Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: ZXqHtYD4ug9KPgYTCPTalZ3h7bP7+Y+85NQMNre8je4=
Subject key identifier: 63:FE:4F:6C:F0:36:8E:27:A5:87:12:16:50:70:CE:59:C9:76:51:E0
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 019510FE0501ADC1F6EE8B81443AF536F0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 23:00:37 +0000
Manifest this update: Sun 16 Feb 2025 23:00:37 +0000
Manifest next update: Mon 17 Feb 2025 23:00:37 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: Ms++DOfbIxWKgft5XtQ8usfuAei40jA43VZOoUA9uLg=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:05:01:ad:c1:f6:ee:8b:81:44:3a:f5:36:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Feb 16 23:00:37 2025 GMT
Not After : Feb 17 23:00:37 2025 GMT
Subject: CN=63fe4f6cf0368e27a58712165070ce59c97651e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:d5:ab:55:4c:d9:51:4a:3e:c4:28:09:60:
95:51:c4:f3:c9:fd:12:08:8e:08:e7:7d:2a:ff:94:
18:62:0d:2f:1b:ca:a9:a4:75:f2:c8:97:47:ec:a8:
de:63:1a:a3:fb:b0:35:91:0c:ca:a0:19:69:53:38:
dc:bd:f2:08:1f:68:ec:10:e7:a2:f3:5c:96:aa:47:
ff:19:78:3d:3c:81:98:16:7b:57:06:19:56:5c:b0:
a3:89:7d:43:75:f3:ba:41:74:37:57:2e:b8:cd:02:
68:e2:9d:25:60:04:c0:df:30:ff:4b:e1:7e:8a:41:
5c:ab:ac:5e:e4:4e:84:56:b0:94:e8:40:c4:4c:1a:
9c:79:0b:0a:f7:f9:48:07:fc:04:b9:e1:4b:90:99:
e9:68:dd:e7:dc:a2:e9:e9:19:4c:ed:21:53:c3:68:
49:2e:f5:60:e1:41:c6:d7:f6:f6:31:70:9f:04:f3:
d5:d7:93:3f:a9:5e:80:fe:0f:84:71:3b:21:ef:03:
28:eb:78:24:ef:ed:40:6f:e8:f7:2b:9e:99:38:d2:
a5:63:c0:a8:59:fb:85:b9:ed:1e:5b:70:2f:be:a1:
62:d1:e4:78:7b:83:c4:48:8c:f0:e1:13:5d:4c:5f:
b2:ac:44:c6:d5:da:4c:14:ee:b9:77:85:83:db:8a:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FE:4F:6C:F0:36:8E:27:A5:87:12:16:50:70:CE:59:C9:76:51:E0
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:70:8a:aa:f7:bf:03:16:46:bd:3d:f7:40:f6:f6:7a:78:
93:c9:4b:42:3e:ed:12:ac:f6:20:43:cb:07:f9:5f:22:c1:51:
a0:f9:e6:31:58:71:12:d4:f4:71:37:68:e2:b7:f3:13:94:34:
d2:80:39:2c:f5:a2:93:ac:b6:9c:41:9b:85:99:95:41:dc:0b:
2d:ad:1e:3e:d1:c8:6e:9b:98:49:64:be:fc:89:1f:63:51:f2:
0a:9b:a8:a2:be:2d:39:ef:72:17:9e:1c:a0:1d:1c:d6:1f:d3:
62:9a:78:07:ec:14:7e:9d:2a:3f:b8:c2:89:67:68:3c:29:b5:
b7:1f:55:f9:b2:31:7e:5b:72:3c:0b:9d:77:be:97:3f:46:8a:
b2:47:27:01:70:61:08:93:67:b5:ad:6e:63:7c:84:27:75:db:
7a:8d:27:68:b4:9c:31:87:64:4e:af:b6:e1:1a:a9:91:8b:bc:
9c:71:49:91:7a:e8:7a:83:e1:21:ac:b9:e9:41:4a:a9:91:43:
77:fb:79:2a:a5:3e:2c:90:f0:3f:c7:40:0e:c7:fa:d7:e5:e0:
e0:4f:0b:81:e4:3f:0e:05:8d:8d:c0:ad:00:e1:e5:39:bd:9b:
50:2b:5d:c8:ab:e3:00:c2:d7:f0:1d:79:51:51:f3:f4:86:30:
7f:da:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:33 2025 by rpki-client