Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
File: 1l2axr8fKjjiwXKFDu9wda686Ig.mft (raw, json)
Hash identifier: lwbW2gkTy9tHkLICuuzSxgjjzmHQw4V6ht2dkUt2e90=
Subject key identifier: 4B:AD:B2:92:08:E8:61:37:D2:6A:E2:BB:CF:FC:7D:4F:8B:AA:62:08
Authority key identifier: D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
Certificate issuer: /CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Certificate serial: 019511A27C5E4A5B801E6A8D2BBD6ADD6012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
Manifest number: 1141
Signing time: Mon 17 Feb 2025 02:00:16 +0000
Manifest this update: Mon 17 Feb 2025 02:00:16 +0000
Manifest next update: Tue 18 Feb 2025 02:00:16 +0000
Files and hashes: 1: 1l2axr8fKjjiwXKFDu9wda686Ig.crl (hash: OKO2ywg9Q2nQWPt+kqkH669PGcQP8fJR7VJbIfrhWRY=)
2: QajEwkbx04DeU-__NIG_To3nAd4.roa (hash: DL3wmR5aQwUYr9WHU8u6HM9lbpHPvXLenfBtN39yssQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:7c:5e:4a:5b:80:1e:6a:8d:2b:bd:6a:dd:60:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65d9ac6bf1f2a38e2c172850eef7075aebce888
Validity
Not Before: Feb 17 02:00:16 2025 GMT
Not After : Feb 18 02:00:16 2025 GMT
Subject: CN=4badb29208e86137d26ae2bbcffc7d4f8baa6208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:fa:c3:5a:ee:e0:f6:aa:26:c7:ba:6a:c3:
2f:e5:31:78:04:52:06:b1:6d:ac:7c:76:ac:ad:53:
9d:ce:fe:97:8b:5a:93:d6:ea:21:8c:a5:48:01:f9:
72:65:4e:d7:f4:ac:58:75:bc:b8:03:8d:04:fb:49:
60:db:17:ed:03:1b:fd:27:67:e3:46:c1:8e:ab:1a:
12:4f:b4:6b:d1:b0:a5:41:f4:a5:7b:e7:37:b8:d7:
20:d7:89:20:3a:48:ac:c2:e5:ca:ce:ac:2e:b0:05:
22:ba:3b:73:ac:3d:0d:c7:93:d9:fe:64:79:d6:e1:
6b:da:bb:e2:a7:72:f9:5f:4d:28:96:f9:bf:1f:e1:
56:70:f7:a2:3b:bf:09:e0:1b:3c:1f:1f:29:8e:36:
4e:f6:c4:a9:6d:4a:14:f7:75:4d:f3:b3:60:06:19:
fe:05:92:42:ab:73:07:1c:d8:48:54:90:cb:a3:de:
1d:52:07:13:8c:e4:c5:2e:46:ad:a2:fc:07:ac:d8:
3a:2e:fb:1a:73:18:c0:9a:e0:ff:49:5d:67:b1:14:
c5:7d:5b:02:19:5d:20:a1:21:74:df:13:13:14:96:
b5:01:75:3f:ac:fc:38:40:d6:a3:e1:3b:8e:c8:0f:
94:c7:f4:2b:44:9d:be:5f:72:a1:8b:32:e4:be:00:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:B2:92:08:E8:61:37:D2:6A:E2:BB:CF:FC:7D:4F:8B:AA:62:08
X509v3 Authority Key Identifier:
keyid:D6:5D:9A:C6:BF:1F:2A:38:E2:C1:72:85:0E:EF:70:75:AE:BC:E8:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l2axr8fKjjiwXKFDu9wda686Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6ffb0d-22c4-400a-8a23-3d113eb927bf/1/1l2axr8fKjjiwXKFDu9wda686Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:64:ec:33:a3:ca:4c:e1:17:d2:92:c6:d2:d3:25:c9:7a:41:
89:c2:bd:ef:59:30:6c:2f:1d:71:3c:01:bb:ae:dd:f3:0b:fb:
ad:69:4a:9d:51:cd:74:8c:85:8a:f2:16:40:7a:be:f5:28:d6:
22:4e:d7:b8:9c:a7:74:92:33:98:41:fd:87:65:3a:46:5c:6f:
d8:cb:0b:85:7a:24:62:3f:c7:17:e3:bc:98:dd:89:f7:4c:9b:
c8:bd:14:15:c0:79:80:9a:d2:15:47:90:5a:0c:4a:fa:5c:9f:
d2:9b:4b:0c:6d:84:88:72:8e:7a:9c:b4:39:f5:ab:f3:5f:9b:
60:99:73:26:4d:f4:9e:d9:5c:9b:e7:2a:94:ed:46:a9:2d:ba:
0e:12:d6:ed:03:7c:e0:2c:73:a0:7f:f8:95:2f:4b:0d:9c:72:
4b:cd:e6:8e:5c:f9:f9:63:ef:fc:13:a3:dd:50:72:56:86:47:
47:5d:a8:c4:0a:ab:13:f4:1f:20:80:85:e8:7a:9a:a7:89:fd:
8a:b4:5b:4e:70:43:b0:59:ab:7e:fe:44:55:a8:f1:23:fa:23:
31:ee:76:18:eb:b9:a7:07:a1:4f:46:ed:96:49:c6:07:61:35:
bb:ab:87:84:dc:90:8f:f0:d5:e5:bc:89:e1:29:96:62:a7:02:
0a:6c:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:35 2025 by rpki-client