Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
File: ky6JreaI2S6euPGuyJs10jA9Rrg.mft (raw, json)
Hash identifier: 9PcwP1iyIx/9G20ZCSLOn1hEVRXlE6jVBu7frHSJM/c=
Subject key identifier: D0:E3:7E:47:C4:E0:00:60:BD:FE:5C:35:B1:4A:B0:1F:69:F4:85:20
Authority key identifier: 93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
Certificate issuer: /CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Certificate serial: 019511A2FD7550A8FB591426C5DF0EB642D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
Manifest number: 0F5A
Signing time: Mon 17 Feb 2025 02:00:49 +0000
Manifest this update: Mon 17 Feb 2025 02:00:49 +0000
Manifest next update: Tue 18 Feb 2025 02:00:49 +0000
Files and hashes: 1: ky6JreaI2S6euPGuyJs10jA9Rrg.crl (hash: /Wz9BdXgXjocmzXd1b2yNR41VngWXHRKpLOPaGRmbNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:fd:75:50:a8:fb:59:14:26:c5:df:0e:b6:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e89ade688d92e9eb8f1aec89b35d2303d46b8
Validity
Not Before: Feb 17 02:00:49 2025 GMT
Not After : Feb 18 02:00:49 2025 GMT
Subject: CN=d0e37e47c4e00060bdfe5c35b14ab01f69f48520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e1:ad:38:f5:a8:9a:82:ab:bb:97:87:a7:3d:
9c:fa:65:18:9d:9b:e1:15:96:b9:0c:44:fd:d9:b7:
22:36:56:c5:0a:42:68:db:28:9b:d8:36:f2:9f:6b:
9f:ee:e2:e1:a1:8b:20:07:c1:eb:9c:f8:15:3c:e5:
cc:fe:ae:74:bb:31:50:ee:e1:85:5d:67:cf:b7:04:
96:a1:d6:eb:14:9e:e6:05:0f:e5:44:67:bf:29:6a:
3f:6e:c2:cb:79:02:9a:75:8e:8b:7c:68:c3:5f:a8:
af:56:05:9f:b4:73:50:d6:14:18:dc:af:dd:94:98:
0f:d2:f1:6a:e7:2a:03:d6:58:33:64:54:50:27:ca:
42:74:75:dd:70:fd:5d:a2:20:4a:67:0f:31:95:8e:
c9:11:8d:aa:f1:34:97:4b:96:07:ca:a5:6e:bc:90:
70:e9:c4:9e:60:21:ac:35:49:28:4f:25:7b:b5:00:
af:cc:96:de:54:19:51:29:25:17:70:77:83:b6:ac:
84:9a:1b:47:c0:51:ac:86:a8:89:66:7e:70:56:ce:
ba:55:fd:b7:60:5c:eb:a9:f5:b8:4a:da:97:8e:36:
04:62:db:67:0f:ec:3d:90:fd:14:96:a8:7e:a0:83:
33:ea:eb:2e:b3:17:cd:c3:43:a5:2a:9b:fb:02:90:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E3:7E:47:C4:E0:00:60:BD:FE:5C:35:B1:4A:B0:1F:69:F4:85:20
X509v3 Authority Key Identifier:
keyid:93:2E:89:AD:E6:88:D9:2E:9E:B8:F1:AE:C8:9B:35:D2:30:3D:46:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6JreaI2S6euPGuyJs10jA9Rrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a182b7-1565-4c16-86b8-b85f4039b9cf/1/ky6JreaI2S6euPGuyJs10jA9Rrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1c:32:94:61:06:93:51:cb:c8:f2:73:0f:d3:58:60:bd:62:
d8:dc:7e:c0:71:fb:8a:69:9c:fc:98:01:77:c2:f0:af:d8:64:
3f:4d:93:2d:0a:2b:01:23:9a:3d:35:eb:e1:f6:aa:ed:b1:d8:
53:dc:10:87:f6:bd:03:13:4a:0f:a7:ea:a8:16:7b:64:2e:91:
d6:94:b3:3f:30:c0:4d:61:c6:98:16:d3:94:de:9c:f1:fe:cc:
aa:fe:36:13:e0:9e:ec:56:be:db:64:31:dd:b9:1d:36:2c:c1:
72:93:5e:22:e1:18:26:46:d9:9a:63:ad:b1:cc:d9:ee:ed:4e:
c5:62:82:64:5e:ac:a4:60:a0:19:2d:b8:18:e6:ac:ea:8c:65:
ba:42:1a:e8:f0:ac:fd:13:fa:24:e8:bd:60:95:73:6c:13:39:
c7:0f:86:a1:73:79:4e:02:2c:21:18:00:d5:d9:5a:dc:7c:79:
11:4e:4b:f9:46:5a:31:36:01:3a:13:d1:61:13:55:bb:ff:85:
45:46:46:21:7e:98:7e:2a:e8:2a:41:26:29:34:31:9c:fe:41:
47:ec:22:5b:2f:76:7f:38:5f:fb:4d:de:7f:01:65:13:31:1b:
05:9e:d3:e1:05:93:7c:9e:60:3d:de:c2:ff:ec:30:f6:41:0f:
91:b4:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:26 2025 by rpki-client