Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
File: AleOlpdsgr6RLAZzVbyJczn8s6Q.mft (raw, json)
Hash identifier: Xe2B/qqHDYuxUnh4i/HY/WOCOs7Hzj5/t9f7+w5cqBU=
Subject key identifier: 9A:4A:4F:75:CE:DD:98:06:0C:24:3E:74:2A:1E:75:C9:D9:5D:CD:25
Authority key identifier: 02:57:8E:96:97:6C:82:BE:91:2C:06:73:55:BC:89:73:39:FC:B3:A4
Certificate issuer: /CN=02578e96976c82be912c067355bc897339fcb3a4
Certificate serial: 0194BBCE55D0F5872A4FBDDF39B3DAE6C379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AleOlpdsgr6RLAZzVbyJczn8s6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
Manifest number: 065C
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: AleOlpdsgr6RLAZzVbyJczn8s6Q.crl (hash: YnOI6IbBo9y5aPtHJ/T8PJjKHjX3UqOqf08XpA0DHUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AleOlpdsgr6RLAZzVbyJczn8s6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:d0:f5:87:2a:4f:bd:df:39:b3:da:e6:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02578e96976c82be912c067355bc897339fcb3a4
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=9a4a4f75cedd98060c243e742a1e75c9d95dcd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c1:07:94:24:13:c0:14:d3:1c:f1:ac:06:15:
81:3b:6b:67:11:01:a2:da:0a:45:a4:b3:8b:8e:ea:
0e:57:59:71:f1:42:6c:3b:6e:88:00:e3:32:9e:b1:
f4:bd:24:c4:c0:dd:46:fb:bd:74:7e:b8:a3:45:86:
9c:63:35:cc:03:1e:20:9a:9a:87:6d:76:d9:64:8e:
94:44:de:f5:94:1d:4d:69:b3:d7:bf:0d:a7:b9:a0:
66:f4:ac:29:0b:22:bc:55:43:09:fe:1a:17:81:19:
8e:b3:de:80:62:8b:a7:c0:f8:18:9d:04:d8:99:a7:
14:03:df:50:e9:a8:2b:3c:c8:0f:48:8b:ab:ec:68:
95:35:85:0f:20:c1:20:7f:ab:65:50:71:68:2f:9d:
a3:f0:2e:84:79:2c:58:be:72:73:6b:9b:31:4a:cd:
3a:94:d2:e0:0a:68:b2:96:8f:27:a5:a8:dc:0b:65:
c2:2d:68:8d:0a:90:60:04:7b:f7:22:a0:d2:37:c8:
bc:2f:c5:27:8e:03:59:7a:11:de:3e:23:e9:ad:c9:
71:a0:84:f6:43:98:eb:46:8b:b4:2f:6e:f3:69:5f:
ca:d9:36:86:2c:41:15:a8:71:8d:a9:ba:02:40:2a:
ac:f0:ea:43:33:2b:a4:46:11:cb:88:c5:d0:ab:b3:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:4F:75:CE:DD:98:06:0C:24:3E:74:2A:1E:75:C9:D9:5D:CD:25
X509v3 Authority Key Identifier:
keyid:02:57:8E:96:97:6C:82:BE:91:2C:06:73:55:BC:89:73:39:FC:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AleOlpdsgr6RLAZzVbyJczn8s6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7be2e9-0cc4-4ec2-8934-6506eff3d354/1/AleOlpdsgr6RLAZzVbyJczn8s6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0f:ba:cd:50:87:c5:f7:ab:2a:1c:6c:1b:8d:51:77:ba:0b:
41:bb:54:62:c9:0d:f1:31:b7:a7:08:65:1d:cf:fd:6d:44:3a:
e8:ad:bc:e3:d5:1f:bd:2a:e1:a6:e3:18:4d:c1:3f:40:42:f3:
2b:24:53:78:00:99:e7:df:f3:0c:87:8a:ff:60:0f:f2:62:e0:
11:c4:ca:61:3e:ed:40:14:0c:48:2d:18:c9:02:e0:6f:d7:66:
f5:17:5b:89:c4:b4:f2:57:1e:02:7a:6b:f0:af:3c:c5:89:d6:
89:5c:d9:9b:d3:45:2c:9e:e4:38:e3:8e:6b:de:11:6e:01:d6:
2e:28:4d:df:85:45:23:15:06:f6:6f:04:34:5a:5c:68:07:ef:
8e:9c:20:4c:73:05:db:3d:c6:a2:8c:66:07:5a:b5:9c:80:09:
41:85:0c:fb:0b:57:ba:85:99:d6:7b:af:03:ae:84:a6:d3:24:
aa:04:dc:95:01:76:32:de:16:d0:0d:2a:2e:9e:bc:44:a0:37:
2e:81:67:88:7c:be:03:9e:0e:ea:04:e1:6b:db:ca:4a:45:cc:
f7:e2:02:92:d7:ab:ca:f9:7c:3e:5f:21:d3:5a:95:25:76:ef:
ff:5a:1c:53:aa:7c:21:88:a1:55:13:8f:63:4c:79:a8:be:72:
2f:09:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:03 2025 by rpki-client on console-fra.rpki-client.org