Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json)
Hash identifier: d1QSSncE3FSzjvpwtYDER9/KU7a2EkVWR9W4qC+Q7W8=
Subject key identifier: D0:A5:86:79:C4:E2:49:AA:DE:50:B0:2E:76:21:94:8B:7F:42:57:3A
Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Certificate serial: 0195127E4F515890E5A0E3A84209FED99241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 06:00:22 +0000
Manifest this update: Mon 17 Feb 2025 06:00:22 +0000
Manifest next update: Tue 18 Feb 2025 06:00:22 +0000
Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: gdhzbQfvzR3PIYHYCujijISUasMAIMKJSldMvL+/h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:4f:51:58:90:e5:a0:e3:a8:42:09:fe:d9:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2
Validity
Not Before: Feb 17 06:00:22 2025 GMT
Not After : Feb 18 06:00:22 2025 GMT
Subject: CN=d0a58679c4e249aade50b02e7621948b7f42573a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:3c:fd:c1:65:9b:35:2e:50:5d:b7:79:3a:
a2:d1:56:e8:8c:5c:fd:3d:b8:10:29:e4:af:19:46:
e1:3f:9e:c7:60:dd:d4:b6:ce:cf:86:66:58:1d:85:
4d:73:1b:37:04:6e:2b:29:89:8d:96:7f:6d:f7:ec:
08:60:45:6a:c9:14:f4:04:65:e5:50:b3:b4:87:69:
51:d2:17:08:b0:59:14:01:49:f6:80:88:de:d2:21:
96:e7:94:b7:c6:1a:20:23:65:bf:b7:00:0f:f8:d4:
8d:a2:14:11:8e:70:fb:c8:bc:54:43:8f:98:aa:ab:
97:06:86:b2:bb:b5:8c:c9:15:1a:71:97:7b:37:72:
2c:3f:6b:5d:ba:dd:8b:a0:03:94:67:3c:50:5c:01:
0b:71:19:10:6e:f5:4d:88:83:6b:00:a5:cc:d1:a5:
58:91:bf:50:87:cc:a0:22:6b:29:6c:4e:32:17:b9:
2e:8b:b2:4c:3d:ca:75:ca:56:e1:6c:f4:9e:80:2b:
c6:28:2a:db:41:41:a9:db:dd:dd:85:f1:4d:0f:02:
b7:1e:da:52:08:66:7d:71:7e:37:44:71:96:ba:02:
f8:74:bc:54:0f:53:4b:07:8f:72:89:f9:2e:ab:2a:
25:9e:47:91:62:da:c3:41:b0:a3:12:0e:bb:5b:99:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:86:79:C4:E2:49:AA:DE:50:B0:2E:76:21:94:8B:7F:42:57:3A
X509v3 Authority Key Identifier:
keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:df:8c:aa:88:f1:e1:3e:ca:91:6a:8d:19:af:8b:b9:29:
37:d8:c2:a5:b2:36:fc:17:3d:1a:a1:f7:33:3b:9f:e4:20:11:
82:69:c4:6b:fe:69:be:14:50:9b:71:10:7c:f4:e4:2c:09:db:
3b:c4:7b:d1:be:e5:9d:ed:78:32:39:08:84:af:8b:db:3c:00:
60:f9:8d:ad:6b:1f:a0:ea:7d:68:fd:41:56:07:11:f6:83:f4:
9d:c7:b5:e8:d4:5e:a8:5b:8f:2c:1a:7e:a4:89:3a:a7:57:bc:
32:b8:e5:7b:ab:ea:82:3f:c2:62:53:ba:ad:21:aa:92:e6:62:
8c:4e:02:03:fb:dd:a0:c6:39:56:64:69:ec:db:5b:ba:b0:4e:
9f:39:00:7c:ff:5b:ba:48:df:72:d1:ea:30:2d:d7:e8:9f:31:
c6:55:46:b3:ff:cc:a4:c4:d5:6f:c3:e6:d0:19:a8:47:76:36:
e3:bb:55:ca:8e:f1:9e:dd:81:48:f3:89:05:be:43:2e:01:79:
80:07:97:68:90:a6:cc:1d:34:f0:c9:44:d9:71:fe:09:4d:71:
2b:d4:1a:93:fa:13:9c:1d:e3:a2:9f:01:06:3c:17:08:67:5e:
1b:c2:19:3c:08:43:ed:04:7f:ab:48:39:a1:dc:c5:d7:9e:f2:
0f:56:2d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:18 2025 by rpki-client