Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: f5xUk4SK/6N9UVR7pSlQ8AIMcG636bm+ZcLclZ7SCCs=
Subject key identifier: 2D:0C:83:AA:B7:1D:74:4E:1E:3F:5E:35:03:EF:58:17:47:47:CB:56
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 01951210CE8E3C044344DE359DF41174A6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 04:00:46 +0000
Manifest this update: Mon 17 Feb 2025 04:00:46 +0000
Manifest next update: Tue 18 Feb 2025 04:00:46 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: astbegTnzlo4LdckVP9neAmyhd10beEiy/3WRDylK7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:ce:8e:3c:04:43:44:de:35:9d:f4:11:74:a6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Feb 17 04:00:46 2025 GMT
Not After : Feb 18 04:00:46 2025 GMT
Subject: CN=2d0c83aab71d744e1e3f5e3503ef58174747cb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:28:a3:b1:0f:77:a8:e7:cc:00:fc:e6:27:
0e:c3:7e:93:31:a2:65:32:92:17:6c:d6:9f:8f:6a:
71:6a:56:86:2a:75:d5:47:af:ea:a0:3c:77:60:43:
d6:0a:83:f0:5a:b7:99:64:38:1e:ac:19:20:36:c1:
bb:3b:00:68:88:c0:52:68:90:fd:46:6f:3f:a5:9a:
ee:b5:9d:76:1c:48:01:9e:1c:b3:52:24:c2:99:47:
b2:2a:32:fd:70:a8:54:79:1a:46:89:46:62:d2:c7:
95:44:de:81:f4:b9:51:06:60:90:3c:07:8b:5f:34:
23:73:83:63:ae:3e:cc:09:de:8a:bd:9d:e3:2d:7f:
67:a5:4d:f9:47:cc:9a:3e:35:71:e7:5f:28:8c:40:
38:6c:c9:b1:5f:a3:79:7e:44:f2:8e:17:48:2e:8a:
f2:e8:84:da:3f:3d:b2:d0:7c:7c:e5:e9:7a:9b:8c:
a0:28:16:0d:93:4a:c9:37:de:fa:c9:1e:61:5a:49:
0e:aa:83:28:09:42:6c:48:04:ee:d9:45:04:ae:aa:
95:a6:1a:c1:5a:2a:78:2f:5c:a2:f8:a5:e2:42:ed:
16:d8:4b:7c:cc:05:47:dc:c5:43:c0:c4:37:79:4b:
57:de:26:95:fa:05:9a:8a:3c:12:31:58:0c:24:04:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0C:83:AA:B7:1D:74:4E:1E:3F:5E:35:03:EF:58:17:47:47:CB:56
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5c:02:39:68:83:6b:03:93:b3:cc:10:f2:e3:74:cc:3e:b7:
7b:72:93:6f:7d:fa:d1:10:4e:cf:ee:20:10:65:79:ed:36:39:
be:35:3e:ba:64:d1:b3:3b:9c:85:2d:b6:ff:8a:6d:6f:49:ce:
91:2e:f6:7f:13:ea:9e:69:de:7b:41:45:a5:f6:70:55:16:b3:
89:c5:04:05:e9:f5:29:34:b8:ba:96:3c:88:e2:6c:0f:ad:57:
ac:95:d6:78:88:cb:fc:b9:9c:18:1c:b2:08:61:1c:5a:6b:31:
ff:81:9d:78:f8:67:5a:c3:03:24:0e:60:de:a9:86:6c:e4:fb:
32:89:0a:09:fc:a5:7e:ea:53:82:a6:03:40:e2:1a:50:1a:c4:
d2:cf:fe:b2:1f:7a:09:10:69:d0:ad:b3:b7:5f:ff:3c:59:1f:
f2:2f:3b:a9:c8:df:6f:2c:90:fc:11:f3:57:f3:5e:ad:9d:1b:
c0:91:31:d6:29:c6:cb:72:c7:9b:6a:a2:3a:ea:ef:01:a9:b1:
87:a4:bc:d8:e9:84:d6:c3:dd:21:e7:f1:56:e2:c9:88:43:4c:
c0:5a:01:1c:eb:95:62:b5:12:46:4f:38:be:01:42:2d:3a:43:
2d:de:07:1d:56:ff:19:20:fb:33:7a:d7:b7:c2:87:ae:a7:3c:
43:ed:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:07 2025 by rpki-client