Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
File: 2TLsITGy__Du_D-3jLxbjTLvHGE.mft (raw, json)
Hash identifier: +R3Dtei7bg2VproVTvS/0ZIeKRXen5OqGsjmV0l83vQ=
Subject key identifier: C0:3B:BC:A7:A4:3F:89:EF:6A:96:5A:E0:20:68:85:F6:13:54:D2:D8
Authority key identifier: D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
Certificate issuer: /CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Certificate serial: 01951210A88A7C2FAE6CB5C35ACBE7BD3882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
Manifest number: 0F22
Signing time: Mon 17 Feb 2025 04:00:36 +0000
Manifest this update: Mon 17 Feb 2025 04:00:36 +0000
Manifest next update: Tue 18 Feb 2025 04:00:36 +0000
Files and hashes: 1: 2TLsITGy__Du_D-3jLxbjTLvHGE.crl (hash: eh5mSst3MYi3G7KVCzzbd2vtB84+MAHkJqjhTxhQf/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:a8:8a:7c:2f:ae:6c:b5:c3:5a:cb:e7:bd:38:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d932ec2131b2fff0eefc3fb78cbc5b8d32ef1c61
Validity
Not Before: Feb 17 04:00:36 2025 GMT
Not After : Feb 18 04:00:36 2025 GMT
Subject: CN=c03bbca7a43f89ef6a965ae0206885f61354d2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:96:a0:2f:80:5b:f5:ec:cd:e3:31:8d:22:
e0:bb:48:ba:f3:ed:23:87:8c:5f:5f:c3:f9:79:8c:
0c:68:83:c1:ac:43:f9:dd:62:07:47:ec:6a:c1:18:
40:de:e0:7e:47:12:e8:18:88:dc:4c:4a:43:20:ab:
c1:88:6a:69:88:86:1c:0a:2a:ca:4c:98:50:d6:d6:
3f:b4:24:17:4c:81:a6:07:60:5c:74:4c:4f:0a:6b:
e4:70:af:ae:cb:c9:d0:33:3f:0b:04:15:5b:b5:d3:
05:a6:df:94:dc:8d:c5:ee:ea:49:7b:37:e6:a8:25:
94:b8:2a:95:f0:bf:ac:0b:00:87:6a:58:87:b5:71:
64:a6:3a:e5:6a:a0:d8:ed:be:2e:45:8d:1d:c2:dc:
58:d3:fe:f5:7c:e5:94:88:7e:ba:71:8e:fe:55:f5:
55:9a:69:9c:c9:1e:97:ef:cb:41:6c:2f:27:f9:75:
0d:74:a9:c1:88:df:c6:27:ef:e1:7d:e4:4a:50:54:
6b:66:bb:17:ae:ff:d9:fa:fc:da:a7:f2:9c:be:0f:
70:5b:8a:43:ee:d3:d2:c8:b1:a5:9d:69:85:d7:d5:
e7:26:f9:58:c1:0c:b5:d0:4a:9d:0b:96:b1:58:29:
2b:49:b5:2f:5f:d9:48:d3:65:1f:da:3a:25:db:15:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:BC:A7:A4:3F:89:EF:6A:96:5A:E0:20:68:85:F6:13:54:D2:D8
X509v3 Authority Key Identifier:
keyid:D9:32:EC:21:31:B2:FF:F0:EE:FC:3F:B7:8C:BC:5B:8D:32:EF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TLsITGy__Du_D-3jLxbjTLvHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/97940f-907b-46c2-b2c2-f22980e5ca92/1/2TLsITGy__Du_D-3jLxbjTLvHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c8:9f:47:7c:4b:bc:e5:02:97:b6:3b:e4:8d:cd:de:b3:7b:
bc:54:5e:ce:91:ef:1a:9f:4c:79:95:cc:54:19:fa:8c:f2:50:
21:99:fb:a3:e7:88:1c:27:eb:89:16:c7:4d:bd:a8:3b:18:98:
25:c9:dd:2c:f1:11:78:86:17:d3:ff:9d:eb:b0:05:2d:6f:4f:
10:3f:92:5c:8d:34:64:01:af:f3:ba:c8:67:74:f0:80:fd:e7:
14:06:6b:17:57:c3:73:79:d0:62:33:d8:94:7d:5b:03:76:59:
1f:bc:83:98:4e:ed:b7:20:fe:95:17:ac:f7:4b:fc:5b:f5:e1:
10:7c:10:82:51:56:35:30:bb:f0:d8:dc:60:36:c0:85:f5:7f:
30:ff:fe:a3:04:b1:dc:5d:d1:9c:7f:4e:fa:ec:0e:54:2d:2b:
32:43:3d:22:33:34:e5:8f:59:4f:8d:2c:7e:4f:2a:ca:df:92:
12:e6:cd:37:5d:98:61:2b:35:d0:2b:23:86:77:2d:17:f7:8c:
d7:87:5b:5d:ca:ad:66:d2:7e:3c:c5:7c:46:65:50:7a:1e:88:
2d:ca:a1:af:a2:1b:18:93:fe:7b:e5:1f:6f:d3:dd:a0:80:9b:
6a:37:7e:0c:0c:b4:e5:d3:13:a8:ee:de:6a:07:54:00:42:ab:
9a:49:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:33 2025 by rpki-client