Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: dj06ruqaiiW/l4A9cB4OEothBRkY6BJ0i7MD1n3G+vg=
Subject key identifier: AA:CB:21:67:ED:1E:2A:DE:3F:B1:20:4F:D8:9B:DD:04:2A:00:9F:34
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 0195121070B91D57669BEAEF788A5671A146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 10C9
Signing time: Mon 17 Feb 2025 04:00:22 +0000
Manifest this update: Mon 17 Feb 2025 04:00:22 +0000
Manifest next update: Tue 18 Feb 2025 04:00:22 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: MQ4CGeHTo9EdfUPp5FB1/9Vej3lJR8SNKhBfR32Wr3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:70:b9:1d:57:66:9b:ea:ef:78:8a:56:71:a1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Feb 17 04:00:22 2025 GMT
Not After : Feb 18 04:00:22 2025 GMT
Subject: CN=aacb2167ed1e2ade3fb1204fd89bdd042a009f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:b2:6a:e7:7f:69:ac:27:f2:32:d3:a1:6f:
3f:a6:a3:39:48:8c:81:9d:98:7c:44:d8:da:2b:10:
c2:43:26:4b:5d:f6:8e:b2:79:4e:87:1a:38:2c:e8:
fb:49:1b:47:4d:94:18:9c:c0:41:2c:5f:f2:43:32:
0d:ac:17:25:81:e4:7c:6c:c5:75:68:f2:a6:bb:c2:
80:c4:17:3e:1e:4e:1b:2a:2e:05:84:06:71:f8:c3:
83:48:32:58:f6:73:68:9c:71:e6:06:82:c8:6a:9b:
b9:9a:d4:59:19:20:e1:79:74:82:2e:37:94:0d:4f:
77:44:68:e9:83:f2:f4:5a:e8:15:08:66:8b:0f:fd:
6d:55:4f:cb:07:63:d9:81:27:40:51:6a:f2:ce:c4:
c2:78:0b:4d:17:55:24:6e:0d:2f:73:85:78:52:87:
8a:a2:a9:4c:6b:72:e7:cc:72:3a:0b:15:1a:6a:67:
9b:43:20:b4:5b:44:c6:7c:5d:2d:ce:71:5a:e1:33:
0c:3a:ef:f1:89:a1:ed:36:52:6e:2f:1e:36:a5:34:
53:c2:9c:e6:66:e2:77:6e:ff:cc:84:68:a6:c3:9c:
3a:de:51:e8:6f:dd:10:52:ac:3a:d4:74:be:60:e8:
30:6f:f0:ba:8b:18:29:5a:2d:1a:2a:3d:72:65:b5:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:21:67:ED:1E:2A:DE:3F:B1:20:4F:D8:9B:DD:04:2A:00:9F:34
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:2d:a8:72:50:dd:56:2f:6b:24:38:3a:4b:11:6b:1f:b4:
85:14:da:99:6a:0f:6b:4c:c2:82:5a:56:54:d2:f1:41:79:c9:
61:15:a4:f0:b0:68:da:97:1d:f4:82:39:51:74:89:b6:6e:c5:
80:06:2c:f5:09:fa:cd:61:07:75:e5:3b:16:a4:2e:4f:78:88:
72:5c:34:21:a2:8b:2d:43:39:e8:63:6d:95:d7:e0:92:88:f8:
56:2b:fa:3f:70:24:75:fc:3f:bf:7f:13:66:ae:03:9a:29:aa:
ba:97:f1:28:a6:e7:7a:3d:c7:a8:a8:51:83:93:64:37:91:83:
e0:eb:c3:1d:91:81:cb:5a:92:78:bb:f5:dd:1d:00:3e:54:b9:
7b:57:96:75:5c:20:04:56:39:51:e9:d6:c8:df:0b:0e:f0:8e:
7a:c4:b6:a2:3b:f9:28:1c:81:ee:9c:bd:1d:fc:13:93:98:26:
a4:3c:2f:b6:2d:fd:df:b3:1e:3a:1d:f4:01:09:e7:32:70:23:
61:47:3a:08:30:80:f2:4a:08:ff:4d:5c:b2:c8:fa:a0:21:57:
73:ac:81:21:a6:20:4e:94:35:d0:2f:79:8f:41:23:7e:ad:e2:
ec:3d:e9:a8:01:87:ed:44:8d:f9:89:0b:80:78:c1:d5:15:10:
10:c5:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:01 2025 by rpki-client