Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: SFU7+vX4ULJ+5AvOChIxkY56+ZND56/pU1uWn1+47qY=
Subject key identifier: 02:52:3B:7D:EF:AB:32:EC:7F:B5:04:29:A3:E7:73:A4:4B:F1:D4:AF
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019511A270957B26D47B90DCCA5A2F04B91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 02:00:13 +0000
Manifest this update: Mon 17 Feb 2025 02:00:13 +0000
Manifest next update: Tue 18 Feb 2025 02:00:13 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: M1n1+5ev1rce3xotcjyF92rNcQVGU30FdvCfC0TOLdU=)
2: 7zgJLwVmV842Ywy3l4oAYDOGp4w.roa (hash: AYbt1RSDmpRQAXV9FrFAgJxWoMbfvxnjrtRy1sQLkRw=)
3: g5fk8wweb2K2LN5x1BH4qQmKXhY.roa (hash: I2R60nkld9ZmTY6WR9H1fRR8Kr2Ki4lgol3HlXeFguU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:70:95:7b:26:d4:7b:90:dc:ca:5a:2f:04:b9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Feb 17 02:00:13 2025 GMT
Not After : Feb 18 02:00:13 2025 GMT
Subject: CN=02523b7defab32ec7fb50429a3e773a44bf1d4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:80:40:d1:23:84:10:bf:23:4d:7b:90:88:
e8:fc:94:5f:8e:8e:bc:ac:0d:81:cc:06:8f:73:1b:
e8:b9:18:44:cc:22:8d:01:40:be:fb:fe:e7:9b:14:
53:c7:b0:5b:5a:00:16:49:74:64:0b:70:39:96:ab:
b8:54:a5:9f:1e:c0:21:b9:c7:d0:f0:81:65:33:99:
45:42:7f:81:30:2e:34:b0:f0:92:ec:d6:0a:da:fa:
3d:11:06:35:bb:51:b3:59:bb:94:cf:81:23:66:56:
64:d5:f1:e6:49:3d:c6:cc:89:a6:a2:d9:8b:67:30:
94:1e:cd:63:23:5f:b9:fd:7c:f0:ff:6a:8c:97:f4:
78:03:14:fb:0b:8c:4b:0a:4b:08:7a:26:b7:5d:cf:
7d:1e:b4:e9:db:f8:27:1d:fb:a4:a0:b6:26:1f:35:
13:b8:1f:65:b7:44:a7:16:78:a5:34:52:6a:a1:ae:
9d:c9:71:41:f2:85:ad:5f:dd:2e:68:25:ca:6c:2e:
41:19:a4:5d:f4:36:a0:65:fd:1f:2d:2b:2b:9f:a2:
53:54:e9:d5:33:18:9e:be:15:bf:a7:f7:ee:65:c3:
11:4c:72:b9:d4:7b:0b:62:74:1b:7c:2b:30:37:91:
7f:fc:a5:e0:7f:7f:a9:62:ce:38:8f:89:ff:cb:57:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:52:3B:7D:EF:AB:32:EC:7F:B5:04:29:A3:E7:73:A4:4B:F1:D4:AF
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9e:b9:ec:66:7a:8c:04:85:75:91:21:60:74:7c:1b:8c:73:
c4:91:31:3f:86:ce:13:95:7b:1a:5f:65:c2:9e:c4:9a:b4:66:
dd:f3:bf:51:54:25:b6:4e:37:9b:8a:41:88:d4:cb:55:76:13:
fc:9a:13:43:80:f8:2e:3f:1c:08:7b:08:2e:0a:f5:54:70:5e:
bd:70:ee:67:c3:09:75:88:52:73:c2:72:09:1a:83:74:db:21:
c8:46:41:87:3a:4b:1b:5a:a5:3a:b9:82:04:a4:ea:55:fd:02:
3a:12:94:e9:73:56:3f:85:63:96:1b:f7:71:a8:dd:38:ca:9e:
ea:ce:1d:0b:4f:b8:45:10:81:34:8e:4b:6e:78:92:e6:65:e0:
06:2e:75:39:72:79:7d:fc:5d:bb:b5:16:4c:9e:5f:62:0f:e7:
c6:15:4c:73:aa:12:ea:a9:3c:22:18:8a:90:e8:ab:d2:16:54:
27:ae:b4:ec:0e:51:1c:50:ea:7c:37:60:fa:54:94:20:11:d0:
b3:73:c3:7a:96:24:5c:9b:fd:a6:47:8a:33:ab:96:c2:ca:e1:
e8:98:6d:01:58:16:2e:29:ee:ab:7d:48:86:ae:ec:d3:b3:0c:
f5:af:98:a8:ba:44:f3:43:1b:26:73:3d:57:bf:38:de:bd:d3:
f3:9e:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:13 2025 by rpki-client