Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
File: aaEKEpVYyDgLwT2axFQB0h2rnfA.mft (raw, json)
Hash identifier: ukwJM9LgzmkArr6gP23mB4nVqisCQtKeN6owKDHUEic=
Subject key identifier: 00:15:A2:C1:4A:AE:96:6E:7C:C8:25:65:F9:26:0B:2B:A1:AC:FB:49
Authority key identifier: 69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
Certificate issuer: /CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Certificate serial: 0194C387AB7271CD446C0ABD503072250AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:35 +0000
Manifest this update: Sat 01 Feb 2025 22:00:35 +0000
Manifest next update: Sun 02 Feb 2025 22:00:35 +0000
Files and hashes: 1: aaEKEpVYyDgLwT2axFQB0h2rnfA.crl (hash: /hRz/swP/M8TRKDTRbhY5T4CEzQrY8wKfcrV2HLbm5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:ab:72:71:cd:44:6c:0a:bd:50:30:72:25:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a10a129558c8380bc13d9ac45401d21dab9df0
Validity
Not Before: Feb 1 22:00:35 2025 GMT
Not After : Feb 2 22:00:35 2025 GMT
Subject: CN=0015a2c14aae966e7cc82565f9260b2ba1acfb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:de:46:b8:eb:57:8c:ce:ba:ee:d4:6f:5d:
cb:47:c3:28:6a:fc:28:19:58:b3:6b:e7:f2:c7:cb:
a5:8e:72:ae:b0:2e:ae:38:37:fb:e4:07:fe:0a:49:
a1:47:93:6e:85:d8:6e:a3:ef:2b:82:71:2c:6d:82:
e8:90:c5:34:d1:a0:ef:3f:d7:fb:44:0f:71:96:29:
ed:56:24:4b:f0:b8:ef:70:e7:2a:19:83:2d:d6:6d:
84:a2:be:93:87:b7:6f:56:9c:f1:45:70:1f:9e:71:
4b:01:45:0f:13:c4:16:9e:a7:84:b0:2d:99:9d:09:
37:02:b7:af:3a:b2:46:26:d5:da:22:b2:42:fb:5a:
1e:75:03:63:0d:4c:8b:27:17:cd:c4:8c:f1:da:78:
4e:77:1e:eb:ef:dc:26:dd:60:5c:08:31:66:09:f4:
87:8f:cd:1d:d4:48:e9:94:35:5e:f2:be:19:62:30:
9e:de:04:e8:02:a6:d5:59:a7:06:c1:d6:af:35:12:
2b:e4:10:a1:00:3c:f1:27:d6:c7:65:b5:f1:ec:79:
c7:d3:49:6f:9e:67:74:b4:85:48:d3:c1:07:69:f4:
40:9d:ba:10:87:1b:3a:78:36:e7:52:cd:b1:fc:84:
ec:a0:ea:f3:a1:d8:51:5c:db:a7:66:08:d6:3d:94:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:A2:C1:4A:AE:96:6E:7C:C8:25:65:F9:26:0B:2B:A1:AC:FB:49
X509v3 Authority Key Identifier:
keyid:69:A1:0A:12:95:58:C8:38:0B:C1:3D:9A:C4:54:01:D2:1D:AB:9D:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEKEpVYyDgLwT2axFQB0h2rnfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2a6fb0-48b2-4f93-855b-877c65b01456/1/aaEKEpVYyDgLwT2axFQB0h2rnfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9d:59:02:f7:9b:55:bf:ba:ba:b1:b8:2a:9b:e7:56:ed:69:
34:da:67:5f:83:0a:c4:aa:7e:45:00:dd:5b:3a:3f:02:13:ae:
64:2e:2d:9c:d9:a4:f8:a2:4a:90:f7:61:b5:1e:1a:46:4f:f4:
d6:6a:ee:c6:81:94:7f:10:56:15:3c:cf:df:30:a0:2e:17:d4:
f5:30:7d:07:b7:9e:d2:e9:f6:ba:27:b9:8d:6d:de:bc:47:9e:
12:2e:02:3e:67:b4:ce:c4:75:be:8a:87:73:50:81:b4:d0:5b:
80:dc:29:d7:2b:85:f1:7f:03:4d:f4:8b:c2:79:96:f0:e2:a0:
55:6b:6f:6b:a8:30:5b:41:4a:48:0b:6d:62:eb:dc:43:71:8c:
e7:0d:8e:9d:cf:2b:91:8c:ea:c9:b5:ac:04:93:d9:47:0d:75:
ef:33:39:f1:80:b3:fb:60:ff:71:48:a4:b6:fc:2e:7c:11:62:
c2:fe:9d:2a:52:20:a7:9e:1f:36:6f:14:8e:cb:0f:b8:66:1c:
f9:95:b5:fb:e6:ab:a4:91:c8:a4:91:62:f3:ea:d2:29:5e:1a:
75:01:6f:66:64:b4:25:e6:d1:84:c9:80:dd:4c:4c:ff:73:34:
1e:b5:01:c8:6b:08:96:85:95:09:74:b8:7b:c3:03:9c:84:3b:
64:f4:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:34 2025 by rpki-client