Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
File: AZFJZGkWfFsdiSC5i9Ua8_41reU.mft (raw, json)
Hash identifier: 1aSOJj0rX73iJAWAGUt/FuvAYtT2/Mi+PPY3kHvDsAA=
Subject key identifier: C5:98:59:13:46:29:C2:2D:B0:BD:A9:35:E9:14:14:79:4E:4F:BD:60
Authority key identifier: 01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
Certificate issuer: /CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Certificate serial: 01951134CA9752BA5DA92EED21AFBBFA3ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 00:00:27 +0000
Manifest this update: Mon 17 Feb 2025 00:00:27 +0000
Manifest next update: Tue 18 Feb 2025 00:00:27 +0000
Files and hashes: 1: 0uBbhfjzQTuxZI98xWIkcb9EAVA.roa (hash: sJHqQCVtJVeOaKdOxzCvZpcmp4dJNcKnSV28v9PT9cw=)
2: AZFJZGkWfFsdiSC5i9Ua8_41reU.crl (hash: raoROrzwEDxttXgSuAd1qW4uyb0hPNCYoxAujyaNF6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:ca:97:52:ba:5d:a9:2e:ed:21:af:bb:fa:3a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0191496469167c5b1d8920b98bd51af3fe35ade5
Validity
Not Before: Feb 17 00:00:27 2025 GMT
Not After : Feb 18 00:00:27 2025 GMT
Subject: CN=c59859134629c22db0bda935e91414794e4fbd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:8b:fa:bc:c6:44:08:9d:04:56:f1:83:80:
2d:6a:b2:9e:f7:f0:62:d8:64:c4:60:47:55:70:59:
8f:0f:78:37:54:da:df:e1:59:1c:91:13:f4:33:64:
bc:8c:1c:e2:fd:dc:b2:73:71:68:f2:a7:58:5f:0f:
9e:4b:65:fa:7a:57:99:71:c5:81:4b:4a:03:3b:df:
21:fb:2e:19:0f:15:5f:3b:f9:ae:a1:6d:73:45:c3:
1f:de:02:9a:4a:e3:6c:55:5f:5a:3a:11:b8:f4:04:
92:11:52:4c:dc:1a:55:ae:9b:32:97:da:6d:eb:00:
43:6e:b5:34:56:af:18:d9:a1:bb:ee:0c:07:cd:35:
e4:72:a7:4e:c5:4e:01:52:b3:cc:9a:7b:31:17:e4:
ce:0b:a6:72:32:0a:bb:4f:c9:f1:60:68:53:95:4c:
25:d2:9f:c2:94:5e:d9:7e:0e:d5:45:db:45:a0:bc:
51:50:fa:92:24:83:1b:46:e5:25:cb:cd:9e:ef:b1:
8b:f7:67:f6:ee:f2:fd:42:78:1a:66:aa:25:e0:06:
28:64:82:4c:c9:ce:01:40:f6:be:ab:96:1f:90:81:
b7:99:ee:b0:63:a1:e1:45:25:54:26:e8:d7:db:64:
b8:a6:ae:e6:f9:3b:7a:a0:69:3d:d0:9f:e4:ba:d2:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:59:13:46:29:C2:2D:B0:BD:A9:35:E9:14:14:79:4E:4F:BD:60
X509v3 Authority Key Identifier:
keyid:01:91:49:64:69:16:7C:5B:1D:89:20:B9:8B:D5:1A:F3:FE:35:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZFJZGkWfFsdiSC5i9Ua8_41reU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1d0152-856d-4717-8219-bf2f97f1e34f/1/AZFJZGkWfFsdiSC5i9Ua8_41reU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:58:19:b8:60:4d:1c:5f:d4:57:d9:18:13:5f:56:90:d0:
51:b1:5e:f5:bf:68:01:e2:60:18:10:39:cf:9b:a6:f5:3b:45:
aa:a1:ac:cb:96:95:a4:82:77:a4:53:0e:2d:c9:20:e2:92:d8:
95:bd:43:22:d7:84:31:4a:a7:06:3f:fa:a9:29:93:76:6d:d8:
28:8e:87:a5:0d:95:a2:d4:30:91:7a:64:c7:a8:e7:9e:70:54:
d1:db:60:73:f6:c9:45:07:bc:8b:eb:7a:3a:20:fe:1d:9b:b1:
a0:94:c5:20:6a:8e:e3:e0:6d:f8:ec:4b:be:ba:1b:c0:38:da:
cf:23:4a:ff:df:af:6c:7b:0b:41:3c:6d:b8:1b:cc:82:d0:d1:
c0:91:de:00:9c:5c:fb:03:27:89:38:87:5d:81:43:5a:9b:6f:
33:9e:e4:b6:15:0d:ac:dc:1d:7f:d3:6a:94:1c:4b:0b:0f:4d:
e7:9c:df:5e:1f:7c:a6:ad:47:39:3f:ea:26:14:ea:b1:3f:cf:
26:84:73:81:1a:02:76:06:c0:73:ff:7f:79:a9:56:a6:d1:35:
39:ea:3c:73:0f:62:a9:de:db:27:0f:07:3d:a4:f8:24:8f:17:
1e:7a:16:b3:88:54:2d:07:bc:d9:8d:24:c7:4e:29:f7:fc:83:
b9:3e:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:16 2025 by rpki-client