Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier: 5QMnuZuPisTm5dZ0hSOXLhkHGIp0iuifk2kUczts+CE=
Subject key identifier: 96:9E:A5:27:B5:B8:B4:2F:5C:8B:02:46:62:2F:E7:2E:F2:2E:A2:4C
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 0194C42C4345B06FDEF514F84E53DBC82C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 01:00:22 +0000
Manifest this update: Sun 02 Feb 2025 01:00:22 +0000
Manifest next update: Mon 03 Feb 2025 01:00:22 +0000
Files and hashes: 1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: 0osie6aVVEY7hpq7FkjH/MwtbR1Xx0CLajuvz3HzRrQ=)
2: sSpU4OsJ0JP6v-KsLTWyn3wkgzU.roa (hash: P3OhH37SSr0XKA5lxGstCRgs9hYtzQO/7M2sPZjPsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:43:45:b0:6f:de:f5:14:f8:4e:53:db:c8:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Feb 2 01:00:22 2025 GMT
Not After : Feb 3 01:00:22 2025 GMT
Subject: CN=969ea527b5b8b42f5c8b0246622fe72ef22ea24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:ee:01:16:22:24:32:cc:56:65:6f:10:f0:
24:c3:d9:13:29:46:00:a7:55:25:b8:f5:64:23:7a:
d6:08:d8:91:d2:34:5d:3f:bc:e9:8c:2b:63:fc:d3:
20:52:20:12:0a:a7:19:98:a1:d7:87:01:c6:cd:88:
e5:cb:28:40:49:ee:c4:53:60:b2:79:14:12:02:6a:
78:28:be:62:3e:ae:f2:61:9d:6b:2e:b6:f7:60:04:
96:27:47:d2:bb:23:bb:36:46:b2:12:17:72:a8:30:
a3:dc:7d:f3:7e:ef:f3:5b:3d:1f:bf:78:fe:bb:ba:
b7:db:8b:f1:36:a8:b3:90:83:18:41:fc:93:a8:b5:
ba:cc:a3:9f:18:71:73:a3:2f:b8:58:89:79:27:3d:
4e:27:07:26:1e:11:bc:2a:92:38:61:07:98:61:52:
e3:79:be:f9:6d:e6:64:c4:3c:91:40:03:1b:75:6d:
04:66:2f:d3:a3:68:41:16:c6:1f:d7:ad:b1:b4:26:
e7:62:dd:0e:62:d9:62:0d:ca:45:3a:1b:c1:40:f6:
53:b4:1f:88:5e:10:78:da:91:4b:fb:d3:2c:cb:95:
c6:85:e5:f0:35:fb:a6:65:b0:0a:e5:b9:93:89:ce:
b1:19:9f:33:fc:e8:31:b4:48:c6:52:82:be:f5:be:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9E:A5:27:B5:B8:B4:2F:5C:8B:02:46:62:2F:E7:2E:F2:2E:A2:4C
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c9:19:3e:51:8d:f2:e6:60:e5:bd:fe:09:a7:ad:86:fa:14:
d8:f6:82:3b:90:6b:68:52:6d:05:2e:10:98:22:5d:60:cb:42:
77:30:b6:d3:90:18:8d:0f:d1:ac:36:fb:91:b1:a5:31:1c:7b:
21:dd:06:f3:42:12:33:00:54:26:24:a5:ec:c9:d2:75:55:70:
6e:b3:c9:54:4f:4c:44:07:62:2f:d0:e3:2f:00:94:f4:16:84:
34:8a:a1:cb:a5:a4:43:aa:5d:3c:b2:c4:c4:e8:b8:a8:9a:c8:
34:ab:20:25:3d:68:e1:79:d9:ec:4b:bf:9b:e5:5e:d6:db:ce:
fe:e7:3d:eb:b2:66:56:2f:25:63:4f:6f:48:76:33:74:b1:38:
24:df:a7:23:94:3b:f3:79:96:89:9d:58:24:aa:26:e7:5a:6f:
de:32:b7:cb:26:6f:a2:6d:32:f6:5b:f9:43:6c:ba:61:4f:7e:
25:84:d7:7b:e6:4f:ac:ec:2c:29:cb:81:83:f6:58:a0:a9:2a:
d1:2a:17:ad:35:f6:28:42:be:08:2b:2b:70:78:a6:79:08:5b:
62:4e:d8:fc:df:88:51:e3:ce:95:6f:94:b9:26:0b:14:e7:b7:
7b:dd:73:b8:4d:b1:db:98:4e:0e:4a:98:9e:1e:8f:64:2f:80:
95:ae:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:12 2025 by rpki-client