Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
File: l2lJAzf2c8ZOORJK6JgbA05QEno.mft (raw, json)
Hash identifier: z+NyUGQF0Yh0duCxRXoC6RtpCNctzljbxgNZqH/mCME=
Subject key identifier: 4B:79:B5:C2:9E:B8:A3:FB:92:8F:CC:BE:CE:30:DB:D7:54:8E:E0:94
Authority key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Certificate issuer: /CN=9769490337f673c64e39124ae8981b034e50127a
Certificate serial: 0194C4D16644F678F7EA224103C5DD4AD406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
Manifest number: 142B
Signing time: Sun 02 Feb 2025 04:00:44 +0000
Manifest this update: Sun 02 Feb 2025 04:00:44 +0000
Manifest next update: Mon 03 Feb 2025 04:00:44 +0000
Files and hashes: 1: l2lJAzf2c8ZOORJK6JgbA05QEno.crl (hash: 7z3bqPohjTej/obXwXVaf3aC/K3tsbnwKyu5JPti2DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:66:44:f6:78:f7:ea:22:41:03:c5:dd:4a:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9769490337f673c64e39124ae8981b034e50127a
Validity
Not Before: Feb 2 04:00:44 2025 GMT
Not After : Feb 3 04:00:44 2025 GMT
Subject: CN=4b79b5c29eb8a3fb928fccbece30dbd7548ee094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:0e:81:9e:39:e5:0b:0a:6a:23:30:6a:f1:
36:10:f8:99:d0:f1:c1:b3:1e:a8:25:9d:49:76:a2:
1f:31:d1:a8:c6:1c:54:1a:78:48:fd:13:d3:c1:79:
98:18:3a:17:e2:09:dd:a4:aa:71:2e:b5:1c:0f:29:
af:d3:8f:a8:fa:59:df:f9:f9:18:66:69:c9:32:f8:
c7:ad:02:ee:76:ab:39:ec:9d:e5:30:f8:a4:f7:5f:
f7:6d:af:cd:db:05:3a:f4:db:7c:06:d0:88:0a:11:
fc:0d:ad:2a:f6:44:83:00:7b:a4:69:16:1e:45:a1:
a1:bb:9f:c4:15:05:cf:52:47:fc:89:f9:72:d1:ca:
fb:99:59:f2:1b:b0:da:d4:3c:90:15:58:78:85:ff:
7e:fd:06:94:f4:23:5b:20:8f:97:c5:35:45:14:72:
3c:2c:8b:c2:6c:7d:41:67:5f:58:e4:76:31:81:e7:
96:c4:62:99:8e:c9:54:53:11:f8:71:e7:41:58:dc:
b5:6b:ee:c2:59:2f:69:09:ba:3c:e3:83:4a:e9:2d:
c6:b5:b6:b3:6e:22:68:0c:34:d9:a5:97:e6:5a:f6:
a9:2f:3c:cf:51:e6:93:cc:e8:66:fb:65:ab:5b:01:
2d:51:17:68:07:37:09:74:d5:98:00:f0:51:fa:61:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:79:B5:C2:9E:B8:A3:FB:92:8F:CC:BE:CE:30:DB:D7:54:8E:E0:94
X509v3 Authority Key Identifier:
keyid:97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ae:34:57:e8:e2:e9:88:bc:8f:1d:36:f1:66:b4:19:06:71:
56:65:99:d5:3f:bb:f0:b0:5e:54:4f:e0:42:3b:ab:74:7b:87:
1c:ce:60:e9:ad:7b:9c:eb:37:c8:6c:1e:de:bb:08:f2:ec:48:
c1:35:cb:73:24:5f:2d:40:d6:08:df:7d:c4:88:00:34:32:ee:
a8:ec:41:51:38:83:ce:b9:73:c7:f2:17:84:eb:f7:12:49:7e:
f6:3f:e4:9a:48:6c:80:3c:c5:c5:61:f6:07:e0:09:5e:28:56:
ea:7e:17:08:e4:7b:b3:9c:55:95:f4:ed:78:62:fa:6f:18:19:
74:95:60:88:b4:43:4a:eb:9d:8d:5d:8c:93:31:03:d2:ab:bb:
6f:7a:63:41:67:d2:16:46:e5:a6:5d:0c:30:8b:3d:1c:31:d8:
55:20:eb:e2:f4:1a:8a:8b:f3:d3:7f:4d:fa:35:7e:a4:ff:62:
da:af:33:c2:bf:3b:bf:9f:21:9b:1b:85:ca:d4:c4:67:67:13:
7e:24:3a:e7:81:cc:19:36:3a:e2:4b:dd:4e:af:4e:13:e4:b3:
0a:ed:49:a4:af:83:b9:03:ec:50:a3:b2:6c:01:b2:87:31:87:
3c:e5:02:7b:56:f5:12:be:6c:1b:fd:dc:6e:ed:17:c0:46:d1:
60:0c:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:27 2025 by rpki-client