Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
File: yQ96sCq8mKRwOKLMATrWb4JntMM.mft (raw, json)
Hash identifier: e+q8Z3r9odR38KCi51MqflIcWAx5cBa89NuJxzd/1Ig=
Subject key identifier: 5B:2B:A8:D5:54:D1:42:B9:4A:7E:AC:B3:B9:A6:C9:AD:E7:AC:4C:C1
Authority key identifier: C9:0F:7A:B0:2A:BC:98:A4:70:38:A2:CC:01:3A:D6:6F:82:67:B4:C3
Certificate issuer: /CN=c90f7ab02abc98a47038a2cc013ad66f8267b4c3
Certificate serial: 019510C75DF9929EF6C5E26B409B68D343F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ96sCq8mKRwOKLMATrWb4JntMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
Manifest number: 1452
Signing time: Sun 16 Feb 2025 22:00:55 +0000
Manifest this update: Sun 16 Feb 2025 22:00:55 +0000
Manifest next update: Mon 17 Feb 2025 22:00:55 +0000
Files and hashes: 1: yQ96sCq8mKRwOKLMATrWb4JntMM.crl (hash: vChi3BXd22P5wuZK6t4jvlH5Y6fS9X6UvNth/p3P81s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQ96sCq8mKRwOKLMATrWb4JntMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5d:f9:92:9e:f6:c5:e2:6b:40:9b:68:d3:43:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90f7ab02abc98a47038a2cc013ad66f8267b4c3
Validity
Not Before: Feb 16 22:00:55 2025 GMT
Not After : Feb 17 22:00:55 2025 GMT
Subject: CN=5b2ba8d554d142b94a7eacb3b9a6c9ade7ac4cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:44:03:c9:33:ea:24:c3:e5:5c:8c:40:33:
91:40:a6:4b:67:9d:37:12:f4:92:67:0e:af:52:5f:
b0:cc:e3:ef:14:cb:db:4b:7f:db:a8:f3:48:be:33:
0c:ce:12:85:12:7f:bc:dc:17:19:bf:21:5f:78:d6:
14:b7:9b:ec:98:37:c0:74:7f:0b:0f:99:0a:1f:1a:
b7:aa:3f:e2:4a:53:a3:c2:b6:8b:2b:ba:00:c2:be:
52:a2:1b:05:84:0c:b9:83:87:51:da:94:3b:1a:09:
c2:42:26:c1:fb:9e:2e:a6:4d:20:2a:e0:6e:64:11:
cf:19:1c:44:69:51:d8:29:95:22:7b:f5:58:eb:55:
a7:3c:2b:df:e0:76:49:38:91:4b:ff:2d:51:5c:4f:
d4:3a:4d:f9:3b:9a:88:1a:65:24:68:17:91:11:4b:
b7:f4:a0:2f:a9:f2:31:f0:c2:c3:29:06:46:02:0b:
ba:e3:0e:61:1c:6a:57:a2:43:cb:31:3a:17:5e:7f:
6d:9b:51:cf:60:d8:e3:2d:66:62:fb:d0:d9:c1:70:
ae:23:db:e0:14:ca:42:c8:03:6d:17:b4:40:fb:9b:
5b:1f:4a:32:9f:5d:fb:0d:77:fe:03:e5:0a:f2:58:
b4:f1:2f:24:e1:9b:83:c8:1a:43:6e:4d:5f:5c:f1:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:A8:D5:54:D1:42:B9:4A:7E:AC:B3:B9:A6:C9:AD:E7:AC:4C:C1
X509v3 Authority Key Identifier:
keyid:C9:0F:7A:B0:2A:BC:98:A4:70:38:A2:CC:01:3A:D6:6F:82:67:B4:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ96sCq8mKRwOKLMATrWb4JntMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:0e:81:6b:e7:82:90:c5:78:df:1e:ab:98:0b:6c:0f:bd:
b0:c9:65:29:92:5c:86:58:db:34:ab:9d:f5:03:2d:68:80:50:
79:89:1e:65:b7:00:7c:78:85:c4:89:8f:ac:59:25:d9:18:cc:
f7:29:35:f7:2f:1b:31:89:95:77:08:e2:30:37:5c:d3:c0:47:
0f:d7:50:a1:75:0c:4a:e9:79:0e:69:2f:21:78:dd:32:19:55:
b6:a5:41:b5:75:24:5f:bd:74:3f:ad:21:87:97:ef:82:65:98:
95:55:97:74:6f:94:74:9c:bd:d1:8b:7d:b5:05:8b:23:d6:82:
30:c1:bd:d3:bf:4d:39:20:91:79:b4:56:c8:b6:1a:0c:6b:2a:
95:c4:e4:64:e0:99:3c:23:44:3e:fb:08:05:6f:58:87:c9:de:
fa:10:ca:39:ca:28:25:a4:c4:bd:10:1a:a8:a1:f6:24:9d:72:
24:49:f2:27:3a:15:7d:28:5f:bc:af:8b:96:6a:64:6c:58:ea:
18:7a:03:a9:05:00:79:a0:59:77:79:72:d7:ea:53:b3:42:28:
d6:9a:36:b1:2c:d3:35:eb:c8:31:68:33:c5:73:e7:1a:9d:d4:
36:b2:c7:a3:05:7e:95:09:8f:fc:6d:e3:a8:d7:b8:1f:a9:7f:
c4:17:cc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:41 2025 by rpki-client