Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: gEezoy19nZT1UzOm2vrsoMrEs6s+GGIimjGa5u1Iagc=
Subject key identifier: 54:09:2C:14:C9:69:30:B5:3E:E1:C0:15:A1:7D:73:40:52:2C:89:F6
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019511A271BB9E3E5A974CCCD0C0F3C61707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 1452
Signing time: Mon 17 Feb 2025 02:00:13 +0000
Manifest this update: Mon 17 Feb 2025 02:00:13 +0000
Manifest next update: Tue 18 Feb 2025 02:00:13 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: JcJS8POmzy3lEm5YN5YxGaFY9cuIL8bM8YU810oLOuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:71:bb:9e:3e:5a:97:4c:cc:d0:c0:f3:c6:17:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Feb 17 02:00:13 2025 GMT
Not After : Feb 18 02:00:13 2025 GMT
Subject: CN=54092c14c96930b53ee1c015a17d7340522c89f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:0c:90:46:3d:ae:82:e2:9a:61:80:ba:92:
32:b0:df:68:52:e9:47:be:67:2f:f6:80:8d:b1:8e:
ce:4d:d3:06:6f:0a:0e:63:f1:1f:bf:e5:7e:a9:f8:
c1:9b:c1:7b:8a:f4:c9:ec:dc:b6:d1:9d:5e:2c:1f:
bc:dd:23:dd:ab:f7:dc:03:73:5c:dc:f1:e1:b7:4f:
57:45:2b:24:35:10:09:41:50:6d:15:a7:89:ad:de:
86:96:f0:31:51:34:41:8a:54:19:6f:12:3b:a5:d8:
31:78:97:9b:fa:49:e3:e2:57:da:0b:de:25:db:cd:
14:01:28:0d:f9:35:76:41:a1:c2:61:78:1a:ae:b7:
eb:82:e1:be:28:97:0a:f3:d4:b4:57:8c:c5:df:3a:
19:22:2b:d2:fc:37:2d:5f:b0:01:68:36:6a:8d:78:
92:5b:fb:63:94:26:5d:24:69:20:f3:96:01:0c:fc:
a8:7c:2c:fc:74:d3:8b:25:5e:ef:84:2d:04:d0:78:
b0:3f:47:b6:84:1a:5a:3c:fd:96:b9:49:15:b8:49:
ea:2b:00:5f:dd:65:35:43:4a:72:d7:8e:1d:4a:f3:
e1:b1:13:88:15:3a:10:8e:2c:11:16:10:49:f0:09:
ec:8c:54:94:bd:5a:3b:1d:f3:7c:bf:a1:7f:61:64:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:09:2C:14:C9:69:30:B5:3E:E1:C0:15:A1:7D:73:40:52:2C:89:F6
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:ab:d6:87:3c:f8:35:a6:ec:25:26:ec:87:d1:d6:2e:b3:
ad:ab:21:f9:d9:bf:0b:0f:26:dc:e1:67:c3:f6:23:8c:4c:17:
00:c0:0e:cc:da:da:7f:eb:a2:1a:11:bc:4d:b2:01:0c:1e:dc:
94:a9:ba:94:16:f6:a9:f4:96:ae:94:d3:a1:ad:a1:c7:25:a3:
50:23:07:7f:35:30:dc:57:0a:1c:88:7b:26:30:10:41:2b:32:
d9:f3:ce:ab:8c:43:9c:a8:f4:e3:32:f4:83:07:55:fd:b2:5a:
1b:7e:12:30:e0:d7:fe:f8:fe:a4:95:4a:a1:55:bb:79:13:c7:
f7:74:11:12:c9:51:57:3a:a8:77:fb:4a:93:50:81:11:79:a6:
73:c9:ba:bd:74:30:1b:19:30:ab:85:e1:da:b3:81:00:45:fa:
5c:3e:bb:02:71:c6:96:6b:90:e5:a4:c9:04:e3:ee:be:2e:d1:
61:1d:29:b2:58:43:10:46:c1:ce:b2:62:9a:9f:b3:19:7a:b1:
38:18:44:fb:9b:68:e5:77:70:26:2f:14:04:6d:a8:ce:99:c9:
4f:fc:f2:d8:e2:38:56:86:b4:31:52:24:22:5d:cd:09:53:19:
9d:08:0e:e5:ef:af:45:33:6e:b3:77:60:86:b3:25:7f:ac:1c:
dc:83:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:34 2025 by rpki-client