Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
File: SuVbOScPau6FdT3OFO2eHx_ImyQ.mft (raw, json)
Hash identifier: i8f21Sl7vg243wCkqSs0YdFcEwKtjgiJVzKrQcPQ+JI=
Subject key identifier: CF:96:2A:7C:C6:F7:8B:D9:D1:C2:7E:D6:BE:01:B1:13:61:FB:50:44
Authority key identifier: 4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
Certificate issuer: /CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Certificate serial: 019511A2861B704C0CC667D3D812F365DF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:18 +0000
Manifest this update: Mon 17 Feb 2025 02:00:18 +0000
Manifest next update: Tue 18 Feb 2025 02:00:18 +0000
Files and hashes: 1: SuVbOScPau6FdT3OFO2eHx_ImyQ.crl (hash: 6HeYUsrmLEWvFOAIp5oUNLP9mQz9lkh/kTa25lNHjG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:86:1b:70:4c:0c:c6:67:d3:d8:12:f3:65:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ae55b39270f6aee85753dce14ed9e1f1fc89b24
Validity
Not Before: Feb 17 02:00:18 2025 GMT
Not After : Feb 18 02:00:18 2025 GMT
Subject: CN=cf962a7cc6f78bd9d1c27ed6be01b11361fb5044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:61:df:46:17:3b:c6:97:c9:80:91:37:b0:63:
d3:96:35:fd:4b:9c:e0:86:24:f6:1e:d0:67:5a:2b:
7a:34:36:a9:c8:1b:ce:cb:20:dc:b5:4e:a3:56:8d:
26:75:bd:ad:53:82:92:de:48:be:6f:00:c1:d6:63:
8b:2c:85:e4:36:32:74:38:f6:9f:62:27:e3:b6:2a:
6f:c9:8e:a5:d4:59:f2:e5:6d:78:6c:f9:52:d8:40:
f0:d3:4c:03:5a:ac:64:7b:4b:58:ba:a2:e2:fa:d6:
4b:82:43:8f:a3:36:c1:cd:8c:22:7a:d4:4e:fe:f2:
54:fd:07:18:ff:fd:2d:aa:d5:43:25:bf:72:1e:53:
19:e9:9f:7a:8f:23:d1:65:46:95:b5:10:2f:c1:06:
79:11:26:71:a6:d4:0e:f6:ff:bf:3b:29:d2:e1:03:
5e:fe:12:5f:d9:f6:47:4d:c8:83:22:e5:ea:5f:f0:
cc:3b:dd:81:3f:ca:4b:10:82:91:0c:fa:f4:a2:ed:
27:c5:26:21:b9:26:ce:2b:61:da:8e:0e:59:d3:2b:
c4:4f:69:3b:9c:cc:e9:4a:a9:56:74:90:e6:bc:57:
02:45:4e:cd:fa:d7:c0:3c:64:29:67:1a:f9:4c:de:
73:4e:0c:96:2b:ec:6e:40:46:19:04:a4:9b:7b:86:
88:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:96:2A:7C:C6:F7:8B:D9:D1:C2:7E:D6:BE:01:B1:13:61:FB:50:44
X509v3 Authority Key Identifier:
keyid:4A:E5:5B:39:27:0F:6A:EE:85:75:3D:CE:14:ED:9E:1F:1F:C8:9B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuVbOScPau6FdT3OFO2eHx_ImyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0cbad9-1031-42e9-b4af-04e798932163/1/SuVbOScPau6FdT3OFO2eHx_ImyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:23:0c:6b:dc:3a:d5:fc:09:5f:bb:fc:82:7b:8a:d5:ed:
ee:87:a1:04:da:6e:46:e4:10:59:3c:4f:29:66:91:01:40:77:
2d:60:76:bc:2c:e5:02:72:4d:c7:14:c6:78:69:65:eb:d3:34:
3c:3e:d8:23:a0:9d:dc:dd:b2:ed:57:8f:73:c5:c3:fd:5e:47:
d9:b0:a0:07:f1:2b:29:52:64:cd:4c:14:e3:d1:50:f6:f6:06:
6a:67:c0:7b:2a:5d:43:67:a4:d2:dc:a2:76:26:8d:63:4c:92:
7c:f6:87:dc:bd:e6:b3:96:17:d5:f6:45:88:91:60:58:8f:6d:
43:16:14:15:08:00:25:c0:10:64:c7:d4:25:58:3d:0d:41:91:
95:24:40:18:91:26:d9:ea:4d:ca:e3:60:cc:fe:b0:00:d9:47:
cb:cd:e6:76:4e:62:b6:63:5c:fa:a9:47:6f:6a:93:c6:f1:73:
24:19:de:64:33:33:1a:74:7c:94:df:f4:24:62:3f:a6:77:27:
28:82:d0:49:ec:3e:95:29:d6:63:8f:9c:39:24:41:5a:48:a3:
23:59:2e:3b:d4:12:32:36:89:fc:3c:50:9c:0d:06:86:72:76:
12:05:8f:9b:c0:bb:f5:b4:ad:5a:56:30:90:77:53:07:86:1c:
f1:04:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:54 2025 by rpki-client