Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: ozGOeJD+8jO3teU7Jq91mdOnT5ngZO6O00I2fiT7Oio=
Subject key identifier: 5D:C5:AC:91:87:C6:54:55:2F:B1:13:31:B4:03:66:C8:CA:87:EA:30
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 019511A2B8B832DEBF041349848C97B57C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0D24
Signing time: Mon 17 Feb 2025 02:00:31 +0000
Manifest this update: Mon 17 Feb 2025 02:00:31 +0000
Manifest next update: Tue 18 Feb 2025 02:00:31 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: Viv9IMXUpBeRBei/lIGVOl/jTVYy5eALLYiXsj+xWKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b8:b8:32:de:bf:04:13:49:84:8c:97:b5:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Feb 17 02:00:31 2025 GMT
Not After : Feb 18 02:00:31 2025 GMT
Subject: CN=5dc5ac9187c654552fb11331b40366c8ca87ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:de:ab:bf:04:61:b2:6f:b8:33:e2:aa:c2:
a2:99:70:69:95:1b:60:3d:8c:05:51:12:6b:24:5f:
a3:48:c2:d6:19:84:83:10:16:e3:c5:56:a5:d2:4e:
83:2d:24:5a:2b:d2:c3:41:6b:c3:39:78:a1:64:3e:
57:81:eb:9a:73:e3:bd:f5:11:63:a9:5a:28:49:c3:
6c:96:23:3e:0f:9d:28:6d:8d:97:f4:e0:69:56:30:
0f:64:22:65:95:10:89:6f:95:5d:46:5c:b7:39:0f:
a5:ce:1f:fe:76:fb:0c:c1:ee:94:ca:0d:6d:38:4f:
8e:41:5c:ce:16:49:f9:eb:bd:fc:af:2c:df:10:ac:
cf:de:8c:df:fa:aa:a6:ca:8b:e9:c5:94:b9:28:06:
a5:69:1f:a5:39:2f:44:0f:c5:15:8a:6f:34:8c:e7:
19:dc:af:0e:43:87:dc:b2:3e:27:a1:14:c4:a1:4e:
fe:97:22:21:4a:44:4d:6e:2c:cc:a1:86:e9:bb:7a:
aa:1e:d9:f2:6c:56:89:a4:bf:9c:d0:83:4e:76:cb:
4e:28:96:13:28:e7:83:33:e0:0b:d4:b9:49:8a:d2:
5e:89:6c:55:ff:3b:87:fb:33:38:64:7a:00:d0:bd:
9d:b1:28:73:f9:56:db:66:45:b6:ad:16:34:d0:bc:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:AC:91:87:C6:54:55:2F:B1:13:31:B4:03:66:C8:CA:87:EA:30
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:37:10:72:36:c3:32:ca:ea:50:6b:84:5c:30:22:03:c0:9f:
67:64:4e:33:1f:ce:99:80:4d:ba:b0:d6:62:b6:55:bb:c4:57:
b9:bc:68:88:5f:4c:ee:ff:2b:12:1f:15:51:1a:ec:2d:3b:a6:
d8:6c:46:a4:6d:0e:46:c1:0a:b3:5e:42:f5:e2:4f:90:12:e0:
e0:04:63:6a:7f:6b:01:50:7b:c6:88:67:b9:da:0c:72:7f:4a:
6e:18:27:b9:d5:df:83:77:c7:d0:ea:7e:1a:5c:f0:d0:bd:1a:
d6:6b:c6:f1:4d:86:0d:8e:29:b2:ca:35:5e:ac:95:99:79:52:
47:73:12:33:51:31:9e:8e:ee:6f:b1:16:8f:17:06:ca:43:1d:
c7:69:99:49:d2:c5:b4:a5:e5:93:c3:ae:37:08:56:cc:88:12:
27:8f:bc:29:e2:b1:ce:6e:ca:58:ac:5f:0a:0e:29:f8:b3:55:
7c:9f:c2:d8:74:ca:d0:55:88:53:e4:a3:a3:19:24:07:ca:2f:
8a:dd:b9:b8:7d:b1:eb:67:e6:b7:c2:90:ad:fc:58:b2:84:d5:
f6:d9:31:9e:67:c2:6c:5b:7b:70:aa:c5:83:1f:91:03:e7:aa:
ca:52:64:29:dc:7c:b1:c1:47:19:20:ef:a4:a5:1e:4a:fc:d4:
aa:0e:27:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:19 2025 by rpki-client