Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
File: aREkWuICUVXAm-wlqJkdVnrxhB0.mft (raw, json)
Hash identifier: XK3aH63OPb1DeWdfErpwqsFY8R1V2soITH7MLN49Pwo=
Subject key identifier: 4A:31:57:E9:B9:7F:17:1F:E0:21:83:D8:1A:78:79:6A:B5:07:E4:57
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 019510C827B222D2394C36D492B97DE188C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:01:47 +0000
Manifest this update: Sun 16 Feb 2025 22:01:47 +0000
Manifest next update: Mon 17 Feb 2025 22:01:47 +0000
Files and hashes: 1: aREkWuICUVXAm-wlqJkdVnrxhB0.crl (hash: vWVIKSXo1pDNAu8YLl47tVS7aiUMQNQHT7RmjJfS+sE=)
2: yzENspSptK5NyVWj5Yy0li0xAx0.roa (hash: T86R48aImGqbHLOy/BUV6X7cYzuPf6AXUqD6jlF+8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:27:b2:22:d2:39:4c:36:d4:92:b9:7d:e1:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Feb 16 22:01:47 2025 GMT
Not After : Feb 17 22:01:47 2025 GMT
Subject: CN=4a3157e9b97f171fe02183d81a78796ab507e457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0b:d4:20:b0:5b:d6:cc:6c:55:29:83:70:d6:
3a:11:0f:30:ec:68:1a:08:a6:7b:47:e2:bc:db:61:
60:c9:1b:38:95:e8:37:69:65:c6:a7:d9:18:4a:4f:
0a:35:3f:ee:13:4c:e9:c9:2d:7d:fa:d8:21:93:bb:
c2:3e:01:43:3c:fa:1e:57:d9:a3:4e:94:88:1f:73:
b9:ab:5c:24:99:7c:81:08:c9:a7:92:24:a8:86:85:
c1:c2:dd:a8:4c:47:41:f9:90:60:48:96:7d:5a:0d:
7f:6c:6b:e9:89:9f:e9:25:56:b5:f8:f5:5c:d8:f0:
56:5c:c9:24:9d:82:00:5e:79:15:e1:b1:ed:91:71:
f2:d2:28:58:ed:dc:ee:28:d4:8f:c0:b0:31:26:b7:
20:47:d5:40:ee:2e:a6:23:d6:f2:17:a4:7c:06:c0:
0e:78:7b:05:06:0e:83:1e:5c:ac:9d:5b:4a:26:59:
39:88:44:5f:f3:dc:0a:13:2e:02:13:1d:6b:92:71:
4f:46:60:a3:9f:12:12:96:b0:a1:89:c7:96:4e:7d:
fd:ea:e0:78:84:d8:9b:d4:29:f6:1c:d0:d0:90:40:
22:e7:e0:c7:f7:58:af:c6:a6:da:37:5e:1f:6c:df:
5f:1f:f9:a1:56:89:02:76:91:e0:c3:d6:d7:c8:9c:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:57:E9:B9:7F:17:1F:E0:21:83:D8:1A:78:79:6A:B5:07:E4:57
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:de:3e:49:9c:6b:a6:f8:56:37:e5:8f:b0:d5:67:fa:dc:fe:
f1:f5:0a:68:89:55:22:ce:fe:7e:be:f5:b0:38:fb:72:00:bb:
6a:de:4b:01:06:49:b2:72:92:c2:12:61:c2:8f:7d:06:7c:7f:
32:dc:da:d8:5d:f9:45:c9:db:f5:25:99:fa:e9:df:7b:25:d1:
f5:7c:06:12:f8:da:4a:18:1a:68:e4:57:30:9a:6e:fc:79:28:
9d:01:6d:77:d5:67:e4:38:af:14:86:f4:8e:0c:46:20:38:81:
32:a3:8d:a9:31:86:b1:4e:ca:ec:8f:86:85:b6:1a:76:18:c9:
2c:67:60:0a:8e:06:1b:99:a8:e8:0e:7d:63:b2:04:6a:62:42:
f5:ef:e2:96:fe:83:30:d0:ae:28:9f:18:66:e9:72:bb:99:84:
4e:78:5d:9a:5a:e1:54:c3:b3:4a:2d:b9:6e:42:35:5c:15:97:
05:da:6e:be:93:e2:45:bb:16:92:8a:19:e5:6b:be:ea:ae:cb:
70:9e:a3:0d:20:24:f9:85:03:d7:42:03:74:bb:f1:48:45:46:
42:ab:9e:36:53:88:b7:09:8a:c6:f0:9b:18:ca:cb:86:54:cd:
d7:29:56:c5:45:66:4c:fe:8c:15:c1:ce:5c:32:27:5f:fe:07:
aa:dd:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:00 2025 by rpki-client