Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
File: 2MGLWtOiXxGKg7sv-755XWZDZjw.mft (raw, json)
Hash identifier: THKstJJbWIQ3eOLP7faqZgSu/TwFm4TYc9d4BQhyOqM=
Subject key identifier: D4:20:C6:28:BC:BC:1B:0A:61:A6:77:AD:9D:15:E0:DF:2C:87:A2:13
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 019510C73F45B9A83D71F392DD8E95DA4A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
Manifest number: 0C76
Signing time: Sun 16 Feb 2025 22:00:48 +0000
Manifest this update: Sun 16 Feb 2025 22:00:48 +0000
Manifest next update: Mon 17 Feb 2025 22:00:48 +0000
Files and hashes: 1: 2MGLWtOiXxGKg7sv-755XWZDZjw.crl (hash: SJX5NjJ27jZf4HgPFTCopjlfIN1kW9JxFjeMadpvh1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:3f:45:b9:a8:3d:71:f3:92:dd:8e:95:da:4a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Feb 16 22:00:48 2025 GMT
Not After : Feb 17 22:00:48 2025 GMT
Subject: CN=d420c628bcbc1b0a61a677ad9d15e0df2c87a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:8c:0f:7c:00:97:3a:5d:d5:b8:98:ab:f4:
9f:cd:89:a9:80:9b:7a:39:97:4e:7a:05:4e:5f:b6:
d2:04:89:f7:f8:27:5f:48:62:7c:56:27:a4:97:89:
1b:cb:56:d3:ca:35:a2:e7:d8:6b:8d:73:27:5f:fe:
7f:aa:00:06:df:fd:dd:50:ea:62:fd:ba:87:dd:5b:
f9:e4:4b:d9:c6:6a:0a:cb:fb:9d:22:dd:d3:27:07:
97:74:1f:26:6f:50:62:b2:3a:2f:be:db:59:f1:86:
14:4f:db:c7:2f:23:19:3b:f9:34:9f:bb:9a:2f:bf:
33:71:fc:45:fc:b9:73:ff:b5:ae:c9:f4:78:b7:81:
bd:8c:b5:c8:f6:1c:5d:f7:4b:26:db:29:ef:d5:bd:
2f:2a:47:db:a3:00:aa:b8:89:7c:06:8d:2d:ed:3c:
a7:8d:27:b6:a4:dc:fd:c4:3b:3d:a2:b0:25:6d:4c:
e6:a0:5b:e8:a4:ce:65:96:68:1e:e2:e4:16:18:50:
f6:ce:c9:90:e7:e5:2d:b4:63:48:7a:76:56:e0:5e:
cf:13:f3:7c:87:7f:c3:39:e0:52:c3:7d:a4:4c:05:
13:d7:cc:59:a6:da:ec:cd:db:e7:e4:83:de:31:83:
40:eb:bf:62:34:4e:f5:8e:67:f0:9c:dc:37:3e:60:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:C6:28:BC:BC:1B:0A:61:A6:77:AD:9D:15:E0:DF:2C:87:A2:13
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:73:1b:bd:52:3f:f7:1f:6e:3c:0f:5a:e9:87:9b:2e:d8:
03:b1:ee:0c:ec:15:a3:21:41:fb:cf:95:35:37:e1:4b:14:ac:
02:c1:5e:4e:f0:b8:25:31:9a:46:4c:18:5e:1d:50:fe:42:76:
69:e8:33:f7:b2:f6:43:86:a1:10:cb:b2:f5:d2:3e:5d:59:19:
95:6d:3e:62:aa:34:17:08:c9:c9:65:5c:4f:d4:cd:5e:66:24:
19:7b:d3:9b:46:a0:98:af:33:0f:70:86:7d:ac:31:c0:23:76:
8e:ce:41:0a:84:72:33:f6:27:50:9b:3d:2b:69:1a:c7:7a:e7:
ed:01:13:61:88:72:69:1b:c8:08:97:fe:1b:d4:1e:52:03:d7:
3a:14:b7:00:09:ea:60:f1:db:42:45:1b:51:ac:c4:d1:56:4e:
72:5b:b9:eb:58:78:8e:77:d3:26:ac:a7:8a:f8:35:14:96:93:
43:c2:c5:43:5e:27:64:fd:31:d1:df:ad:b9:b2:03:27:a6:fa:
58:e6:d7:03:9c:1d:39:80:4c:c7:66:c8:19:3f:e8:74:aa:34:
70:58:41:b9:31:a4:0f:f3:b6:94:8d:f0:b6:8c:e3:9b:d0:0c:
f4:de:5b:10:6f:a7:f4:6a:a0:7c:12:b6:f2:0b:54:34:28:51:
46:41:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:44 2025 by rpki-client