Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
File: ILE5EMH5hzXkAWULHTS_i2oKBpY.mft (raw, json)
Hash identifier: iI+mbUHP+aKKT+psRWjtG+9HV7rbxR3T12MoYQKGwPU=
Subject key identifier: D3:32:94:09:F5:49:80:9D:83:12:94:18:0F:25:5F:7A:F4:48:36:90
Authority key identifier: 20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
Certificate issuer: /CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Certificate serial: 0194C42C9EA92B25E03311C3DBA992BE6191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
Manifest number: 37
Signing time: Sun 02 Feb 2025 01:00:45 +0000
Manifest this update: Sun 02 Feb 2025 01:00:45 +0000
Manifest next update: Mon 03 Feb 2025 01:00:45 +0000
Files and hashes: 1: ILE5EMH5hzXkAWULHTS_i2oKBpY.crl (hash: CxHqsNW3Jttxhc/TjN7FfkcAnyK5g0i/U6ZFrcNaVTA=)
2: nMKMonjjnI6Y8gPN4LEu0lw7tWE.roa (hash: 7DwnxGJishn478s//Mb4GTmfUpnt4KRFodLw/H0Hi0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:9e:a9:2b:25:e0:33:11:c3:db:a9:92:be:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b13910c1f98735e401650b1d34bf8b6a0a0696
Validity
Not Before: Feb 2 01:00:45 2025 GMT
Not After : Feb 3 01:00:45 2025 GMT
Subject: CN=d3329409f549809d831294180f255f7af4483690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:f0:88:75:6c:4a:33:da:7f:8a:6b:3e:be:
1e:e7:d2:95:44:b8:d0:b2:e0:6a:e5:c8:2f:eb:de:
d2:27:d1:13:45:9a:7b:fc:0d:3e:60:fe:78:36:eb:
7c:d2:e7:34:c9:58:ed:12:7d:17:51:42:ad:61:f4:
9d:94:43:f3:3d:47:29:ea:d3:53:6a:e3:96:74:d0:
d4:bc:97:69:be:a1:1a:4d:b6:b6:63:aa:ab:0a:98:
88:33:7a:26:a2:35:21:31:76:ea:8c:ae:58:fa:c5:
be:e7:c5:d5:39:d3:01:18:5e:7c:f2:ac:c7:a5:d3:
ef:8c:58:02:9e:9c:f6:9f:db:f1:30:f1:4a:a9:87:
c0:d2:d9:c3:18:d8:19:d7:8b:32:60:ec:30:43:5d:
da:69:dd:4a:24:c1:46:1e:30:be:c6:f3:39:76:ce:
3c:40:31:13:a5:4f:b9:98:a7:63:dc:da:31:bf:6c:
b2:29:9c:59:48:32:d1:74:96:db:3c:f4:23:11:89:
21:6c:75:45:e8:d7:12:35:ee:a1:48:c3:65:4a:df:
9a:e2:b6:a1:98:26:d2:71:2a:5b:bc:f6:8e:bf:dd:
14:b9:0d:f7:d3:78:0f:10:e3:05:2b:8f:22:92:a3:
ca:90:da:d3:df:03:bc:a1:96:31:46:b1:05:ed:d8:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:94:09:F5:49:80:9D:83:12:94:18:0F:25:5F:7A:F4:48:36:90
X509v3 Authority Key Identifier:
keyid:20:B1:39:10:C1:F9:87:35:E4:01:65:0B:1D:34:BF:8B:6A:0A:06:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILE5EMH5hzXkAWULHTS_i2oKBpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ced26-47b0-427a-881e-f713ad516185/1/ILE5EMH5hzXkAWULHTS_i2oKBpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:56:b7:4a:46:be:82:81:08:02:6b:62:ba:fd:b9:da:6d:
b5:71:be:9f:79:29:e2:9a:68:99:0b:47:58:ee:4f:ab:90:9c:
c5:1b:92:8e:0f:89:2d:42:d1:e4:48:a4:07:7f:94:78:c2:40:
04:cf:b1:d6:2e:85:bc:c5:09:8a:60:67:fb:8e:b9:bb:0f:18:
bb:c6:dc:4d:8c:59:e0:a4:44:fd:a0:ef:7e:f7:e8:c4:ae:0e:
93:46:23:ad:88:73:41:39:dc:0c:5b:fa:96:69:c1:34:69:bc:
04:a8:7b:d9:0d:1d:bd:36:a7:f0:d8:14:3c:63:93:18:36:06:
e4:21:3f:0d:f1:0c:40:8c:f6:63:22:53:bf:18:80:dc:d1:f8:
35:9d:98:a7:37:ec:43:de:41:f7:a2:69:e6:4e:e7:a4:e7:92:
f1:3f:37:7a:6e:6f:97:22:10:d2:db:53:eb:ac:3a:64:19:98:
4d:03:a7:96:da:bf:a1:7d:95:b3:cd:08:76:43:12:1f:a0:c6:
ad:29:9c:a4:16:5f:3b:63:31:c3:ef:d7:3d:c0:fe:9b:2c:b2:
55:39:62:94:76:96:98:57:ec:5f:a2:07:25:c0:2a:12:38:ea:
1a:91:3b:97:ec:84:40:55:ca:7b:29:09:b1:74:f1:8f:cd:c8:
31:54:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:49:34 2025 by rpki-client