Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: +PLx08ZHwhgHj2CROgXyjqZ/x4uCGu9aEyyZ0n6hQEI=
Subject key identifier: 9E:09:2B:71:DA:B6:F2:50:96:13:B9:D3:6F:CF:CF:87:AF:32:86:11
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0195121089F9D00FD57E897BCD0F100B6590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 13E4
Signing time: Mon 17 Feb 2025 04:00:28 +0000
Manifest this update: Mon 17 Feb 2025 04:00:28 +0000
Manifest next update: Tue 18 Feb 2025 04:00:28 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: 2LbWbwi9ICQIE+rtM8eDGs3KLoZpLYWNYlGRq8JDLxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:89:f9:d0:0f:d5:7e:89:7b:cd:0f:10:0b:65:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Feb 17 04:00:28 2025 GMT
Not After : Feb 18 04:00:28 2025 GMT
Subject: CN=9e092b71dab6f2509613b9d36fcfcf87af328611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:65:7e:f9:08:db:83:c7:b5:ca:2b:8a:49:41:
42:e3:26:3b:0d:3c:04:6e:8d:07:af:e9:af:e0:ca:
de:28:31:24:41:be:8e:17:ec:57:c3:86:04:52:c7:
1d:60:e5:35:0a:d5:d5:30:ac:33:bd:9d:d7:80:28:
d8:64:36:2c:91:5c:2a:b9:ec:b1:70:70:e4:ca:63:
32:fc:1c:ae:8e:15:7b:96:83:93:6b:b5:d8:12:c4:
9f:86:73:b6:12:a7:00:2d:81:6c:3e:5e:a9:51:37:
bb:d9:8e:d2:df:cf:98:7f:73:3c:c5:74:ad:da:cd:
73:9e:f0:77:8a:ec:6a:1f:e3:13:b2:0d:95:54:5a:
04:da:d7:38:52:d1:c7:3c:60:95:1c:7d:ae:99:c4:
8d:68:0e:35:5c:a0:80:49:22:4c:f9:f7:55:c3:41:
59:76:34:df:8d:21:c3:ec:e8:a7:9e:b6:45:dd:51:
cf:4a:2a:ab:b3:c6:4f:bd:19:43:52:80:71:ab:aa:
78:ae:00:17:b9:01:97:e7:74:4f:74:ca:3c:2e:48:
57:de:f1:66:3b:8a:be:0e:3d:dd:6c:2f:4c:13:2d:
90:64:2f:21:29:5b:b5:15:5c:6c:be:5b:60:8d:19:
7c:c4:be:3d:be:88:11:1d:50:3a:36:6a:95:c6:dd:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:2B:71:DA:B6:F2:50:96:13:B9:D3:6F:CF:CF:87:AF:32:86:11
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:f4:60:e9:d7:e0:c6:f5:fa:cf:94:68:26:b4:e4:b9:75:
a3:38:3a:c2:31:7d:93:6c:e4:92:b9:bb:44:ed:cb:40:11:e4:
92:b4:2c:e5:a5:bc:2e:3b:c8:4a:72:d1:b7:ea:87:9a:e9:97:
30:44:f2:1d:99:28:2f:66:ee:ea:7d:18:55:c3:6e:4d:87:97:
1f:e4:be:de:96:3b:3a:9b:15:ed:6a:6b:94:e9:9c:d8:29:43:
3c:0b:23:4a:80:ee:03:55:07:46:85:07:2f:24:b1:80:7d:c5:
d9:71:79:04:a1:25:56:f9:f4:60:1a:a3:9d:8a:6f:90:bb:1b:
88:13:41:23:1b:1b:39:82:a5:b5:71:cb:21:59:b0:86:e1:89:
b8:5f:d6:5e:57:8e:2e:08:ee:71:23:fc:ad:e2:12:78:51:a2:
35:79:49:63:99:97:45:9e:b5:e9:1e:90:86:80:94:ba:68:e9:
3c:ff:53:9e:7e:72:c9:a1:a2:1b:6c:fe:3a:0e:b7:7c:ae:ac:
fb:c3:f4:e9:f4:01:4f:54:94:97:3d:81:b5:2a:58:59:cc:3b:
49:e1:9d:97:4d:14:3b:96:a5:5e:94:5a:13:e8:2a:4f:d1:4d:
77:6a:76:31:1f:75:12:0a:69:29:9e:2d:39:84:d1:38:49:3d:
ee:ab:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:19 2025 by rpki-client