Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json)
Hash identifier: avrJzxog1Ur0VlEw6ajxv8DLrPQsHjMbYyie5TczJSY=
Subject key identifier: 1B:08:0E:07:E6:87:5C:FE:ED:54:8A:10:C5:C9:B6:EB:A9:A8:E0:8C
Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Certificate serial: 019511A2B6F3815F3D2547E5189C53E3DFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
Manifest number: 017F
Signing time: Mon 17 Feb 2025 02:00:31 +0000
Manifest this update: Mon 17 Feb 2025 02:00:31 +0000
Manifest next update: Tue 18 Feb 2025 02:00:31 +0000
Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: EqcsqTCRHS1x18y/a1sLJN2XhugjakRInvYhrtW78sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:b6:f3:81:5f:3d:25:47:e5:18:9c:53:e3:df:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff
Validity
Not Before: Feb 17 02:00:31 2025 GMT
Not After : Feb 18 02:00:31 2025 GMT
Subject: CN=1b080e07e6875cfeed548a10c5c9b6eba9a8e08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:97:16:21:f1:9e:79:28:53:46:66:1d:d9:ea:
b7:b6:da:a7:01:52:18:e3:7e:ab:5b:54:bd:4a:b1:
59:ea:d5:11:9b:9a:6e:28:90:9f:fc:6d:31:f6:65:
33:93:7c:77:3a:55:9c:bc:08:f5:a1:ed:90:fa:30:
26:80:16:35:c2:47:65:bb:e1:f6:a0:9c:e2:8d:48:
ad:d2:31:ea:fd:bc:4a:20:aa:cd:17:7a:d6:be:93:
9e:a1:e8:aa:a6:b7:9b:24:05:fe:5e:8a:98:8f:26:
54:51:bb:a7:9d:63:21:96:1c:72:6e:48:70:6d:2f:
47:89:c7:dd:95:b6:83:e8:94:cc:b2:cf:67:47:66:
64:9d:83:fd:4a:37:40:a4:7e:d8:e7:56:7d:a1:57:
1e:db:d3:0f:0a:56:2c:af:b3:c8:a3:c3:d1:72:5b:
51:d4:bd:d8:62:8a:ac:94:55:6c:cc:b3:ed:24:e4:
ea:4b:d5:4f:b0:04:1c:2e:b7:e9:7d:85:9b:20:89:
2a:6f:1b:52:e0:10:5f:e6:ae:3a:75:70:8b:dd:3f:
e7:b8:04:3d:c8:99:a6:9e:be:3f:5c:ff:52:03:05:
d1:a9:cc:18:70:ee:b7:4c:d0:73:85:0a:eb:ef:67:
09:00:d2:1c:e8:b6:10:bb:50:da:14:cd:30:9f:54:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:08:0E:07:E6:87:5C:FE:ED:54:8A:10:C5:C9:B6:EB:A9:A8:E0:8C
X509v3 Authority Key Identifier:
keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:d6:81:a1:79:b2:73:b6:bd:44:e0:ae:db:82:3c:e0:97:
3f:a1:f3:47:55:61:a5:d5:41:bb:a7:7f:3e:92:17:02:84:66:
6a:b7:e3:11:d4:5f:11:41:c7:22:6e:ce:04:81:75:7c:e3:e8:
a2:02:3a:4d:76:22:b5:4a:b3:5b:3e:65:f2:dc:41:e4:37:36:
e0:2c:31:4b:9d:7d:92:f8:dd:db:de:05:b0:76:e6:13:a3:b5:
d4:60:e8:db:8c:ab:61:bf:79:bc:ef:62:c9:a5:b3:17:da:29:
f0:50:46:eb:28:f0:24:7c:88:e3:9e:68:86:50:33:22:ce:e0:
c3:cb:fd:65:51:b7:43:d8:ce:8a:aa:10:de:9f:c4:e7:d6:a1:
8f:af:26:10:a2:15:10:bf:47:08:99:d3:f6:de:98:61:00:cc:
49:53:2f:a9:1e:f1:0d:71:d1:bc:b1:cf:ad:df:4a:27:d9:d3:
66:1b:b8:80:e6:24:88:8a:5a:6b:96:b0:15:1a:80:73:6e:46:
12:18:71:43:de:a5:36:b1:12:dc:94:e4:75:bb:1f:8a:ca:f8:
5f:8c:37:e0:89:51:0b:93:f2:e6:88:9f:e0:04:ca:0f:0c:fa:
c7:61:64:87:72:a5:7e:9d:4e:c5:cc:ea:04:8d:6f:fd:cd:35:
35:fd:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:42 2025 by rpki-client