Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File: PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier: MKTD30VML6dOKuo42MCTv950S1q8gb5LEsPDGMvVyA0=
Subject key identifier: EA:E0:5A:78:10:0E:39:51:85:21:A8:E6:11:8B:60:D6:26:59:91:49
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 019511A2CA47145CCDD3D0F8C424E97E0EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number: 08BB
Signing time: Mon 17 Feb 2025 02:00:36 +0000
Manifest this update: Mon 17 Feb 2025 02:00:36 +0000
Manifest next update: Tue 18 Feb 2025 02:00:36 +0000
Files and hashes: 1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: D3CMHN5gIqlKPLWc/D78AhffvLZAl4aE9KQhtXXqMc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:ca:47:14:5c:cd:d3:d0:f8:c4:24:e9:7e:0e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Feb 17 02:00:36 2025 GMT
Not After : Feb 18 02:00:36 2025 GMT
Subject: CN=eae05a78100e39518521a8e6118b60d626599149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:39:ac:8d:a9:fa:bb:dd:ca:be:f6:06:78:
06:1f:84:c6:f5:b5:42:5d:9a:86:eb:21:df:eb:70:
43:17:8e:95:1c:e9:be:33:82:ca:de:f1:fa:ad:5d:
00:49:c8:7c:2a:1a:b5:35:3d:4d:26:83:ea:2b:7c:
5f:ad:17:87:25:19:c9:a8:24:06:ae:f4:98:d3:41:
d4:f0:28:ea:22:0f:a7:1d:d0:05:a1:23:03:58:0a:
22:20:60:ad:df:ec:35:fa:37:3c:34:b5:91:95:47:
81:e8:ea:41:5d:be:0b:e1:d9:d3:6f:5e:7b:25:ec:
cf:86:a1:5b:8d:88:c0:c2:1b:2f:83:8d:bb:3f:cc:
a9:20:0a:fa:39:1f:dd:56:32:b0:f6:20:99:8a:6c:
bc:6f:32:28:0b:3f:02:4e:a3:0b:b9:00:0b:1b:d9:
31:aa:09:1d:67:a9:0b:4e:9b:b3:78:f3:2f:3b:ac:
96:28:67:a3:d0:5e:70:2a:21:bf:db:78:c8:6c:92:
3e:6f:eb:4d:27:43:97:21:29:13:98:a2:f9:f2:01:
67:ed:cc:22:49:a5:be:6a:de:ad:36:46:c8:71:32:
0a:6f:e6:14:ed:1a:fc:7a:92:95:38:1b:87:c9:22:
7c:84:da:08:b8:49:6d:3b:ce:47:2f:38:ad:38:6a:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:5A:78:10:0E:39:51:85:21:A8:E6:11:8B:60:D6:26:59:91:49
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:52:ce:94:a4:7d:0b:d1:b5:ae:9c:76:9b:e8:03:9b:1b:56:
54:3d:75:71:2b:ea:d3:98:04:73:93:eb:4e:6a:58:42:41:be:
f1:04:ad:55:df:6c:f9:1f:0c:95:ed:6d:df:ae:61:0a:05:4c:
f3:2c:11:3c:ef:d5:4b:d0:39:65:28:4b:56:81:d3:fc:0d:82:
5b:97:da:21:9e:f9:07:61:c3:fd:1a:14:66:fc:d3:7a:c5:1c:
1c:d6:95:08:19:5d:c7:76:cb:25:ae:1b:f7:5e:d8:eb:ec:7d:
a8:d1:b3:65:0b:b7:3e:60:6a:9a:5c:7f:fd:65:22:1d:35:1b:
15:17:95:1c:19:37:bc:67:ca:0a:b4:c8:cc:b5:f2:13:f8:8c:
a3:3f:e6:11:36:df:3e:30:1e:31:d4:8b:f0:6e:c5:4d:43:f5:
98:da:5d:ca:d5:a6:88:ba:af:fa:67:86:97:c0:8e:2f:01:a6:
25:cc:bb:4f:3c:e1:9c:02:0a:25:ea:c4:0a:b6:a3:f7:38:ea:
81:7a:cd:b7:db:02:30:a3:31:87:07:ff:79:46:cb:16:b2:65:
68:3f:7e:7c:f3:f7:e6:3b:c0:7f:81:54:78:52:68:32:58:51:
4c:08:7c:20:1b:cb:4f:c1:c3:81:98:74:b6:d2:e7:5e:ef:1d:
5b:ff:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:09 2025 by rpki-client