Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: VewZZeZLs07aqxMukTqBObCgHNoQTc/W2iRJ3vio7rQ=
Subject key identifier: CB:FB:74:16:7F:6F:76:8F:11:77:7C:6D:05:4E:E0:E1:0B:92:70:32
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 019511A2E8F72F92211B1554F4AE33714C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: BOS6FWkO+gbR5AtvuDWifLCSDjrDeSRnTb6PQJ8/NeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e8:f7:2f:92:21:1b:15:54:f4:ae:33:71:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=cbfb74167f6f768f11777c6d054ee0e10b927032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:b6:4b:05:d3:40:a6:2f:68:9a:6c:46:eb:
4c:ee:2d:6c:9f:c4:b5:8a:96:79:3c:82:a0:7c:ce:
0a:4c:69:10:48:c3:7d:22:8e:e1:30:be:17:d6:5c:
1d:9d:e5:16:87:44:d1:ff:a3:f7:8e:3a:69:a6:35:
de:e0:e2:15:ca:3a:2b:37:ba:3a:d3:93:2e:c0:30:
59:46:97:43:cc:a9:e0:85:1f:a0:e4:91:21:2e:7f:
c3:0a:3a:ec:f6:0c:a7:e4:da:57:28:1f:49:24:76:
20:e2:de:d4:0b:60:6a:0d:0a:df:6c:44:a1:e5:a4:
f6:77:53:04:d5:62:95:40:ca:90:a7:70:91:32:c9:
c5:80:7e:6c:12:08:77:68:85:22:8e:48:1e:5f:99:
e8:da:77:f3:ec:f7:81:ea:29:bd:98:cd:a4:a8:79:
b5:6e:ea:42:39:d1:12:56:0e:00:76:0d:bf:70:92:
49:2a:e4:97:f1:89:c5:05:e5:11:85:a8:9c:bb:0d:
e4:48:70:69:e5:9b:0d:ec:ec:35:88:59:09:f6:57:
6a:be:49:48:b7:08:e4:bb:55:c0:05:4d:f8:25:92:
f2:eb:3e:3a:1e:c2:13:64:9c:1f:54:4d:88:f6:9d:
a7:d8:bf:02:1d:3a:08:da:d3:d8:79:7e:b9:03:a4:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:74:16:7F:6F:76:8F:11:77:7C:6D:05:4E:E0:E1:0B:92:70:32
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:ce:a4:af:ce:dd:09:5f:d5:bf:21:2e:f3:f5:3c:07:ca:
66:b2:d2:ee:d1:37:27:9f:57:4b:26:8d:41:0c:00:60:5c:19:
dc:ac:97:20:f6:30:3b:ed:a4:91:ed:f7:f7:7f:01:3b:4b:b6:
20:6b:12:5f:95:08:68:d7:db:2a:0c:b4:05:5a:ae:03:a9:16:
9d:fd:ae:a3:ce:81:87:51:f6:0f:d4:d2:fd:5c:af:01:c2:51:
9a:69:19:1d:52:e4:a9:69:e5:06:16:d7:b9:8f:06:03:44:e2:
f9:e2:b9:74:d5:20:47:ce:f8:c4:51:39:40:31:5e:90:a2:a1:
8c:12:2a:29:6d:f9:70:a5:ac:34:3f:de:74:59:62:8e:eb:9d:
63:d5:69:97:98:70:91:ae:72:6e:b9:6f:92:ab:55:3a:c1:9c:
25:67:af:6e:a9:95:df:bc:04:ae:ed:26:f0:87:53:46:ea:2b:
99:c9:f6:58:42:75:1b:d0:e7:e0:7a:92:ad:f3:a6:77:f1:4f:
f6:77:26:60:78:18:21:20:a5:51:d7:1f:03:c9:3d:5d:70:66:
6d:93:da:8d:ed:ef:79:51:ec:dc:10:6a:bf:4d:eb:27:5e:d7:
1c:12:da:ec:6c:f8:02:83:53:85:81:75:7b:40:65:e9:0f:2f:
73:32:3b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:32 2025 by rpki-client