Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
File: 2jQhazvZIbbGYYeoyGpKS7DuUj8.mft (raw, json)
Hash identifier: RGK4Nwk8UQo07sX9Eikz40u5y007qRxsG9+a5sVV5KA=
Subject key identifier: 2B:8D:55:B2:85:3A:4B:AA:70:BE:31:5D:6C:3C:91:7A:99:D6:62:76
Authority key identifier: DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
Certificate issuer: /CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Certificate serial: 019511349793D738A1B4D5736798346A5328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
Manifest number: 115D
Signing time: Mon 17 Feb 2025 00:00:14 +0000
Manifest this update: Mon 17 Feb 2025 00:00:14 +0000
Manifest next update: Tue 18 Feb 2025 00:00:14 +0000
Files and hashes: 1: 2jQhazvZIbbGYYeoyGpKS7DuUj8.crl (hash: hsLjJIzOYD/JXIviQR4uBFr2DGxv6C9Qu7reNkXFcfo=)
2: y-rAx3x5ggb3kBBIMyQl2KhriYw.roa (hash: j/sr0gEHuELryIqb8wmwmOpvCJwyct02mKuP2NU5Abs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:97:93:d7:38:a1:b4:d5:73:67:98:34:6a:53:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da34216b3bd921b6c66187a8c86a4a4bb0ee523f
Validity
Not Before: Feb 17 00:00:14 2025 GMT
Not After : Feb 18 00:00:14 2025 GMT
Subject: CN=2b8d55b2853a4baa70be315d6c3c917a99d66276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:50:e5:0d:1a:16:d8:ef:37:31:45:6c:dd:
9f:5d:a2:f6:66:b6:da:29:b3:5d:13:30:bd:9a:13:
49:66:be:fb:0e:9c:68:e1:b9:2b:4d:2e:b7:02:53:
f3:57:07:0d:f7:bd:46:87:66:12:40:cb:59:c9:1d:
b6:35:ee:9a:4e:11:84:3e:b9:4a:2b:6d:e7:30:e5:
67:06:76:f2:94:b0:a2:2b:e9:ec:6e:ed:09:5b:03:
4f:a2:a1:a0:4b:66:76:24:d2:dc:14:2d:0e:99:86:
55:e3:dd:78:d6:c8:59:f0:9d:4e:46:bf:03:c6:b0:
03:f4:bf:41:e7:c3:cf:29:7f:2e:e9:b1:30:39:10:
41:8b:a1:17:53:87:26:bd:1d:91:cd:b1:c8:05:72:
3b:7e:7f:8a:67:84:58:dc:28:7d:72:75:cc:51:ca:
4c:fd:75:51:58:6e:16:9b:79:eb:e8:bb:d3:79:a0:
8f:9f:57:c0:16:ea:18:cc:bb:e7:19:7a:79:6d:5f:
8d:d6:4e:76:21:79:0b:4d:27:0b:a1:1e:02:27:97:
ef:a5:40:20:2f:2d:6e:38:60:44:91:f9:30:fc:86:
76:a6:56:e4:fd:c2:cf:7d:aa:05:0b:3f:f1:49:cf:
b2:e5:d4:d6:52:24:57:fc:2f:23:7a:84:51:bc:9c:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:55:B2:85:3A:4B:AA:70:BE:31:5D:6C:3C:91:7A:99:D6:62:76
X509v3 Authority Key Identifier:
keyid:DA:34:21:6B:3B:D9:21:B6:C6:61:87:A8:C8:6A:4A:4B:B0:EE:52:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jQhazvZIbbGYYeoyGpKS7DuUj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/71ee7c-3c04-4a9c-9df7-0bf5905b35ef/1/2jQhazvZIbbGYYeoyGpKS7DuUj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:4a:cf:92:c9:de:99:d5:72:c1:13:d8:4b:ed:6d:6d:3f:
ba:0f:c0:e6:9b:4c:87:bc:28:e4:97:cc:92:12:18:e8:38:8f:
0f:a5:48:3c:26:3e:4b:31:f4:49:65:21:b4:94:b7:48:28:f4:
4a:ad:a2:cf:3a:34:77:11:a2:07:d7:24:00:41:81:fe:e9:f6:
5b:a5:ca:29:e1:e5:a2:c9:3d:d8:f8:f2:ff:b3:68:27:78:ed:
ea:be:84:8f:53:00:33:95:90:8b:d8:35:bc:72:5d:26:5b:06:
83:09:47:74:1a:a0:20:81:60:07:62:55:4a:b7:94:84:77:f8:
3b:f4:18:76:64:ff:77:bf:1d:bd:ce:a2:73:5a:0b:49:c6:bc:
03:ad:f0:c9:43:5c:88:6e:f4:49:cc:99:c4:96:18:00:40:29:
26:ae:1c:4b:e0:b5:5f:fe:ed:0f:6b:9f:ef:0d:5b:db:30:65:
6b:d9:e8:00:61:95:7c:de:48:e1:bc:98:42:0f:12:e5:d1:1e:
92:c1:88:5d:a6:65:5c:d3:08:45:26:66:6f:43:93:5f:17:f7:
09:bd:81:20:01:70:bf:27:d7:f0:a6:9a:c1:3a:44:53:fb:5d:
ea:73:62:16:d6:97:a8:84:af:2b:07:51:aa:8f:dd:31:f4:86:
c8:8d:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:58 2025 by rpki-client