Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: gnBJEqD/sqQDxR6DGll+/rIX6CWMZd81A2a2Miv4nQA=
Subject key identifier: 1E:F7:DB:56:B4:5C:78:1A:CF:4A:26:36:16:25:CA:50:08:CA:36:1B
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 01951134AF25900C133506AB8B8D1184990A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 00:00:20 +0000
Manifest this update: Mon 17 Feb 2025 00:00:20 +0000
Manifest next update: Tue 18 Feb 2025 00:00:20 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: +s/q/qI45/Ink4LytoODE20uUmOV87+h0xGvqpIeH20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:af:25:90:0c:13:35:06:ab:8b:8d:11:84:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Feb 17 00:00:20 2025 GMT
Not After : Feb 18 00:00:20 2025 GMT
Subject: CN=1ef7db56b45c781acf4a26361625ca5008ca361b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:e0:17:1e:a3:26:42:22:4b:89:75:57:23:
34:95:5d:0d:c7:ce:55:20:3a:e1:c6:2b:9b:10:c8:
33:ed:d3:82:88:78:53:b0:db:3b:e9:6e:b3:be:a9:
8b:b8:76:d3:0c:3c:ba:e6:0c:5b:91:a6:6c:1a:9b:
12:0a:ff:d6:8f:83:26:fd:c6:41:39:f7:59:07:21:
cb:39:81:1e:b2:4e:ad:8f:68:c1:30:c7:17:8f:d1:
c0:30:14:c0:55:fa:49:94:69:50:3b:1e:16:f2:32:
5a:6a:be:76:00:dc:1e:70:ee:5f:d8:5a:f5:be:b0:
27:48:da:9f:be:09:7c:78:a5:15:f7:fc:93:76:d2:
c8:6a:82:37:af:ab:b7:92:97:13:1f:54:d9:1a:54:
3a:53:77:9c:c2:d4:1f:38:fd:1e:47:c2:b4:80:7e:
d7:0a:f8:53:6f:23:20:f6:72:35:da:66:8b:dc:e4:
b4:3a:82:30:a3:83:a7:d7:ab:22:e8:a3:62:b4:93:
67:b9:64:ad:d5:01:78:f7:5f:4c:b2:15:12:07:b0:
ee:b6:b0:cf:e4:48:92:9a:c4:d6:ba:3c:77:a8:0b:
77:75:58:79:38:7a:a6:2d:26:03:4c:6b:08:00:5a:
0d:03:e6:c1:dc:d6:18:f9:9b:31:31:a0:89:60:2a:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F7:DB:56:B4:5C:78:1A:CF:4A:26:36:16:25:CA:50:08:CA:36:1B
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:48:bc:6d:5d:e5:b2:a1:95:72:ba:a0:fe:18:86:cc:b9:
3f:8b:37:af:f1:c0:76:7b:5d:a1:0c:e4:c1:e3:69:31:07:48:
ae:1d:48:b7:ae:13:2f:09:9b:15:fa:0d:5b:1e:0a:3e:12:bd:
1f:fd:66:05:49:2e:55:1c:c7:d4:fc:f0:47:99:8e:62:a9:51:
5e:97:dc:96:dd:82:b1:b5:57:7f:4e:21:27:3f:94:62:36:01:
f9:a3:f5:c0:ad:92:5b:ce:07:db:7e:6e:ea:58:a9:8f:9d:63:
4f:62:a3:c3:66:0d:10:b4:5d:a8:c1:81:a2:93:14:fe:27:13:
26:80:58:80:9b:c2:74:c5:5d:5e:4d:75:ec:42:8b:34:a7:df:
51:18:ca:90:94:3c:0d:27:a1:1b:6e:0a:df:3f:15:69:c7:e9:
7a:41:ab:e3:e1:8a:a5:14:ba:12:70:56:a5:cc:7d:ea:02:01:
28:d1:a5:8d:5c:b7:f0:cb:3d:cf:7b:a2:ee:95:c9:34:ba:da:
1a:15:f1:92:b2:f2:6e:8d:1b:f2:76:f5:d6:7e:9e:6c:8d:de:
36:13:71:ee:09:55:11:b2:69:09:7e:34:f5:6d:bc:6f:60:6c:
87:de:22:5c:72:ea:90:b9:43:ff:13:17:d9:71:7e:fe:54:89:
10:c8:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:09 2025 by rpki-client