Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
File: LijWjfjYqxVZsR5zmeYu3DMjyj0.mft (raw, json)
Hash identifier: YrZmRW5lspBtab5n4fcHoQUjknHovj4yjejH/EEG920=
Subject key identifier: 5D:99:F8:E3:C0:E0:2C:BE:7D:0A:9C:C2:ED:E8:CC:D8:19:F5:13:C1
Authority key identifier: 2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
Certificate issuer: /CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Certificate serial: 0194BAF200E3179B0D8D34B44F784C53D8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
Manifest number: FB
Signing time: Fri 31 Jan 2025 06:00:09 +0000
Manifest this update: Fri 31 Jan 2025 06:00:09 +0000
Manifest next update: Sat 01 Feb 2025 06:00:09 +0000
Files and hashes: 1: LijWjfjYqxVZsR5zmeYu3DMjyj0.crl (hash: tSpRofNNifphCQabCI98up1G6XiMKap7RyYetUyfhTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:00:e3:17:9b:0d:8d:34:b4:4f:78:4c:53:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e28d68df8d8ab1559b11e7399e62edc3323ca3d
Validity
Not Before: Jan 31 06:00:09 2025 GMT
Not After : Feb 1 06:00:09 2025 GMT
Subject: CN=5d99f8e3c0e02cbe7d0a9cc2ede8ccd819f513c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:ae:5c:df:ca:8b:ae:d7:cf:5c:25:f0:67:
9f:b5:e4:1f:10:81:cf:f4:5a:82:7f:a8:7e:04:b1:
a6:d6:e9:94:5f:4e:1d:22:f8:bd:85:62:3b:7b:c3:
5f:3c:16:30:4f:05:26:8f:fb:40:f4:10:07:54:db:
bd:5e:05:90:2d:c0:24:0d:8c:ae:5e:0c:05:31:15:
cf:91:91:c7:30:d8:f0:32:d6:7c:c3:f6:4d:38:f2:
28:d0:9e:ad:dc:65:37:7c:a6:ec:b1:24:fe:9d:59:
d6:01:19:19:fc:3d:39:e7:68:62:c8:0c:ac:8a:2b:
d8:7b:c4:6e:63:1c:83:9f:54:e0:06:bb:5e:37:83:
ff:44:48:61:70:b0:03:17:ab:cf:72:ed:94:c0:d6:
4c:1a:47:40:a6:d0:8a:51:b5:be:4c:16:94:1c:65:
06:68:08:6b:4b:51:45:9f:5f:79:70:b5:76:4f:75:
2b:df:04:2c:36:52:ad:df:6a:d1:8e:f1:38:25:b7:
8c:91:cd:2f:76:e4:fc:cc:a0:32:24:d3:ac:53:3c:
e3:5b:a2:32:42:65:9f:22:3f:8e:d6:d3:08:25:43:
b2:fb:18:05:2d:d1:4d:1e:69:16:bc:f9:5f:55:b8:
a3:3a:df:ce:9b:e4:80:df:23:e7:d9:53:47:1d:83:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:F8:E3:C0:E0:2C:BE:7D:0A:9C:C2:ED:E8:CC:D8:19:F5:13:C1
X509v3 Authority Key Identifier:
keyid:2E:28:D6:8D:F8:D8:AB:15:59:B1:1E:73:99:E6:2E:DC:33:23:CA:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LijWjfjYqxVZsR5zmeYu3DMjyj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/991825-d4bf-48c6-9493-38cfec21b422/1/LijWjfjYqxVZsR5zmeYu3DMjyj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:d5:29:d2:17:b1:2f:40:e4:56:62:df:55:97:8b:5e:39:
04:34:f0:4d:4e:39:b0:5f:9f:2a:fb:73:c0:11:62:d2:a5:79:
3f:1f:1f:65:5a:b3:76:1e:33:20:6a:3a:19:f2:b2:e5:4f:a8:
a5:dc:1a:57:06:d0:a4:bd:b1:54:ff:77:dc:48:fa:c0:09:0f:
c0:5c:7f:53:b3:59:3d:20:7c:25:05:58:97:9c:d7:35:0f:fa:
6b:7d:72:b5:3c:e6:63:2d:dd:1f:22:18:eb:0b:96:5d:f7:f1:
f6:39:ab:8f:e3:a0:e6:dc:2a:2d:2c:b0:75:fe:ec:04:fb:ee:
4f:2a:19:19:26:15:c9:99:ea:5c:5b:66:4f:70:68:6e:0f:eb:
4d:13:0c:fa:84:ab:c7:ff:36:e6:59:98:f7:b0:ee:57:12:4f:
cf:dc:90:16:9b:8d:43:2b:69:58:a1:a1:e6:88:46:c0:83:d5:
35:1d:59:ea:85:74:4f:24:d3:27:f4:84:20:89:ba:0b:76:f7:
a5:ab:36:4a:a5:02:6d:b5:90:cd:87:59:85:4c:60:f5:82:f1:
8d:b0:8c:dc:89:09:5c:06:d7:d2:1b:a3:c6:3e:80:02:ec:9b:
8f:dc:d0:f9:39:51:78:16:fa:f9:42:d2:92:f0:63:18:9c:6c:
e7:93:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:00 2025 by rpki-client on console-fra.rpki-client.org