Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json)
Hash identifier: ILPm37lwSw0hWFy6q8DDfkhUjcWZJyyoVeM9KeaG4aE=
Subject key identifier: 10:E3:DB:E7:EB:D7:E9:9D:D5:64:05:E2:DA:58:A9:FC:5B:F6:47:3D
Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Certificate serial: 019510C68EF65049D3923CAA42205E83A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
Manifest number: 1453
Signing time: Sun 16 Feb 2025 22:00:02 +0000
Manifest this update: Sun 16 Feb 2025 22:00:02 +0000
Manifest next update: Mon 17 Feb 2025 22:00:02 +0000
Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: OQA6nSspkcRK51oIa7q9tEXJ1/jxFlOsGHjRGcnhv9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:8e:f6:50:49:d3:92:3c:aa:42:20:5e:83:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252
Validity
Not Before: Feb 16 22:00:02 2025 GMT
Not After : Feb 17 22:00:02 2025 GMT
Subject: CN=10e3dbe7ebd7e99dd56405e2da58a9fc5bf6473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:96:99:e3:de:a3:aa:5c:2b:ee:60:1a:24:
05:18:92:af:ad:e2:73:1b:f6:2e:e3:59:d1:d8:c8:
75:c1:ab:b4:cb:2d:9b:27:19:91:9d:e9:41:75:de:
3f:71:bf:4d:46:a3:19:d3:1a:d7:08:ae:6b:a5:6c:
2d:67:e0:c6:a2:ac:13:8f:e4:fc:4a:f5:25:65:bc:
c4:c6:fc:bf:85:43:6b:ff:50:89:f6:e2:43:d4:c3:
b4:ca:48:93:9b:d4:63:23:26:f4:73:a2:7b:f0:9f:
95:61:89:27:56:77:fc:ad:ae:d1:c8:1d:b7:35:7c:
54:1f:7c:76:73:71:63:a9:f5:a8:9b:1e:a1:c3:e6:
d8:f1:b7:1a:58:09:a9:f3:e4:b1:bd:56:e9:7e:b7:
5a:1d:9a:36:1f:69:93:20:de:5d:25:85:0e:73:65:
36:14:af:5e:7a:09:4f:f9:42:03:78:37:76:a4:d5:
60:dd:c1:42:95:44:56:ed:4d:8a:20:2a:61:72:bb:
d3:6a:88:22:30:45:ce:12:eb:93:7e:82:e8:f5:1b:
f9:3b:72:76:f5:48:35:b3:d0:2c:d0:42:42:f5:ce:
14:bc:af:eb:a3:ec:42:29:a8:e1:4c:4a:56:19:6c:
ba:41:06:10:1e:09:da:dd:7b:dc:04:4c:ee:5d:70:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E3:DB:E7:EB:D7:E9:9D:D5:64:05:E2:DA:58:A9:FC:5B:F6:47:3D
X509v3 Authority Key Identifier:
keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:31:b1:63:43:39:2c:e6:68:70:74:e4:f5:bb:82:19:a8:
97:15:27:f8:5b:f4:25:6e:cc:a1:f8:cb:c3:38:5f:7e:10:84:
26:3a:59:67:e0:d1:6c:78:e1:bb:ff:14:46:6a:00:3b:84:8d:
68:b8:2b:b5:e0:4c:3c:ad:d6:60:41:7c:13:ce:a7:a5:52:8f:
b4:fb:bc:19:f2:6e:3b:a9:d8:92:5f:66:15:9e:ea:50:fb:4e:
da:2b:1e:c0:18:e3:b4:c4:be:c8:96:6c:21:b0:cb:8a:91:63:
e8:5a:d5:32:55:e2:34:f4:5a:4a:52:18:b8:d3:3e:c3:da:3a:
eb:5b:35:07:6d:2b:00:50:b9:d4:39:fd:32:66:21:48:72:c7:
b1:a7:18:7f:4e:62:65:46:56:b8:c9:08:df:17:4c:6c:e5:dc:
53:e9:93:90:11:88:d5:75:54:b8:81:4a:79:f3:b9:31:60:d5:
89:c9:47:f4:72:3c:5f:c4:5b:23:f9:a1:27:a1:f0:26:14:22:
97:c3:43:c7:8c:7e:a5:9e:95:95:af:8c:b1:34:e1:f2:54:b8:
31:18:0f:9f:3b:1d:40:c8:17:00:dd:57:12:0f:83:97:35:77:
cd:a9:6f:c5:10:5b:61:90:bf:90:09:2f:13:1b:61:28:f4:dc:
1f:9f:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:19 2025 by rpki-client