Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File: p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier: hNs4ihbT2pwUTJEBse7Fm3fcib65M6tmtH1rCiAdSYY=
Subject key identifier: C1:7D:29:A4:42:CB:8D:A8:EF:92:BC:DD:DC:BA:85:35:C9:87:18:89
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer: /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial: 0194C4D132239231202A8D2814B05A5F42B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number: 079F
Signing time: Sun 02 Feb 2025 04:00:31 +0000
Manifest this update: Sun 02 Feb 2025 04:00:31 +0000
Manifest next update: Mon 03 Feb 2025 04:00:31 +0000
Files and hashes: 1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: nKYza5L06Q2KkQd1Wl4l7S9IWHMkL557WtMaLJawGng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:32:23:92:31:20:2a:8d:28:14:b0:5a:5f:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Validity
Not Before: Feb 2 04:00:31 2025 GMT
Not After : Feb 3 04:00:31 2025 GMT
Subject: CN=c17d29a442cb8da8ef92bcdddcba8535c9871889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:86:93:c6:5a:3b:02:4f:9c:24:d4:8f:80:
79:01:78:90:3a:e7:35:d8:ab:ce:62:6d:14:6e:c0:
85:dc:30:35:39:7d:16:34:ad:f1:0b:63:e6:fe:d3:
d0:9b:db:76:78:1b:fe:22:4c:67:c4:ac:96:9f:e7:
d6:bf:4f:ec:09:c0:00:4d:71:f2:74:9e:5c:f7:8e:
d6:13:fe:63:d3:e8:6f:a5:9c:31:bd:73:df:5e:85:
99:b2:94:d2:3e:4a:d1:20:33:42:5c:58:9b:ed:41:
c5:d2:4b:13:46:c1:a8:90:cb:fb:1d:98:a5:26:19:
e5:87:4d:46:57:96:d2:52:81:f2:3c:a0:d3:79:e1:
2a:75:c4:35:82:58:89:51:1d:ee:6f:40:01:27:8a:
53:5d:8b:df:51:8e:79:2a:00:d4:bc:8c:f9:4f:c3:
a3:22:3f:ca:c0:51:e4:e2:d1:02:1a:97:b2:4b:ff:
ba:c4:3c:9a:b7:48:e9:ef:88:27:5f:f3:d6:48:d3:
55:4a:6a:be:1c:1f:86:62:c4:03:f3:c8:d4:c9:4e:
8a:d7:69:1b:df:0c:ac:ee:b7:15:0a:e6:12:33:4d:
da:8a:4f:ae:58:a7:25:1e:9e:dd:d7:e7:1b:5c:c1:
ac:48:8c:a0:bd:90:05:06:55:9d:77:cf:2f:28:d0:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:29:A4:42:CB:8D:A8:EF:92:BC:DD:DC:BA:85:35:C9:87:18:89
X509v3 Authority Key Identifier:
keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:00:ef:8a:ad:1a:86:75:66:bd:57:3e:ee:1a:f0:1b:46:39:
fc:ce:8e:91:73:c7:01:12:f7:3f:94:f3:be:15:bc:83:32:c2:
60:e3:23:a1:ba:96:8a:d9:02:78:a8:88:f1:8b:fc:b8:fa:94:
20:de:1d:8a:c8:37:ce:98:9d:89:a2:e2:27:ff:5c:5a:10:3b:
ac:14:c7:aa:c5:26:68:e1:8d:01:c8:8a:fb:5a:b3:ef:c7:fe:
78:e9:e4:f0:49:e6:99:81:e7:53:32:3d:bc:7e:6a:2c:3d:81:
64:ac:da:b4:67:a6:71:fd:45:17:c2:e9:50:88:48:0e:b2:fb:
c6:e7:99:ff:ec:f8:90:15:5b:4d:b9:fb:6e:c4:1d:54:95:e5:
e2:a8:e9:62:dc:ad:ad:5e:11:41:19:1b:1a:d5:37:76:a6:14:
a3:7a:1b:90:3b:d1:cc:6d:78:24:4b:b8:8f:91:55:ed:f6:7e:
b6:53:c9:8c:f6:91:7a:c5:cd:a9:68:b8:44:75:21:47:dc:23:
d8:3f:73:8b:a5:ca:ac:5d:70:b6:5e:6f:3b:41:b7:68:32:9b:
55:ff:6f:e6:af:30:9f:e9:a1:bc:b0:89:03:0d:dc:84:f7:6f:
0f:52:27:6b:e8:86:4a:50:01:af:3f:dc:16:42:99:ec:46:8f:
2c:0f:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:10 2025 by rpki-client