing time: Mon 17 Feb 2025 01:00:30 +0000
Manifest this update: Mon 17 Feb 2025 01:00:30 +0000
Manifest next update: Tue 18 Feb 2025 01:00:30 +0000
Files and hashes: 1: _sl9DBu8zD2GcSKhFxD1X3AjAI4.crl (hash: PDjuq9KU5EOTruma9ERBqLZupF3ZIIsMok+k470yieE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c6:60:6f:0e:7f:f9:44:74:d0:1f:25:d6:ac:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec97d0c1bbccc3d867122a11710f55f7023008e
Validity
Not Before: Feb 17 01:00:30 2025 GMT
Not After : Feb 18 01:00:30 2025 GMT
Subject: CN=7ee4b0ffccc2ff053c3a045851917b578d6d416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:4b:35:08:b5:7f:99:74:85:7f:79:85:6e:
62:be:aa:1e:0f:2e:52:37:b5:30:9e:ae:28:0c:b5:
53:d8:cd:0b:c4:d4:f2:a3:77:97:30:9a:ad:65:c6:
3d:d2:92:38:08:5c:96:a1:56:c8:2e:9f:69:85:4e:
f1:f7:e0:29:85:c8:7e:6b:46:fc:9d:1f:2c:f6:74:
ab:7d:36:22:df:cd:49:76:be:62:63:f0:79:5d:64:
6c:a4:fe:be:50:89:a7:d2:46:dc:f7:02:9e:ee:35:
0a:1e:2c:29:fd:e2:50:d5:7f:bd:60:31:05:d5:f4:
23:40:74:d0:bc:ab:17:37:17:d6:ec:09:6f:25:59:
83:4d:c5:e9:bf:a9:a4:26:35:d5:70:69:59:ad:e5:
48:4a:ba:9f:24:1f:a6:72:7f:2b:08:76:79:78:59:
00:cb:a0:82:11:3d:19:16:e2:7f:27:99:96:1d:20:
cb:4f:a2:13:ac:65:06:2d:28:41:3e:e5:0b:fc:ef:
9b:ae:98:96:9e:2c:fa:dc:97:30:ff:3f:7f:70:4b:
93:bf:60:cf:8c:d2:8b:9a:33:0f:d8:ac:ac:20:64:
70:59:6a:a5:b7:e8:de:5d:cf:c8:e6:7b:8c:8b:08:
70:64:da:21:a8:9c:d2:de:57:f2:7e:33:15:34:82:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:B0:FF:CC:C2:FF:05:3C:3A:04:58:51:91:7B:57:8D:6D:41:6E
X509v3 Authority Key Identifier:
keyid:FE:C9:7D:0C:1B:BC:CC:3D:86:71:22:A1:17:10:F5:5F:70:23:00:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sl9DBu8zD2GcSKhFxD1X3AjAI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be7580-5112-4aab-aa79-939f87a31bf0/1/_sl9DBu8zD2GcSKhFxD1X3AjAI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:92:99:29:7b:bf:e5:a1:96:ac:94:15:46:e9:11:8e:99:b6:
96:27:5a:64:04:b5:79:cc:d7:65:91:00:06:d7:b3:ee:1a:e0:
df:31:88:d7:d4:ae:38:7a:ad:87:57:65:37:3c:a2:b9:49:40:
02:35:3d:78:de:5a:d1:bd:e6:68:fc:55:d9:7c:e9:5f:d7:60:
e3:25:fa:1d:e9:64:2b:88:c1:b3:5b:2f:b1:cc:ec:58:13:ec:
a1:5c:15:ec:15:cc:aa:c8:12:49:17:b8:10:39:22:79:fb:ab:
20:fd:4b:2b:0f:86:61:e2:26:08:6c:7e:0a:e1:65:55:a8:00:
3a:cd:13:de:30:7d:19:59:02:c1:4b:9c:e9:56:97:55:9e:f8:
92:5c:e3:ce:8f:24:ea:4a:fe:2e:70:12:42:37:ed:5d:a4:d3:
07:7c:7b:de:1e:fc:a3:57:48:4b:19:e8:49:53:20:0a:9a:4d:
2f:e1:d4:e0:b9:83:69:1c:ed:01:79:8d:0f:f4:49:69:18:a9:
09:ba:7a:44:0f:14:52:24:33:24:8f:48:ed:b1:07:81:7f:59:
d9:0c:50:cf:13:64:a3:8d:4f:4e:99:41:e4:f4:57:c8:c4:af:
a0:74:c4:68:e7:c7:5e:a5:a6:11:14:29:48:27:a8:cd:e3:88:
3f:74:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:45 2025 by rpki-client