Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
File: LDfpq5czmfAvAyfJgRoYdQDEtsk.mft (raw, json)
Hash identifier: 269QJ5kxMmI/pxO9pRzndBSNoF1jAYBm27IfghYEwDQ=
Subject key identifier: F0:EE:A7:92:BD:26:0D:6A:C2:EA:AD:31:48:5A:B8:A9:AF:60:79:62
Authority key identifier: 2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
Certificate issuer: /CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Certificate serial: 0194BABBCF66B4B17D641103D56E16896FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
Manifest number: 0261
Signing time: Fri 31 Jan 2025 05:00:57 +0000
Manifest this update: Fri 31 Jan 2025 05:00:57 +0000
Manifest next update: Sat 01 Feb 2025 05:00:57 +0000
Files and hashes: 1: LDfpq5czmfAvAyfJgRoYdQDEtsk.crl (hash: 65S923mJUspC/B7InIr1Phs3SnMzrAXquULbWEAOLoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:cf:66:b4:b1:7d:64:11:03:d5:6e:16:89:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c37e9ab973399f02f0327c9811a187500c4b6c9
Validity
Not Before: Jan 31 05:00:57 2025 GMT
Not After : Feb 1 05:00:57 2025 GMT
Subject: CN=f0eea792bd260d6ac2eaad31485ab8a9af607962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:95:4c:0a:e8:0e:20:13:b0:4e:da:61:9c:
fe:9c:ea:e3:6c:09:5d:39:4f:41:c3:af:aa:27:b2:
7d:bd:33:0e:18:77:06:33:6b:38:19:0d:26:a8:44:
8c:e8:be:41:c6:62:2b:24:88:17:6d:ac:fd:25:8a:
06:a5:a7:4b:8e:09:34:8f:2b:2d:17:7e:ac:b9:59:
6b:cc:a1:54:8e:56:83:a1:df:3a:72:f2:09:98:e6:
bf:66:19:0c:dd:1d:79:19:2b:5e:72:36:c5:8b:b8:
3a:32:a0:39:7d:9f:0d:ff:bf:b8:76:a7:04:05:fb:
38:98:7d:97:69:cd:68:a7:b6:87:dd:86:f7:73:c4:
fc:e7:7f:f5:b4:dc:66:21:e4:13:e4:6b:ae:cf:42:
62:aa:13:20:c0:d5:c9:21:27:c8:f7:ad:7c:83:e7:
c0:76:06:75:cf:56:44:7a:33:6b:3b:ae:84:2e:02:
e1:be:6a:0d:0c:bb:e7:32:20:6a:76:bc:38:c1:43:
03:b1:46:95:06:aa:66:b0:e3:2e:82:7d:5d:17:8b:
2f:c3:a7:c8:ac:2c:3b:1e:be:f5:3a:ca:76:ab:41:
9b:6e:84:c2:66:ad:5e:ab:d9:52:23:83:c0:6e:2d:
7b:66:2f:d4:70:96:85:0e:ff:2a:df:40:01:82:d0:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:A7:92:BD:26:0D:6A:C2:EA:AD:31:48:5A:B8:A9:AF:60:79:62
X509v3 Authority Key Identifier:
keyid:2C:37:E9:AB:97:33:99:F0:2F:03:27:C9:81:1A:18:75:00:C4:B6:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDfpq5czmfAvAyfJgRoYdQDEtsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/55314e-9156-4776-9e01-570dca7ad13e/1/LDfpq5czmfAvAyfJgRoYdQDEtsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ca:ef:c9:6d:ef:d9:2a:03:07:79:a7:d0:76:5d:c7:e6:58:
e8:5a:8f:ae:e1:b6:54:c0:bf:66:5f:77:58:ac:6d:8d:2c:9d:
c8:92:42:1b:49:77:e0:4f:5d:d8:3a:2e:f8:d2:11:09:41:7d:
58:f6:2d:78:e6:81:6c:98:96:7f:18:b0:2f:10:00:80:b5:1e:
14:a3:1d:7c:76:5f:89:48:bb:69:e8:5b:69:c0:a0:3e:fc:fc:
71:fa:7e:22:ab:89:32:ba:ba:32:16:e5:d7:e5:cd:d7:42:6c:
e1:8e:fa:1f:cb:64:5a:1f:2c:0c:c8:85:34:ab:29:d0:b2:a7:
6d:6b:14:ee:f6:3c:6b:b3:65:68:3f:88:51:29:4d:d2:65:63:
e6:c3:85:75:36:bb:86:17:a2:2f:c0:1a:74:13:7a:8a:20:61:
d1:4c:eb:c6:df:40:7d:fc:ae:52:4b:63:28:a7:e6:3f:15:60:
55:bc:e8:7f:2b:56:e2:59:93:6e:f1:cd:2d:a6:b5:98:e0:fa:
b7:53:96:13:10:9f:da:00:8c:08:c1:48:9c:7b:63:be:6b:77:
2b:2c:2b:cf:b1:88:ac:a9:ac:85:ce:08:30:4b:c6:e7:19:2f:
12:4b:fa:ef:72:63:e8:6c:80:cc:3e:30:dc:22:47:1d:70:0a:
e0:e6:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:20 2025 by rpki-client on console-fra.rpki-client.org