Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: Jcvi10Wc9u5wMTq39tj7qql7RpjzUx/pWjxMUUkW+mY=
Subject key identifier: C9:70:92:DB:50:5D:62:A7:62:44:E7:D4:F1:71:05:B7:6C:2A:80:5F
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 0195127E85388CD94D6FD91A5088E0DE0AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 13E4
Signing time: Mon 17 Feb 2025 06:00:36 +0000
Manifest this update: Mon 17 Feb 2025 06:00:36 +0000
Manifest next update: Tue 18 Feb 2025 06:00:36 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: WcgDjORQJr2OhWfIl6hLsWbAk8G4ogno5zZtXyp0LMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:85:38:8c:d9:4d:6f:d9:1a:50:88:e0:de:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Feb 17 06:00:36 2025 GMT
Not After : Feb 18 06:00:36 2025 GMT
Subject: CN=c97092db505d62a76244e7d4f17105b76c2a805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:a9:4c:c2:fa:17:83:f2:74:41:38:a3:6c:
79:4d:6b:ea:0c:e5:2b:26:46:02:ee:3f:b2:fe:21:
6e:07:30:71:a1:eb:9c:2b:dc:eb:09:56:28:64:01:
0d:11:c4:dd:15:83:34:bd:53:8c:2e:0e:10:bf:e9:
3e:b7:fe:d4:30:a2:62:9a:83:8e:4a:b0:b0:6b:e5:
11:3d:0d:96:c4:cd:a1:c8:52:a1:82:64:52:b6:1b:
aa:1c:c1:7f:33:97:c1:4c:df:1f:cb:ce:38:1c:1f:
d6:7d:bb:96:a8:c9:7d:94:02:ec:7d:1a:53:c0:a7:
aa:58:42:bc:ad:3d:a5:44:39:86:51:b0:df:90:2b:
29:26:e8:ce:1b:d6:af:2c:18:05:de:31:ec:50:c9:
b0:6b:34:82:d0:a5:a1:46:26:c6:e1:08:fb:00:b0:
de:2c:02:56:dd:88:89:f4:36:6d:c8:ed:cf:01:d8:
62:85:60:71:3a:d2:e3:37:44:88:72:4e:4c:b8:d4:
e9:c9:24:87:af:67:82:dd:2d:59:02:b6:cc:28:49:
bc:25:e4:70:41:ff:a8:5e:58:57:ad:e0:24:20:ee:
2a:b7:16:1b:88:90:c3:49:18:19:9b:2d:56:2c:bb:
1b:03:12:9c:4e:e5:a5:c9:c9:f3:38:85:0e:8d:cd:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:92:DB:50:5D:62:A7:62:44:E7:D4:F1:71:05:B7:6C:2A:80:5F
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6d:10:17:0c:ea:f2:90:9a:fa:23:9d:ba:75:1f:38:1a:e1:
dd:e7:5e:9d:4b:e7:bd:d1:fb:2b:85:ec:f6:d7:ae:df:a9:42:
a9:3a:fd:56:a8:db:1b:dd:28:4e:df:90:5b:ec:11:6f:f9:68:
f5:15:4e:14:de:b7:2f:55:c6:d1:f5:bd:27:86:e8:0c:62:3b:
a4:cd:a5:b8:bf:50:0c:7d:e1:48:27:7d:2a:a3:7f:02:a6:fd:
7e:24:7b:43:51:88:12:d9:fb:45:2c:a9:8c:09:f6:e5:d7:26:
20:33:c6:7a:cd:c6:12:68:db:d3:be:9c:14:a5:6a:9e:c1:0d:
90:be:26:bb:5c:88:d7:02:6a:b6:48:e4:e5:87:2c:14:ca:4b:
1e:0b:25:72:50:08:27:58:05:09:1f:b8:b0:0b:82:c4:0e:78:
88:2c:29:92:44:76:f1:9f:a6:e1:2b:59:7f:a7:af:11:15:7d:
99:9d:db:a9:67:87:4b:3c:30:6b:12:eb:85:eb:0a:34:12:4c:
94:33:0f:1a:34:c8:60:8e:10:c0:57:94:13:2f:9c:f3:54:40:
b9:30:9a:22:66:34:d0:1f:a0:d7:22:bb:ad:fa:d8:35:dd:4f:
59:74:90:29:d1:c7:dd:5b:ea:8f:24:d6:73:75:80:b8:67:ae:
2a:69:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:32 2025 by rpki-client