Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
File: RLnEibS7yF3nNEF-u6ThN7F8B50.mft (raw, json)
Hash identifier: nNkeS38XQAPV+Cw05qzg46unNIYv7AfpzOu/Bbde9lY=
Subject key identifier: 1B:25:05:E8:CC:4D:8F:FF:26:55:90:BC:09:8D:1E:46:AC:B8:EC:09
Authority key identifier: 44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
Certificate issuer: /CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Certificate serial: 0194BB6038D20EA28B14831B04FEDFD5FAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
Manifest number: 0301
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: RLnEibS7yF3nNEF-u6ThN7F8B50.crl (hash: 8Iwl+EphdPI8k99C1lHXLha5hpbsi1xOwk2AGubNcCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:38:d2:0e:a2:8b:14:83:1b:04:fe:df:d5:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b9c489b4bbc85de734417ebba4e137b17c079d
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=1b2505e8cc4d8fff265590bc098d1e46acb8ec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:05:c7:89:5a:6d:85:d0:5e:3b:65:31:7a:
09:0c:d8:49:a6:f2:81:ce:34:e7:fa:6b:a3:19:d4:
ab:73:dd:ab:a9:ad:76:a5:65:ae:24:68:97:66:fc:
3d:07:d7:cf:0b:e5:72:1b:e3:e4:3d:dd:ae:bf:64:
19:37:dd:86:69:59:69:11:00:7c:1f:09:9c:f0:fc:
39:a9:ec:ee:74:b6:2e:e6:a7:5c:fd:23:31:36:66:
48:b4:a1:61:1a:d8:c3:2c:36:41:db:74:54:38:88:
62:e3:42:26:18:45:8d:7a:73:dc:3a:a2:58:53:10:
4b:6f:ab:ef:96:fb:47:e6:cb:ea:fe:e4:27:f4:7c:
f6:48:a0:30:35:93:56:6a:2e:02:c5:1f:bf:3d:dd:
1d:12:3d:9b:38:ce:bc:15:8d:f9:3f:10:a4:d8:b1:
5a:86:a8:1a:c8:00:8b:7d:d5:95:00:50:a7:99:6a:
15:f9:7a:f1:d4:f1:fa:03:aa:d1:22:b2:0d:e1:b0:
15:37:2a:65:2a:b1:16:6c:c8:a9:b2:84:c4:9c:9e:
6e:80:8e:2c:c4:e1:24:6a:93:2c:2f:ad:f6:81:87:
bc:76:c8:42:ec:52:ec:ec:5d:e8:ed:71:0c:51:f9:
a1:83:c8:30:80:29:a1:1a:46:0d:dd:f5:f4:ed:06:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:05:E8:CC:4D:8F:FF:26:55:90:BC:09:8D:1E:46:AC:B8:EC:09
X509v3 Authority Key Identifier:
keyid:44:B9:C4:89:B4:BB:C8:5D:E7:34:41:7E:BB:A4:E1:37:B1:7C:07:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLnEibS7yF3nNEF-u6ThN7F8B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/669554-3697-4d29-8fa3-4eb96e9acb16/1/RLnEibS7yF3nNEF-u6ThN7F8B50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d1:18:d5:c2:02:c2:e7:22:cd:32:ba:e9:88:bd:bb:42:10:
f4:d6:9d:a9:b6:14:fa:19:f8:56:a6:ca:d7:09:b2:c4:25:74:
b8:de:f2:1b:b1:84:ca:01:24:7d:4f:07:9c:07:cb:1e:ac:5d:
48:a4:e3:53:1f:0d:6e:00:54:52:a7:40:1a:30:d5:07:d8:bf:
99:a5:a3:a8:87:7a:bc:d5:25:66:59:23:52:91:86:d5:de:cc:
87:46:0f:96:18:1f:45:ef:fd:9e:fd:ac:30:61:bc:c9:00:6e:
6a:c3:d0:ee:e7:a0:b8:f8:d3:f0:83:2a:dd:8f:90:c6:18:3f:
f0:2f:20:2b:ad:1e:ba:d2:62:30:30:5e:63:2e:c5:60:86:d9:
22:76:7f:59:b4:b5:71:0d:b9:ed:18:9a:a9:c9:4e:6e:76:fc:
0c:d0:68:f6:e5:3f:f5:78:be:bf:e6:60:0b:2c:0b:a8:d5:69:
9f:9a:b2:e3:68:ca:d7:ec:cf:78:f6:ee:fa:52:93:99:fb:10:
e7:63:62:77:d9:82:47:35:f1:e7:55:31:db:92:7c:db:d2:c7:
44:98:14:27:ba:d2:9f:67:55:b3:ef:0b:e7:8f:f8:86:c1:fd:
1d:1c:f1:0a:e4:77:41:61:b4:8e:ca:a8:3e:54:60:7e:07:4a:
d1:46:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:21 2025 by rpki-client on console-fra.rpki-client.org