Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: DRIZD8KAp+qKv/1D6XBsY7y0Jvdu0+CF28I7aqCpw30=
Subject key identifier: 2A:C8:6D:4E:0D:38:5D:9D:9C:06:F0:18:06:E9:EB:41:51:43:5E:11
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019510C6BEEFBDF8014DF31DAF05BDAF8846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0642
Signing time: Sun 16 Feb 2025 22:00:15 +0000
Manifest this update: Sun 16 Feb 2025 22:00:15 +0000
Manifest next update: Mon 17 Feb 2025 22:00:15 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: DybDsHh+R+OvOonkyHuMdwoqZ3gZna7BOgzeQy7/hJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:be:ef:bd:f8:01:4d:f3:1d:af:05:bd:af:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Feb 16 22:00:15 2025 GMT
Not After : Feb 17 22:00:15 2025 GMT
Subject: CN=2ac86d4e0d385d9d9c06f01806e9eb4151435e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:f8:47:d7:9e:8d:84:69:0a:26:a6:f5:81:
10:ab:3d:ec:dc:31:47:f3:87:f3:fe:34:24:c7:a2:
44:e8:36:26:f5:05:81:17:7e:f8:42:fe:04:bf:2a:
f7:1c:84:8b:46:e7:65:9b:9f:03:ef:52:8c:2d:cd:
b5:33:c7:c3:60:6b:13:25:ed:39:a4:69:77:99:71:
08:ed:19:8b:5c:7b:30:19:53:46:a9:5e:5d:cb:c9:
91:49:e1:85:43:86:e1:38:f3:e7:5b:98:90:49:93:
2d:08:17:bd:a6:a1:9c:b5:f7:fe:5c:77:77:45:8c:
3b:d2:2c:84:ee:c2:c5:75:d7:79:09:97:57:e8:46:
23:fe:0a:b3:be:2c:ed:59:81:b2:df:50:ce:41:ce:
e4:c4:e3:66:67:8e:0d:92:d4:55:5c:2d:5f:ac:01:
06:42:2d:d5:7a:f4:4e:45:bd:66:62:28:e6:d0:1c:
af:35:18:4d:d9:72:3a:ce:a1:d5:d1:de:a8:24:1e:
11:6a:39:7c:19:6a:85:08:fc:37:e8:c3:0e:9a:ee:
b6:65:f2:7e:50:bb:44:e2:39:08:52:32:1b:c8:bc:
a9:e7:3e:34:b2:0e:f1:7a:1d:d7:55:58:8e:be:ff:
35:0f:83:15:15:93:27:38:46:66:60:e8:58:f7:74:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:6D:4E:0D:38:5D:9D:9C:06:F0:18:06:E9:EB:41:51:43:5E:11
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:56:f4:79:cc:70:62:da:de:ed:1b:86:e7:34:c5:6f:a8:c9:
98:fe:29:6d:94:c7:1c:a9:d3:ec:e3:1d:d4:a0:08:69:e7:7c:
09:42:4b:14:b7:29:f5:9f:a5:2c:e5:92:7a:41:80:80:18:31:
37:a3:cd:53:9d:2b:d5:f5:17:ab:90:7d:9c:7d:7a:56:85:5d:
25:58:13:38:12:b5:40:d5:eb:55:b4:c1:78:43:f5:17:87:25:
9e:22:f9:02:fd:92:29:6c:74:57:a0:8a:b4:90:61:2a:82:24:
bc:7d:9b:48:49:aa:31:df:17:7a:8e:db:d6:23:8b:c6:05:64:
32:9d:e0:a2:84:e2:45:02:0f:08:a5:62:64:f3:20:20:84:b9:
6f:19:38:b5:27:ea:8e:36:9e:e9:4b:57:2f:19:0e:e4:c0:3a:
d9:b8:18:b9:70:1e:8f:e1:7d:9f:4c:83:e3:5d:b7:83:65:51:
ca:99:1a:6f:38:07:d7:f5:53:9e:52:69:49:44:3c:3f:1b:c4:
0d:e4:ac:ba:47:0b:48:9f:4e:81:9f:67:86:83:0a:c8:33:4e:
65:ac:2c:d0:b5:6f:c3:37:5a:4e:42:d3:68:6f:dc:6e:4d:b3:
7d:8d:31:2c:85:b9:c7:47:d7:93:49:d9:d2:7c:8f:01:2e:2f:
e5:02:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:04 2025 by rpki-client