Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: sX53mcXqbS/LJaO1sfVZnBdJg8oL8seyOl2BMk2RdfY=
Subject key identifier: CD:38:74:3B:1F:78:05:B3:E0:FB:BC:10:C9:03:8F:75:41:A4:CC:37
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 0195116C16F13E4DD7306238860F533843B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 13E6
Signing time: Mon 17 Feb 2025 01:00:51 +0000
Manifest this update: Mon 17 Feb 2025 01:00:51 +0000
Manifest next update: Tue 18 Feb 2025 01:00:51 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: uaT27MDzEKTVXP9x9YVg3rXMSU2agYJB3+QLXGKVJyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:16:f1:3e:4d:d7:30:62:38:86:0f:53:38:43:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Feb 17 01:00:51 2025 GMT
Not After : Feb 18 01:00:51 2025 GMT
Subject: CN=cd38743b1f7805b3e0fbbc10c9038f7541a4cc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:f2:b6:8f:2c:10:ca:2e:b8:aa:89:64:fa:
b6:8a:1c:1d:8c:ea:8f:f5:d5:2c:7e:a3:86:3a:0f:
2f:3c:3a:fe:bd:5a:f0:54:35:a1:71:11:49:72:43:
a8:14:01:d6:85:0b:18:d4:ef:56:d3:1c:46:60:c9:
1c:6e:99:27:1b:2d:ab:e6:2e:bc:8a:4e:14:36:80:
56:2e:78:95:e9:01:35:c2:7b:18:fc:51:86:2b:0d:
20:7e:89:d8:f5:cf:73:1a:c2:e7:d7:4b:00:23:75:
89:1b:44:42:8a:ae:1c:8e:87:c0:24:e0:0e:c2:60:
51:2c:ed:5e:59:a0:ea:f1:e5:d6:3f:cf:4f:e1:b4:
d4:c7:1f:37:c0:6f:97:6c:34:78:eb:ff:5c:e3:ed:
74:85:d3:3c:e9:a0:30:4e:95:be:56:18:94:e8:b7:
90:59:12:61:ac:ef:4e:59:a6:84:0a:0e:47:64:c1:
f5:c8:f1:f5:e1:2f:39:7d:d5:55:4d:f4:a3:5e:12:
8a:1a:34:43:ab:cb:f2:bc:47:b0:5f:2a:fe:59:97:
1b:49:05:2b:e9:c4:35:64:52:ee:89:96:19:cc:8e:
0a:60:c6:d5:7b:b8:ab:6a:c0:db:28:85:6b:1d:42:
d0:38:ba:fd:fe:f1:94:6c:00:7d:34:12:b1:4c:0d:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:74:3B:1F:78:05:B3:E0:FB:BC:10:C9:03:8F:75:41:A4:CC:37
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:66:7e:46:95:12:50:49:0e:1c:5f:a4:02:a3:5e:d6:9e:
f5:07:e2:b6:61:7b:fa:a3:ba:b2:6e:e9:0f:d9:a1:83:50:6e:
f3:4e:ad:91:5a:6d:2d:7d:fa:9d:08:7e:00:1e:c9:d5:b0:ab:
2e:62:3d:28:75:d2:eb:d5:af:3f:57:99:ac:25:a3:0c:a1:ec:
03:14:d9:49:b4:e0:64:a5:31:b9:5f:d2:20:79:a1:3d:d7:31:
17:62:e2:ae:cc:31:73:49:f7:28:cc:1a:6d:e0:3a:62:fa:2e:
09:5a:61:5c:2c:4d:a7:46:0d:42:c2:6f:6c:e3:b8:db:82:ac:
60:34:a7:a9:3d:e3:a6:ae:98:d6:a3:3e:97:61:66:29:4d:cd:
3e:7d:20:4d:95:fb:12:cf:a7:6e:65:3f:76:ce:0b:ba:38:10:
50:a1:91:3e:72:97:18:f7:1c:74:4e:c9:eb:b9:33:6e:c1:65:
ca:8a:bb:63:3e:55:df:55:bf:f0:fc:43:16:dc:36:00:03:fc:
b8:a9:8a:3e:69:24:e7:4e:41:f7:75:38:a0:90:6f:39:f7:44:
38:f7:21:4d:fd:9e:40:e1:64:e9:10:ec:0c:43:7b:35:de:f6:
73:03:44:00:8c:8c:f0:c1:ed:2f:19:41:1c:4c:0f:c5:e3:03:
53:3d:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:32:06 2025 by rpki-client