Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
File: 2L2bhs89vBD7aV_xTYu1ShMHsqU.mft (raw, json)
Hash identifier: F18C4N5ob/negEMDkVO8mejZhdEMoU7wQjFcRFWCqqo=
Subject key identifier: F6:52:97:A1:CD:F5:78:41:34:7F:C7:E8:F3:42:B5:FB:DD:17:BB:45
Authority key identifier: D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
Certificate issuer: /CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Certificate serial: 019510C6D932DDDB3061440FA2B88631E477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
Manifest number: 0BB6
Signing time: Sun 16 Feb 2025 22:00:21 +0000
Manifest this update: Sun 16 Feb 2025 22:00:21 +0000
Manifest next update: Mon 17 Feb 2025 22:00:21 +0000
Files and hashes: 1: 2L2bhs89vBD7aV_xTYu1ShMHsqU.crl (hash: 8dftFjQ7ebu+gBOgaajIkUg3FvRV3Bet+HWyTp7vKrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:d9:32:dd:db:30:61:44:0f:a2:b8:86:31:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8bd9b86cf3dbc10fb695ff14d8bb54a1307b2a5
Validity
Not Before: Feb 16 22:00:21 2025 GMT
Not After : Feb 17 22:00:21 2025 GMT
Subject: CN=f65297a1cdf57841347fc7e8f342b5fbdd17bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:f8:67:8a:eb:c4:bf:9a:b0:c8:d1:dd:98:
37:ff:2d:a1:0d:c2:7f:79:f7:9c:f7:8f:29:ed:8b:
62:a1:b3:36:d2:40:7c:ae:d2:05:b3:02:28:73:71:
ce:b7:78:17:41:81:65:ab:99:da:7e:33:a6:94:b8:
a3:d5:bc:37:9e:6f:8b:eb:78:7d:c8:fa:db:b7:0a:
fa:8e:b0:44:2f:20:ff:fb:9a:58:bb:ec:9d:a6:c1:
91:41:ba:68:9e:65:6e:61:0b:f6:68:75:06:d6:c8:
d8:5d:36:0c:c1:c5:84:31:8d:6d:0c:91:8e:2f:22:
03:5e:d1:02:0b:2c:29:b5:f7:5c:79:12:fa:6f:46:
a0:3a:83:6b:92:e3:43:4c:3d:38:20:c7:fc:10:8e:
1a:fb:79:27:ce:b4:5d:f9:5f:5c:77:2f:9e:33:44:
47:ec:a4:75:68:a8:39:de:ae:65:65:12:40:31:2d:
a3:51:a7:af:4c:4c:98:d3:e0:03:01:de:0f:91:36:
b5:a8:02:cd:d3:27:64:cf:c5:1b:6b:32:2e:c8:36:
ad:77:fe:19:66:b1:a6:a3:50:bf:84:a2:e3:27:ca:
97:97:f9:8c:6b:22:ac:fb:3b:a6:d8:95:0f:0b:cc:
16:3d:f8:ec:8f:58:6c:d4:44:16:02:2c:95:a7:29:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:52:97:A1:CD:F5:78:41:34:7F:C7:E8:F3:42:B5:FB:DD:17:BB:45
X509v3 Authority Key Identifier:
keyid:D8:BD:9B:86:CF:3D:BC:10:FB:69:5F:F1:4D:8B:B5:4A:13:07:B2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2L2bhs89vBD7aV_xTYu1ShMHsqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b70ff2-3b0e-4566-8fae-47ebfd6fc9c0/1/2L2bhs89vBD7aV_xTYu1ShMHsqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:82:ce:4b:b4:84:4d:a4:35:8e:48:a3:72:7d:35:ec:cc:
c2:49:ed:de:58:ec:dd:2f:d6:bc:f3:b9:cb:3f:b8:ea:ab:60:
d5:2a:9e:f9:8c:4d:e7:db:ad:fe:50:e7:07:38:95:4b:c6:ee:
7a:30:36:b6:e3:60:3a:7e:d2:9b:c8:61:43:cc:c6:00:c8:5e:
5e:16:26:cd:07:c1:96:73:dc:fe:30:71:2a:60:d6:14:06:53:
e2:d6:b3:0b:65:d6:23:ed:bc:59:f1:9e:b9:41:83:08:91:c6:
a4:26:04:6a:c6:a9:6f:66:49:f0:5b:8c:c2:1d:76:60:fb:1e:
f5:1c:bb:55:b5:9b:8c:7c:9f:8e:da:58:a4:59:36:a5:c5:15:
38:2f:1f:4e:9a:08:d0:24:3d:e9:dd:09:84:f2:14:b5:8c:8d:
99:a5:89:20:bd:4a:e4:51:99:51:c5:82:5c:bd:ab:f6:14:09:
cf:bf:36:df:dc:19:1f:b4:48:dd:bc:7a:f3:30:25:a2:8a:be:
68:4c:4b:94:74:4c:b1:3f:c4:56:5c:fa:1c:e1:ff:9b:b6:85:
3f:1d:9f:29:78:13:fa:ff:04:26:9a:27:2f:6e:70:bf:f0:6b:
05:d4:b2:85:18:71:da:05:54:4f:7c:4a:cc:e9:56:cc:98:0d:
d3:0b:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:45 2025 by rpki-client