Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
File: lGEMh1DDN98EecWg61t4tJoX_z4.mft (raw, json)
Hash identifier: nLN7UiegYKNI/ANqK4bTh1niTIqElJ2H48ChqSkbZxw=
Subject key identifier: 70:57:D6:93:31:89:9F:94:D5:FF:0F:0E:B4:4B:05:D4:D5:15:77:41
Authority key identifier: 94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
Certificate issuer: /CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Certificate serial: 0194BABB600C733F83D756FE8E68B237FBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
Manifest number: 02AB
Signing time: Fri 31 Jan 2025 05:00:29 +0000
Manifest this update: Fri 31 Jan 2025 05:00:29 +0000
Manifest next update: Sat 01 Feb 2025 05:00:29 +0000
Files and hashes: 1: lGEMh1DDN98EecWg61t4tJoX_z4.crl (hash: EdVAiutwwbldziIjMoqYwM0NV50dJR1Ui7DB2kvD0Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:60:0c:73:3f:83:d7:56:fe:8e:68:b2:37:fb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94610c8750c337df0479c5a0eb5b78b49a17ff3e
Validity
Not Before: Jan 31 05:00:29 2025 GMT
Not After : Feb 1 05:00:29 2025 GMT
Subject: CN=7057d69331899f94d5ff0f0eb44b05d4d5157741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:ab:d7:c2:6a:db:ee:da:89:70:b1:80:3c:
52:1e:42:5a:85:c7:47:69:0a:97:fd:26:67:48:9f:
49:25:81:6a:5a:29:6a:c3:1d:d8:ac:22:41:ec:1d:
24:4f:35:0c:80:7b:76:c2:5b:c2:f8:e9:a9:0e:66:
8c:fe:bf:fe:8a:8f:6e:84:8d:5a:ef:3d:c3:8e:20:
32:4a:8b:23:ae:70:3e:0b:15:7a:26:26:90:2e:f9:
e1:f9:7b:be:e9:91:b5:5f:96:fb:20:03:92:ec:44:
f7:fa:bb:b3:55:59:63:6e:4f:f5:67:0c:c3:69:a1:
72:b8:dc:ca:12:42:8b:ef:15:0d:19:65:55:ef:9c:
9f:a7:ae:a8:f1:e7:63:7c:01:40:11:57:0e:c1:a1:
78:c5:34:55:f7:40:9c:7e:c2:7c:14:63:7e:f1:96:
26:95:67:82:c0:5c:97:19:50:2f:08:a4:2e:94:83:
c6:48:31:2b:42:ca:f0:44:d6:96:89:d3:9b:5f:96:
9e:8d:85:00:d0:3a:9a:60:ab:c3:38:27:a6:25:62:
a7:38:38:3c:0e:5d:c4:63:c6:ba:10:b7:c6:e3:19:
65:75:8c:5d:70:45:16:eb:4d:c8:ce:23:44:de:e2:
e2:07:e2:b1:d4:32:b8:64:1d:21:65:11:34:e7:3c:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:D6:93:31:89:9F:94:D5:FF:0F:0E:B4:4B:05:D4:D5:15:77:41
X509v3 Authority Key Identifier:
keyid:94:61:0C:87:50:C3:37:DF:04:79:C5:A0:EB:5B:78:B4:9A:17:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGEMh1DDN98EecWg61t4tJoX_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1eb803-278a-46f4-b4be-a2eff3f1acd5/1/lGEMh1DDN98EecWg61t4tJoX_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:ca:ec:d8:bb:55:2e:e5:38:53:a4:ad:ca:28:81:69:c1:
ca:cd:08:e4:f0:ec:12:20:67:1e:5d:ce:9f:0c:3f:f9:7d:36:
11:e9:8e:7a:0b:32:8e:0d:be:9f:17:70:84:e9:20:37:45:36:
cb:15:77:f1:97:ac:79:ad:3c:08:1a:33:45:4c:9f:b8:11:f5:
c6:e2:aa:77:5d:a3:a7:2c:8c:ab:fc:83:d0:95:25:89:fd:f8:
eb:ad:46:10:b0:01:5c:b9:5e:18:53:45:23:b0:01:0f:54:cb:
c7:1d:c5:c6:22:f1:08:1e:95:62:67:ec:ee:6b:a1:57:63:55:
2d:ab:97:8c:10:06:8c:00:46:35:0e:d5:d3:20:22:3a:d7:3a:
1f:3a:a0:df:a8:13:ea:7b:71:58:c0:0d:c2:f8:ac:3a:79:20:
ea:24:de:65:eb:90:44:61:62:98:13:41:af:81:96:44:a9:d8:
56:5f:f2:ae:99:90:8a:d4:5a:62:c7:38:1d:b9:37:15:ce:db:
6c:45:ce:a1:c0:ae:e7:26:14:1a:4b:f0:4a:61:3c:02:1d:58:
74:68:ce:48:77:6a:7b:48:9e:60:33:82:75:09:14:91:31:39:
58:a4:e1:8a:df:86:17:60:d7:cd:ed:fb:80:3d:10:23:a7:b1:
38:22:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:17 2025 by rpki-client on console-fra.rpki-client.org