Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier: YsIFluxgqf6atsZVLdOgr42R4M0JFRJnodkg7XnvZjU=
Subject key identifier: 52:F8:3E:90:A3:9E:98:7C:32:2D:1D:F0:48:A1:0C:F7:67:0E:06:0E
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial: 0195116BB6965C7ADCC974BEF8ACA6DD9BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number: 0449
Signing time: Mon 17 Feb 2025 01:00:26 +0000
Manifest this update: Mon 17 Feb 2025 01:00:26 +0000
Manifest next update: Tue 18 Feb 2025 01:00:26 +0000
Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: AnZW5RO0hwSUzfy6WXkgUGc2nwBXt9cIc0MMy2/ETi0=)
2: iM-HUbcoELfWgS-lPVnMpAjn2tU.roa (hash: FOA+HRQLHHEYU2ci+E8byaoG9+so0NlIhMx5zOmbRnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b6:96:5c:7a:dc:c9:74:be:f8:ac:a6:dd:9b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Validity
Not Before: Feb 17 01:00:26 2025 GMT
Not After : Feb 18 01:00:26 2025 GMT
Subject: CN=52f83e90a39e987c322d1df048a10cf7670e060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dc:b7:f8:23:ac:d1:88:56:a4:0f:1d:3f:c9:
6c:94:8e:54:40:66:3f:3f:db:ed:08:77:f3:74:aa:
0f:b5:21:00:39:aa:c0:d3:ab:96:56:c3:09:25:87:
27:5d:d1:55:90:70:c0:46:9c:67:2f:d8:ab:55:5e:
5e:16:98:02:d4:6c:ae:0d:f1:9a:27:cd:22:04:34:
24:39:e4:c7:e0:5f:97:e3:df:a0:a6:51:d0:61:26:
c6:aa:a1:ca:64:28:9a:07:78:e7:c2:c7:85:c1:5e:
29:6e:80:19:9d:d2:67:d6:df:f8:2e:a5:ce:ec:66:
fb:22:a2:80:b0:b7:10:de:fe:f9:2e:eb:6f:4d:9d:
4c:01:e9:c7:93:c5:58:2c:57:3d:19:cd:0b:e6:88:
3c:01:08:cd:66:a3:92:4e:9b:c8:d0:71:2a:40:01:
c7:83:3b:b2:ef:87:c4:b6:be:85:8d:2e:81:97:84:
8d:40:2a:81:ca:0b:b9:6d:21:e6:ce:c1:c4:ad:6e:
5e:1d:4d:37:a6:8c:ff:25:49:69:b7:dd:cf:b1:a0:
de:4c:6c:a4:79:dc:3a:a6:1b:2b:6a:d4:66:c6:b3:
d9:5a:c4:ec:6a:d1:44:ff:e4:99:99:da:0f:45:2a:
2a:ba:5d:85:b6:55:35:82:44:65:a0:30:ea:ea:4c:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:3E:90:A3:9E:98:7C:32:2D:1D:F0:48:A1:0C:F7:67:0E:06:0E
X509v3 Authority Key Identifier:
keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8a:c1:a6:6f:a4:a0:32:b4:b9:9e:14:fb:35:82:95:d7:43:
26:f5:67:e3:d3:42:e4:b0:49:7e:2d:f0:a8:61:fc:e1:04:20:
e8:42:9d:c2:2e:58:5a:53:c7:bf:82:d5:36:a8:43:a1:a6:06:
fd:82:e2:85:16:25:5d:9b:82:11:be:93:58:21:cf:74:d8:6d:
ba:d3:01:03:aa:97:15:4c:7c:ef:8c:b8:44:fd:5f:00:33:40:
fd:6e:23:5b:47:3e:f3:de:d7:d0:54:b5:1b:e0:72:b1:d4:8f:
75:0f:bc:96:4c:31:bd:6f:c4:be:ff:db:30:a1:f2:c8:11:72:
52:78:05:82:14:ae:85:2e:ce:7e:17:79:b0:b1:91:77:98:ec:
e0:dd:bd:1f:94:e1:ac:f7:e7:70:6f:98:6f:08:b7:51:9d:5d:
9e:4d:91:83:11:ee:87:c8:09:7b:29:2b:b6:82:12:23:4d:68:
03:3c:10:a2:87:8e:5d:00:4d:e5:30:39:b4:f8:72:8b:fa:41:
e6:90:d2:b3:e2:83:cc:2b:ea:58:ef:1c:f0:28:3d:ab:2c:78:
e3:dd:58:75:f4:02:c9:1e:6d:73:89:01:eb:5e:d5:bf:4c:9d:
ed:7a:9e:59:51:54:db:f5:6c:be:23:69:09:3b:29:be:41:6b:
ec:e3:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:53 2025 by rpki-client