Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: QS46M3tKUmdtmv0h8nGSOb+8K+/tlMDmci+ZpjEyLv0=
Subject key identifier: A2:68:75:BF:97:F5:C1:74:E3:29:48:FB:0E:FF:9D:C7:1B:98:B5:DA
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01951134CC6F0F5C97734A19B7FC2DC26D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 00:00:27 +0000
Manifest this update: Mon 17 Feb 2025 00:00:27 +0000
Manifest next update: Tue 18 Feb 2025 00:00:27 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: rV/z1gxmzdannwwgWSA8EzABSE4XxuWbG3qmO4skmQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:cc:6f:0f:5c:97:73:4a:19:b7:fc:2d:c2:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Feb 17 00:00:27 2025 GMT
Not After : Feb 18 00:00:27 2025 GMT
Subject: CN=a26875bf97f5c174e32948fb0eff9dc71b98b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:0b:33:7b:3b:da:58:f9:2b:fb:7e:35:21:
78:d9:35:37:0c:29:8a:97:30:e9:1b:ab:59:93:bc:
b0:4e:fc:9a:11:a6:37:a6:2a:26:f5:28:01:f6:c6:
9f:22:00:66:be:96:92:5f:4c:21:e8:9e:cd:b7:d3:
bf:9f:e8:6c:38:f9:a9:31:e4:c7:4a:d9:ab:60:72:
f7:47:5c:45:33:ad:11:9d:85:db:fa:f6:29:e0:37:
f3:7a:11:6a:3a:1e:06:da:da:9f:2d:65:85:0d:75:
ac:43:6a:2f:4d:a4:c1:3e:16:20:fe:fe:6d:3a:80:
64:da:7d:ce:67:db:c3:97:66:f0:8d:11:59:7e:d5:
ef:89:e4:64:36:2c:86:b9:05:f2:0f:86:bb:59:ce:
21:c4:27:ed:51:9d:88:b8:04:bd:70:a6:83:cf:c6:
c8:e8:4b:1e:21:83:ae:21:d8:e7:72:c0:82:a5:34:
4c:6a:fe:d1:8c:fc:d4:36:b0:b6:d9:db:94:5a:93:
90:05:5b:c0:cc:d0:85:b4:88:f5:c6:03:45:23:e8:
c4:75:37:11:54:d0:ea:18:cb:66:0a:c1:f8:82:d4:
16:d3:fa:bc:97:fd:c2:f9:11:74:cf:44:88:09:80:
ad:b4:bf:d7:7f:03:10:37:e7:3f:a6:20:ee:30:3e:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:75:BF:97:F5:C1:74:E3:29:48:FB:0E:FF:9D:C7:1B:98:B5:DA
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7b:35:a4:53:73:d6:ab:20:1d:d3:14:9e:17:39:ff:70:04:
14:e8:fc:de:f7:35:d8:ef:78:87:19:f0:1c:da:e3:18:bf:4e:
45:37:86:75:ac:dc:0f:36:5f:4f:db:e1:49:b9:54:61:99:41:
21:b7:b1:87:dd:40:48:3c:6d:8e:93:a3:b6:a3:ab:53:3c:0e:
c4:b8:ee:52:21:20:9f:e3:72:85:05:7e:89:33:90:75:bf:e1:
aa:92:3d:5c:f0:fa:81:82:88:34:b2:4f:f7:ee:50:a0:c6:26:
71:fc:a5:2a:14:65:9f:a4:d5:9b:c9:ad:a2:76:dd:b3:c5:57:
93:61:87:39:c5:d3:fd:82:47:91:ce:70:88:2a:04:29:72:5f:
b9:d2:36:4b:fd:76:0e:62:01:aa:5a:02:6e:e0:a7:b4:45:7b:
ab:3c:f3:08:e4:bd:43:c4:92:88:b2:e2:74:a1:21:0b:61:cb:
e9:5c:01:27:2b:4d:12:9b:28:7b:cf:3c:59:9d:15:cf:48:7b:
28:10:ed:06:a5:5a:9f:dc:58:44:7e:03:4c:e3:e3:4a:5b:59:
96:7d:7a:45:d4:1b:25:e4:82:4b:3d:1f:64:a9:da:c6:8a:c3:
b4:59:7b:01:f4:54:ce:38:42:1d:45:7e:1d:47:f8:f4:ec:aa:
ef:2f:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:17 2025 by rpki-client