Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: bl+65zWfGV4+t9Dn3etZ07uDMOYT5C4BO0ZGw1V3R10=
Subject key identifier: 40:52:6C:D7:9C:D7:7A:3C:7E:75:9A:94:61:38:78:88:68:6D:4D:C9
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 0194BABB87896576A6E51821F6371AB2DFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 05:00:39 +0000
Manifest this update: Fri 31 Jan 2025 05:00:39 +0000
Manifest next update: Sat 01 Feb 2025 05:00:39 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: t4RANv+wCA0sEMfbrIHKsiZ5XwbRkilzDv38QjDcWyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:87:89:65:76:a6:e5:18:21:f6:37:1a:b2:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Jan 31 05:00:39 2025 GMT
Not After : Feb 1 05:00:39 2025 GMT
Subject: CN=40526cd79cd77a3c7e759a9461387888686d4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:dc:ae:66:2a:01:24:ea:dc:3f:8c:ee:5a:
e2:c1:6b:77:ef:f2:40:d7:b9:5c:f0:42:b2:fc:0c:
48:35:b3:bc:48:d2:47:cf:72:b0:79:05:16:dc:9e:
d3:d6:20:6b:dd:8f:ce:76:0c:b2:d3:f1:05:ed:7d:
04:cc:9c:99:45:05:d6:39:32:b6:87:40:0d:ad:94:
41:8c:17:81:cd:a3:3c:d9:83:3b:1d:bc:64:50:ea:
49:88:0d:4c:8b:5b:f8:2b:77:f9:68:a9:18:99:62:
ca:e3:3d:3c:c2:92:aa:b8:e7:08:d2:6a:ca:d0:90:
17:8d:69:e0:42:31:ea:e6:29:6a:70:cc:70:cd:d1:
f0:ae:c9:ee:f1:9b:de:f2:55:1b:8b:e4:1c:69:e7:
35:43:dc:1a:d8:b7:f0:21:20:5a:67:2d:74:16:74:
a2:b7:01:a9:6d:91:2e:4b:e4:50:06:9a:77:7e:bd:
1e:a0:e8:37:12:34:25:fe:ef:c9:e5:b6:3a:b2:77:
5e:fe:e5:66:20:7d:dd:bc:00:bc:ad:54:7b:84:c1:
e0:67:db:cb:fa:05:b8:c6:65:55:b1:da:0f:c2:90:
6a:d3:2f:08:27:a2:05:a4:54:fb:55:4f:94:be:5a:
9f:cd:39:ee:55:b1:b5:ef:5a:1c:2a:2e:51:88:a7:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:6C:D7:9C:D7:7A:3C:7E:75:9A:94:61:38:78:88:68:6D:4D:C9
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:ce:b4:7e:43:3f:4f:99:73:c3:bd:a0:35:39:13:0c:75:
63:aa:db:eb:13:2c:77:6c:4c:7d:4a:87:1f:fe:88:4c:dd:ba:
ba:2e:bc:87:3d:1b:88:a2:aa:f6:43:39:5f:19:11:df:0c:69:
57:36:1b:26:c3:77:40:c2:f9:31:f9:f7:6c:5a:0b:34:b5:93:
4d:93:e2:41:e4:63:b7:c7:ff:7c:52:5a:7a:e4:5b:dc:5c:c3:
fe:89:c8:b9:8a:17:96:57:29:98:9a:bb:06:ca:68:10:4f:fc:
24:a2:e1:cc:6a:4c:55:ed:b0:37:d8:a0:60:be:bd:a0:a1:33:
a1:4b:5a:7e:d0:24:c7:70:f7:bc:19:f9:91:fb:54:b1:03:dd:
1d:f0:05:44:44:5e:06:f2:10:9e:b4:a8:1d:c0:91:c3:05:b9:
ee:21:3e:eb:e2:23:57:d8:1d:16:a3:cc:c8:33:c8:37:e0:1c:
5e:ef:4d:da:e4:d1:30:f4:41:f0:a9:aa:15:8e:34:2d:8f:d8:
09:de:d1:26:6b:c8:40:8f:29:0c:60:e0:3c:8b:be:ce:a0:68:
e9:21:8b:db:12:98:04:fc:e2:36:7b:2f:6a:5a:d5:33:53:13:
a2:60:60:8b:c4:1b:23:e3:1b:94:22:e2:cb:f0:a3:27:14:7a:
65:37:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:57 2025 by rpki-client on console-fra.rpki-client.org