Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
File: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft (raw, json)
Hash identifier: +n6XPXW8mktbbpDy49zx5nu86N7rDkyL37ebbEUEiUA=
Subject key identifier: FF:10:C3:B4:B4:D9:3D:03:6A:2F:78:22:EE:D4:66:64:89:AF:9B:F1
Authority key identifier: F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
Certificate issuer: /CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Certificate serial: 019511349F3ACAA215A1A99ED721A6CE7C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 00:00:15 +0000
Manifest this update: Mon 17 Feb 2025 00:00:15 +0000
Manifest next update: Tue 18 Feb 2025 00:00:15 +0000
Files and hashes: 1: 1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl (hash: y2+sXGjkRu2Zglq9847mrXu/LeVeO9uiznhz2BsrIlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:9f:3a:ca:a2:15:a1:a9:9e:d7:21:a6:ce:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a03d2450dce587d53755a9f6b4a4656a280b4b
Validity
Not Before: Feb 17 00:00:15 2025 GMT
Not After : Feb 18 00:00:15 2025 GMT
Subject: CN=ff10c3b4b4d93d036a2f7822eed4666489af9bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:6c:2e:2a:c5:93:e7:ab:26:53:bf:7b:0b:
88:b9:05:91:99:5f:03:28:0e:85:b6:df:f1:34:6e:
18:1d:29:67:47:d2:cb:ff:6c:7f:13:9f:82:36:e4:
26:5c:13:d9:48:99:85:77:28:12:90:3a:9e:c0:5a:
7b:71:07:1e:cf:28:d0:55:dd:57:0b:a5:37:ea:22:
32:01:b4:ec:d8:5d:bc:c7:53:22:cd:44:86:b7:c8:
6a:1e:a2:43:ca:a2:99:8f:25:d5:c6:3f:3d:a7:fa:
8b:26:21:c9:c1:b1:c1:a9:58:8b:ad:56:94:82:4e:
d4:bf:6e:2a:03:23:fe:25:dc:77:6c:9a:9a:c6:19:
11:8e:8a:90:b9:80:e0:05:9e:02:45:77:80:39:5e:
fa:1d:78:37:1d:1a:75:20:b5:10:4d:c7:06:87:58:
f2:6e:b4:a8:97:66:5c:12:fe:7d:ea:07:0b:66:7f:
3c:6d:6a:56:a9:df:84:b8:bb:44:35:5a:70:5f:e0:
9d:d9:05:db:ad:91:34:49:96:a1:fc:07:a3:3e:4a:
c9:7f:e9:44:d0:ec:e0:d5:9b:f7:00:9b:97:b5:55:
9b:fb:c7:de:fe:8d:2a:f6:58:36:03:f2:06:9f:9e:
61:02:3f:fc:34:b8:e0:a7:c6:9b:a8:96:55:0d:14:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:C3:B4:B4:D9:3D:03:6A:2F:78:22:EE:D4:66:64:89:AF:9B:F1
X509v3 Authority Key Identifier:
keyid:F9:A0:3D:24:50:DC:E5:87:D5:37:55:A9:F6:B4:A4:65:6A:28:0B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/96f924-19f4-4512-bde4-e06c8b303478/1/1-aA9JFDc5YfVN1Wp9rSkZWooC0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:74:69:3d:5f:f2:ac:f6:45:8d:32:52:8d:31:56:34:91:
ba:f1:a3:31:ab:99:93:0b:d6:9b:9f:15:b8:6e:50:a5:31:52:
37:c9:27:fe:c3:19:51:25:dd:d1:46:e8:d9:9b:57:ef:45:a4:
fc:ba:c1:4d:35:e3:d2:01:34:da:e6:45:62:a7:80:86:67:0a:
80:26:74:2e:4a:cc:18:ea:e7:f9:0b:04:7b:f0:65:dd:4c:ab:
27:31:66:cc:f7:aa:23:35:45:ef:39:96:52:7b:9f:e2:3e:38:
fd:56:27:75:af:49:ab:6d:13:69:49:d4:2a:d6:84:2d:4c:3e:
4b:a9:72:1d:70:5d:e7:20:3a:ef:16:40:5d:50:b9:c5:b2:a1:
cc:1d:5b:39:d0:e9:f6:ae:fa:2d:b9:21:35:c1:cc:6c:ad:4f:
44:fd:31:ad:ba:67:c3:29:44:23:4d:1a:03:de:06:88:64:ea:
e1:2b:8c:52:f4:f7:7d:40:d8:3b:bc:ae:2e:54:8d:d5:04:9a:
66:29:21:f7:70:be:d3:50:6c:5d:a9:ee:30:4f:17:04:64:5b:
cd:bc:a0:41:ce:29:ca:71:f9:d0:b7:10:f9:d7:0d:3b:55:74:
27:76:d9:10:83:1a:4a:9c:1b:da:16:9a:b4:35:73:4e:e0:a0:
71:df:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:03 2025 by rpki-client