Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
File: 2k9XRqbcdAthuY74LcbDPdsjjtg.mft (raw, json)
Hash identifier: 21w4Tlzn8cuK7ipcAFrSEvFSf76eTAZor0fsoCo5GZA=
Subject key identifier: 8B:08:82:E0:E1:F6:53:11:EA:90:31:51:FD:5D:79:A5:23:92:6D:3C
Authority key identifier: DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
Certificate issuer: /CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Certificate serial: 019510C8246190DF6A1073122852DF1893EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
Manifest number: 0416
Signing time: Sun 16 Feb 2025 22:01:46 +0000
Manifest this update: Sun 16 Feb 2025 22:01:46 +0000
Manifest next update: Mon 17 Feb 2025 22:01:46 +0000
Files and hashes: 1: 2k9XRqbcdAthuY74LcbDPdsjjtg.crl (hash: 2PsTFj9qBG8BgMM+PRwetbFEIP4SohqURn2M7AlMHks=)
2: dxg__1hqTnA8TMbpWBwZfn6ppbM.roa (hash: kDw35iVGkJPphXSekvAqYPL9igKO28xDC7qPxSMDVQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c8:24:61:90:df:6a:10:73:12:28:52:df:18:93:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4f5746a6dc740b61b98ef82dc6c33ddb238ed8
Validity
Not Before: Feb 16 22:01:46 2025 GMT
Not After : Feb 17 22:01:46 2025 GMT
Subject: CN=8b0882e0e1f65311ea903151fd5d79a523926d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:79:da:6d:b7:94:07:28:b1:c6:02:2d:91:
4b:89:90:0d:29:0e:6b:a3:00:42:29:af:95:81:5f:
4c:51:cc:da:ac:2e:8f:f3:31:3d:5f:a0:c9:42:67:
d2:10:bf:ab:bd:f5:04:45:dd:f6:e2:02:2a:f3:1a:
f9:2f:e8:8e:02:14:ae:c2:6a:bb:81:22:51:89:b5:
6a:b9:18:28:18:d4:59:1f:d9:8c:d5:b4:22:8a:ac:
a7:ee:b1:34:20:ae:d6:41:6c:ea:1c:77:26:ef:ab:
f4:27:ba:b7:a3:f2:61:c2:7b:41:d3:8d:4a:f9:d0:
1f:44:fc:e7:f9:54:30:49:cd:5c:fe:3e:0d:f6:ae:
e7:7f:bf:ad:ea:04:5d:fa:7c:5b:d5:35:4f:fc:70:
1e:3c:b7:37:3e:14:a4:ad:6c:49:3d:ab:a7:05:15:
a2:17:2c:6b:bd:46:ac:bc:f8:0e:44:f7:4f:9e:78:
d8:96:31:bf:dd:87:76:a3:e1:5d:aa:5d:55:36:b3:
ec:0f:df:43:54:10:ce:79:a7:ab:23:c2:b3:78:31:
c1:10:27:2d:d5:e8:67:23:2e:cb:48:4f:b7:cc:ae:
ba:ad:25:e5:25:7a:1f:aa:9c:33:d3:c6:4f:ff:55:
54:13:18:d6:58:86:31:41:08:ae:e6:e2:9c:3b:1c:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:82:E0:E1:F6:53:11:EA:90:31:51:FD:5D:79:A5:23:92:6D:3C
X509v3 Authority Key Identifier:
keyid:DA:4F:57:46:A6:DC:74:0B:61:B9:8E:F8:2D:C6:C3:3D:DB:23:8E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2k9XRqbcdAthuY74LcbDPdsjjtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b67d6c-9b92-4994-8472-bd971e9c5199/1/2k9XRqbcdAthuY74LcbDPdsjjtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e4:ed:1f:83:c9:70:0b:6a:2e:47:c2:c3:7b:60:36:71:e0:
ef:17:43:3d:97:f8:8f:a9:00:ee:a0:69:71:c2:2b:0b:b5:78:
76:fd:4b:69:fe:27:e1:01:8c:57:37:b7:e2:96:f1:02:63:e7:
06:fc:e9:8c:7b:ca:a6:c0:31:2b:79:cc:12:5d:be:66:f3:18:
42:70:14:eb:47:19:79:f8:e3:44:ee:a0:91:00:23:ae:44:2a:
fa:86:c4:ba:e1:f7:ed:e4:14:8b:f1:c9:de:c2:87:f1:fa:8a:
81:23:92:ea:58:f7:60:6e:2f:7b:05:7b:b9:8a:a9:e1:c4:47:
20:dc:72:c4:37:0e:a2:72:52:a5:b3:bb:0a:72:98:68:a9:3d:
b8:15:f9:17:05:50:6b:4a:e7:02:82:e7:dc:63:3c:9d:77:cb:
8c:7f:8e:c3:ba:f8:1c:7f:32:67:2e:64:b1:39:19:78:d7:76:
c1:e2:ce:b9:d4:16:b5:00:a6:f9:87:c5:9c:5b:0e:68:c5:0e:
74:c2:92:23:70:13:d9:66:6c:5c:90:72:6c:fc:e1:f1:c5:5e:
74:f4:e3:da:89:06:f3:29:a8:3d:33:22:c1:6c:a0:0b:0b:64:
10:3d:b5:44:c7:8e:df:02:70:d4:38:f6:16:9b:7a:cf:67:6b:
38:fa:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:10 2025 by rpki-client