Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: ob74qey8aNf7btNjGuVkZb7rcK96D3cvznG1ihegWvo=
Subject key identifier: 8E:60:E7:2D:01:62:EE:5D:13:D6:38:EB:F5:EA:9E:8A:33:EA:EA:5E
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 01951134EB5EF174EE270CD660603AEACC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 0ED7
Signing time: Mon 17 Feb 2025 00:00:35 +0000
Manifest this update: Mon 17 Feb 2025 00:00:35 +0000
Manifest next update: Tue 18 Feb 2025 00:00:35 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: FJMHqWV/3gaFumgBcJtNphbttrhwidomuTslEc5/TwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:eb:5e:f1:74:ee:27:0c:d6:60:60:3a:ea:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Feb 17 00:00:35 2025 GMT
Not After : Feb 18 00:00:35 2025 GMT
Subject: CN=8e60e72d0162ee5d13d638ebf5ea9e8a33eaea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:f6:a1:be:a9:6b:74:d9:16:3b:d3:48:4e:
52:4a:a6:de:23:76:80:51:b7:7f:c2:4c:1c:96:24:
f9:69:de:42:a4:a2:5a:ee:5f:f9:1f:89:62:3e:71:
75:81:c5:fd:11:bd:46:d8:c1:57:4c:41:dc:de:28:
4e:26:32:8a:39:e2:3e:05:7e:d9:4a:ec:8f:c5:b3:
89:3f:93:c0:b4:c9:77:29:3a:05:94:2e:2e:c4:53:
c4:85:96:ef:35:18:d4:3f:07:3b:c3:11:7d:60:67:
a3:33:4e:f7:52:de:56:58:4d:97:a2:a7:86:18:39:
f1:9b:47:34:f9:8f:28:01:b9:f4:f1:04:25:a7:1b:
9c:da:ff:83:d3:cd:db:ba:8b:43:f5:5a:bf:b8:46:
02:08:65:98:d4:87:9c:23:02:41:14:f0:8a:25:0a:
be:a9:6b:59:b2:99:ab:3c:e9:b3:71:79:89:d3:15:
a3:da:5e:05:1c:b7:0a:b4:c8:1a:c8:7e:03:98:ac:
7b:5e:6f:2b:c1:f8:64:93:84:cb:76:23:28:7a:1a:
b1:95:35:a5:41:88:49:93:ee:1d:79:e6:b2:4b:72:
ab:9e:53:74:8a:f9:9d:59:ba:c7:4e:40:be:1c:51:
09:c8:94:5d:32:1d:88:ee:cc:89:d0:d7:e8:58:84:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:E7:2D:01:62:EE:5D:13:D6:38:EB:F5:EA:9E:8A:33:EA:EA:5E
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:34:14:71:26:93:c8:4d:01:6c:6a:c1:70:5a:85:e5:f5:d8:
d7:c2:f4:0d:4c:7a:99:d3:dc:50:59:9d:8d:9b:10:27:20:dc:
77:a3:ce:48:8d:af:a8:90:f1:81:cc:e2:2b:32:18:6a:f9:4f:
63:39:0f:e6:53:44:e0:a3:4a:75:94:20:a5:72:35:a0:44:60:
31:95:e5:0d:f6:62:2d:55:70:01:bd:a2:9e:35:8e:1c:e4:e3:
06:5f:3e:8f:46:8f:c2:62:6a:8e:9a:a0:a8:40:e2:03:7c:31:
84:83:2b:8a:44:7a:e5:2b:44:90:9e:02:33:ef:34:5a:5f:23:
10:22:b5:f7:4a:6f:3f:5a:b6:ed:6e:0f:3b:fa:aa:fc:96:cc:
4d:06:49:39:7c:fe:26:d0:12:60:99:7f:f9:ea:b2:fc:89:7e:
21:60:d0:e8:6b:d9:da:a6:3e:01:14:30:c9:7d:71:99:ce:7b:
27:8e:ca:da:c0:91:74:19:5d:cf:60:3e:ed:34:64:3f:41:e9:
6a:e5:83:c5:5d:91:01:83:a9:9b:92:97:7b:11:19:19:b6:89:
9d:65:0f:9d:e7:65:f2:66:c3:ea:9d:1a:40:9e:17:e8:fd:84:
c6:90:1c:df:46:16:76:23:db:03:f0:9d:05:ec:80:5a:94:1e:
26:9f:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:51 2025 by rpki-client