Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
File: go4ax452tofdVgXy-4H91ar-t0E.mft (raw, json)
Hash identifier: qq5yL2/YHvW9KGn366RGxHfMCbexENsE5oMKChdlsvs=
Subject key identifier: A5:C5:3E:1E:CE:4F:14:B7:06:6A:CF:E6:0C:BC:53:90:CE:A8:A3:C2
Authority key identifier: 82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
Certificate issuer: /CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Certificate serial: 019510C781E6342EDC35624815F6BD298A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
Manifest number: 0442
Signing time: Sun 16 Feb 2025 22:01:05 +0000
Manifest this update: Sun 16 Feb 2025 22:01:05 +0000
Manifest next update: Mon 17 Feb 2025 22:01:05 +0000
Files and hashes: 1: go4ax452tofdVgXy-4H91ar-t0E.crl (hash: k1uPX7xuhscYe/GmVW/cGWgx+1HsTRis0y8bM8Obvfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:81:e6:34:2e:dc:35:62:48:15:f6:bd:29:8a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=828e1ac78e76b687dd5605f2fb81fdd5aafeb741
Validity
Not Before: Feb 16 22:01:05 2025 GMT
Not After : Feb 17 22:01:05 2025 GMT
Subject: CN=a5c53e1ece4f14b7066acfe60cbc5390cea8a3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:dd:b6:6d:eb:8e:44:44:e4:99:96:1b:e1:
0f:f4:03:93:ce:ca:ee:00:84:6c:fe:ee:6b:7e:ab:
e7:5a:4f:d8:3c:3a:9a:83:a7:b3:4b:f8:af:e2:82:
cc:67:18:79:cb:56:61:be:76:d2:61:be:c7:09:45:
be:3d:99:5e:9e:54:9b:fa:78:d0:ca:5d:9d:0a:54:
57:03:1d:3d:3b:3f:11:5a:62:6f:4f:d1:5d:b9:fb:
22:fb:7f:1d:26:e9:0c:cf:2a:01:a3:be:df:56:53:
34:21:3d:ef:89:f8:1a:85:29:f8:c9:a8:6f:bd:77:
c3:09:50:db:75:c2:bc:f4:2d:a4:a4:89:6c:84:38:
98:ac:65:fb:0d:ac:e9:55:10:b4:e6:c3:18:d0:57:
0e:f3:3c:07:a5:10:34:a3:d5:bf:22:c0:a3:2f:19:
c8:4b:a6:7d:70:ba:d2:4d:e2:62:d3:ad:4a:70:7b:
12:81:59:ff:a5:3b:c0:36:93:f6:8e:02:92:84:00:
e4:f0:9c:88:39:33:30:62:74:36:0a:d3:01:0c:71:
fb:cb:80:48:bf:75:14:e1:06:3a:d0:14:94:d1:9e:
bc:2e:32:c0:c7:35:a4:9d:2c:3e:96:f7:44:d9:9f:
4c:82:86:35:42:2c:53:58:79:b4:64:82:2b:c9:e4:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:3E:1E:CE:4F:14:B7:06:6A:CF:E6:0C:BC:53:90:CE:A8:A3:C2
X509v3 Authority Key Identifier:
keyid:82:8E:1A:C7:8E:76:B6:87:DD:56:05:F2:FB:81:FD:D5:AA:FE:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/go4ax452tofdVgXy-4H91ar-t0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f71dc1-3ca9-457f-b86f-d06e7c692d8b/1/go4ax452tofdVgXy-4H91ar-t0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c2:ac:e5:17:c8:38:3a:6f:e9:81:68:16:73:74:9c:e0:55:
96:3f:e6:e3:0c:8c:3d:81:ae:76:9d:13:ce:ff:c3:c6:31:60:
03:74:05:3d:98:ca:90:2f:26:1b:87:a7:bd:c2:fe:00:22:80:
cf:48:ec:1b:41:1b:b8:42:96:38:39:6d:db:22:b1:01:34:5e:
24:b6:55:85:a9:d6:ed:7e:22:16:e5:56:8f:a7:3b:79:ab:6c:
93:19:4d:a7:d5:8c:e5:32:f6:77:50:6e:33:27:ff:2b:d0:f4:
a9:b9:64:77:ac:84:d5:9e:c3:f0:fd:ae:79:5d:b1:72:ce:16:
10:55:81:06:bc:eb:9a:93:ad:e9:7d:ad:f4:71:3a:90:5d:0d:
70:e2:81:ee:89:33:35:5a:5c:05:f1:4e:b9:5a:d7:24:c9:d2:
a5:e4:56:a9:f8:f2:b9:be:51:50:53:43:5e:00:2b:88:11:4a:
17:01:05:02:20:de:41:f2:28:c9:38:14:d8:77:ec:52:96:8b:
5a:cb:e9:90:cf:d1:76:e1:86:e4:44:8a:4d:45:e6:eb:ee:ca:
a4:15:55:b7:1e:91:d9:00:de:8a:9c:aa:a2:54:c7:79:1a:08:
e9:17:1f:f8:8f:3c:76:a8:09:64:39:82:b1:d8:19:f8:fe:ff:
30:fd:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:18 2025 by rpki-client