Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: QY3xfMsMUSyHWQmbCGYMYCjmLQpLwG7d0aOxmkAMWZc=
Subject key identifier: FE:E4:94:E3:42:CE:85:A5:28:62:95:E5:B4:D6:E8:95:D8:88:CD:AD
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019512106F2D0500D4AB823002FEAF7081D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 04:00:21 +0000
Manifest this update: Mon 17 Feb 2025 04:00:21 +0000
Manifest next update: Tue 18 Feb 2025 04:00:21 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: p1I8oBcTFQ7nczrezZ3NQ01xfu/lymBCk3dJ/nV7Exc=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:6f:2d:05:00:d4:ab:82:30:02:fe:af:70:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Feb 17 04:00:21 2025 GMT
Not After : Feb 18 04:00:21 2025 GMT
Subject: CN=fee494e342ce85a5286295e5b4d6e895d888cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:f0:ab:b0:e9:f9:c0:1b:8e:a9:ea:5d:86:
51:49:6e:5e:c3:78:65:57:61:0d:61:dd:2b:9c:7e:
74:1d:17:92:57:2b:6a:42:57:e2:e6:a0:19:a8:7e:
69:cf:11:7e:a1:eb:9e:7c:96:3a:bc:f0:20:53:20:
c5:c2:c0:3a:c8:46:2a:49:83:22:74:66:b5:77:fa:
3c:7c:61:f3:c8:c7:ea:ed:d8:86:76:5f:1d:d7:ab:
ee:cc:b6:0b:2d:2b:d8:65:91:bf:99:8e:0f:ac:21:
a9:b4:cc:42:6d:cc:7c:ef:8b:95:cf:28:ff:4f:e8:
cb:5b:5c:19:b3:45:68:3b:46:b5:63:27:19:8d:eb:
8f:da:5b:2d:c1:71:27:f9:3b:f4:9e:56:fc:74:45:
d7:c4:89:47:7f:45:43:99:62:ca:fe:c0:6f:19:34:
07:fe:71:4c:aa:9c:02:e5:79:e3:59:00:fb:c5:6d:
f5:c1:52:df:18:59:93:7d:8c:a0:97:f0:05:26:cb:
6b:3d:66:6d:86:66:18:42:17:1d:cb:84:b7:2d:59:
f8:c1:39:b6:ff:12:64:0c:84:22:4e:03:a5:93:ff:
3f:f7:d2:3d:c6:e8:07:17:45:d0:0e:24:93:66:7b:
2b:86:99:d4:ce:74:c1:58:2e:d9:80:96:7a:ec:3e:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E4:94:E3:42:CE:85:A5:28:62:95:E5:B4:D6:E8:95:D8:88:CD:AD
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fd:21:b9:ee:fe:00:25:d9:50:69:c2:73:85:3f:9c:5a:62:
74:85:d8:b2:56:b3:5d:59:68:96:67:a5:f0:4d:8f:07:11:05:
37:9a:7e:cb:ae:61:a4:a1:49:3e:2c:ee:20:32:0f:0d:59:64:
b6:44:fb:10:af:55:0e:19:f9:dc:2f:a0:47:66:62:96:53:6c:
82:9d:c9:02:c5:b8:7e:e3:4c:b8:01:21:52:75:56:42:4a:a7:
28:e6:82:a3:00:18:ff:7c:22:2c:80:3f:a5:d3:d5:ae:5d:8d:
f4:79:53:9e:07:05:23:f2:4e:c5:a7:63:e1:a2:e9:82:b6:b2:
01:b1:32:83:7f:08:18:ce:5b:76:9a:9e:0f:d5:2a:0d:9c:23:
b2:28:8a:f8:8c:4e:ed:bb:24:1a:c4:fd:ce:31:fb:40:c4:d8:
64:3f:fe:b5:77:b5:35:16:19:b6:36:3b:47:4b:ba:a5:24:c5:
29:2c:02:63:98:71:96:3e:a9:44:b7:47:7b:24:27:98:26:b8:
69:09:d9:17:71:60:03:fc:94:19:76:28:f4:0a:43:47:27:25:
0d:3f:e1:b5:7d:4d:41:cb:74:aa:50:a9:7b:d1:76:57:b0:e6:
b4:70:3d:cf:fe:dc:25:ea:89:01:d6:69:55:e6:50:2e:56:24:
35:d1:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:04 2025 by rpki-client