Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File: e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier: jW/VyK21DFnjTmo0Zxjj/3vf/s76mMN+jpoU33qNDjc=
Subject key identifier: 9F:9A:B2:21:7D:82:D3:BA:4B:33:3C:6E:53:18:E5:EE:B9:0B:65:D6
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer: /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial: 0194C3888A9BB4051BA8FEF243403795C465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number: 0830
Signing time: Sat 01 Feb 2025 22:01:33 +0000
Manifest this update: Sat 01 Feb 2025 22:01:33 +0000
Manifest next update: Sun 02 Feb 2025 22:01:33 +0000
Files and hashes: 1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: +rDH4RXxHVuxr26JL7OlByW8MCK2W3KbBd+1oETSMbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:8a:9b:b4:05:1b:a8:fe:f2:43:40:37:95:c4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Validity
Not Before: Feb 1 22:01:33 2025 GMT
Not After : Feb 2 22:01:33 2025 GMT
Subject: CN=9f9ab2217d82d3ba4b333c6e5318e5eeb90b65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:ed:94:67:a4:6b:79:44:1f:dd:92:08:51:
27:a7:8b:90:2d:6f:6a:47:ec:3b:1b:07:14:53:52:
0d:8b:f0:4c:1a:45:54:81:76:57:8c:e9:95:58:49:
f5:a4:92:5e:bb:72:c4:a5:d8:12:a0:62:19:65:ed:
4e:e8:6e:60:b9:33:6a:c8:c3:ec:cf:8a:e9:31:d9:
48:df:74:d7:0d:06:81:94:3b:84:b3:6d:57:82:8d:
cd:ee:f6:c1:cc:08:44:04:6b:e8:74:2a:49:52:e6:
56:8d:ef:99:1a:97:ea:71:84:1f:42:32:f9:7c:bd:
c9:45:41:0b:0f:c5:3d:88:fb:e4:68:d3:62:26:71:
12:57:8d:d8:cf:a2:e2:ee:72:1b:4b:48:48:a6:8c:
18:20:79:1b:86:e7:f4:23:5c:36:31:b4:a9:59:68:
31:ce:d0:3f:9e:5f:15:68:9a:71:2b:bb:44:dd:ff:
0e:dd:87:d0:2c:83:c8:b6:b6:4e:ff:65:66:40:5d:
85:d8:dd:a9:99:17:76:61:81:3f:0e:25:1b:7e:d0:
e4:63:75:09:87:5e:02:27:1d:c8:e7:93:11:c9:f3:
cf:29:cd:78:99:53:fa:d1:b9:02:1c:be:03:77:8a:
52:c6:2d:cb:37:88:23:23:a0:ec:06:22:21:04:6c:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:B2:21:7D:82:D3:BA:4B:33:3C:6E:53:18:E5:EE:B9:0B:65:D6
X509v3 Authority Key Identifier:
keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e5:f9:4c:fa:10:20:ac:0e:c7:2b:9a:18:84:8a:3a:81:c8:
7f:8f:ec:6c:46:1e:3a:69:50:99:b1:56:dc:ca:50:71:37:d2:
de:7e:02:fa:dc:6f:bc:aa:b5:75:e1:4b:b6:22:9e:1a:ee:ce:
7e:da:f7:97:ae:7d:1e:59:df:3b:ea:08:a3:40:48:78:b5:98:
2c:3c:b6:72:e4:19:fe:87:35:07:24:68:13:a0:0d:78:ad:b9:
db:39:40:52:6d:c9:84:45:9c:f9:9b:e6:8f:e0:0b:48:9d:39:
45:6a:c0:80:0e:5c:a1:31:d5:62:ce:d7:8f:e3:3a:2e:be:e4:
4c:b1:3c:e0:5a:9a:28:e3:27:0f:69:94:43:21:a6:53:52:e4:
e0:25:ed:2f:8a:fd:aa:b7:a8:1f:ca:80:9b:c3:86:60:58:d2:
9b:75:18:d8:d2:3e:f6:f1:08:67:d1:a1:de:90:04:4e:18:f5:
92:90:25:dd:31:11:7e:0d:30:07:9c:eb:a4:33:c3:76:e6:e2:
16:4d:9c:8b:26:6e:6f:a0:e9:69:d4:4b:53:34:d8:97:2e:ce:
2c:cd:36:3c:15:47:8b:fa:9a:dc:78:c2:3a:cf:a9:0c:40:54:
19:86:67:37:99:6c:ef:6c:e2:ea:d8:0b:ca:8b:cf:fb:87:af:
2c:3e:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:00 2025 by rpki-client