Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: 5erNC+Vc62w1HA096A5oDMWh8BobKcibxKb5ErV2o24=
Subject key identifier: 2B:60:DA:D1:0B:52:E7:54:EF:1C:F6:81:96:B4:02:D1:D6:7D:85:6A
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019512478FFA958CBF1A2374FDBB0748619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0748
Signing time: Mon 17 Feb 2025 05:00:34 +0000
Manifest this update: Mon 17 Feb 2025 05:00:34 +0000
Manifest next update: Tue 18 Feb 2025 05:00:34 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: 3YeY6GlKSuyiBLtO8qE1LT+qgtBRDENk6Msa+mCJ9K0=)
2: b5qYlj2pGelCE8iMTZgVzkLgjZ4.roa (hash: Q1LSediVZtUJxlECrGud2jZUPviShybaGQ27nBC5c2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8f:fa:95:8c:bf:1a:23:74:fd:bb:07:48:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Feb 17 05:00:34 2025 GMT
Not After : Feb 18 05:00:34 2025 GMT
Subject: CN=2b60dad10b52e754ef1cf68196b402d1d67d856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:39:2e:12:d3:56:b6:47:bf:74:35:be:8b:
b2:69:29:a1:a0:09:0e:6e:98:64:40:b4:8c:03:ef:
3f:30:b1:fc:a7:41:5b:e2:be:3d:4e:f2:fc:e5:8f:
22:2e:f2:97:bb:76:27:70:89:ef:72:fd:a1:fa:ff:
12:8f:92:f5:bd:67:e5:d1:a7:87:bb:cf:af:94:9a:
96:a0:3e:8a:0a:d5:2a:c9:2d:87:5d:4f:80:bb:40:
ec:b7:d4:48:d4:f3:15:d2:46:f8:90:c1:fc:41:08:
7a:36:cd:9b:ac:d9:5e:70:8e:8d:db:f5:75:bb:2e:
eb:6b:7f:56:56:91:5e:5d:78:45:08:ed:ed:d9:f2:
c2:43:c8:6a:a2:2d:7b:ba:b7:08:93:52:f9:af:1b:
9e:ed:ca:22:99:ba:41:d3:8d:9d:35:71:f9:5a:02:
f0:2a:12:d5:b5:0d:1c:c3:88:f6:d6:85:98:92:6d:
da:36:2a:be:b3:16:8c:d6:6a:8b:65:82:b4:64:ad:
e6:3d:6a:28:ec:4f:0b:01:09:bd:4b:b7:af:12:5a:
33:b0:37:28:22:63:d5:30:22:36:05:76:50:ea:8d:
05:0e:d2:f0:a0:d7:84:cf:33:41:f2:09:0a:26:70:
75:4e:6e:28:b0:a7:95:fc:45:1c:b7:e2:dc:16:29:
04:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:60:DA:D1:0B:52:E7:54:EF:1C:F6:81:96:B4:02:D1:D6:7D:85:6A
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:8a:ca:2b:61:c7:f0:0f:e1:4a:36:21:61:24:dd:72:cf:
e2:f8:f7:6e:ba:57:35:7d:38:ac:34:9d:52:33:06:35:2d:4e:
08:69:53:7e:92:0d:da:7f:4c:87:b2:26:34:a9:0c:82:10:e6:
a4:73:af:bc:54:7d:3f:c3:d0:82:71:e6:b9:8d:88:1f:49:0a:
dc:d5:d0:b2:df:53:43:1a:71:b2:48:af:2c:b1:e1:70:92:c8:
5a:90:d9:23:37:c9:60:fd:97:ba:22:17:a4:a6:98:09:35:03:
28:40:4b:a9:c5:5c:c4:f4:a3:f0:d8:44:81:8e:4e:30:22:3a:
7f:f7:49:3f:16:54:f8:28:6e:9e:c2:4e:bb:96:4f:52:87:e9:
61:9b:fa:51:c6:93:0a:39:93:db:9e:42:35:01:b9:f8:8f:18:
2d:94:71:aa:18:59:3a:64:87:fe:7d:c1:0b:dc:69:b2:3a:b0:
e5:e8:0d:e5:d8:43:75:8f:41:b4:94:95:57:4c:14:2d:d8:31:
2b:d6:3d:62:f0:ae:71:17:4e:e1:77:cd:13:2b:0e:66:23:1a:
fe:21:94:46:31:12:22:f9:84:b7:1e:aa:0f:7b:34:11:ed:1f:
8a:92:44:88:fd:4c:30:db:82:2b:1d:bd:03:3c:66:30:81:be:
8c:8e:c5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:41 2025 by rpki-client