Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: jrLGEgXClMhWoNYyTwBHBJgx/o5bJndTq+5nBjwSPxg=
Subject key identifier: B5:83:1E:B3:F8:42:13:2F:F9:31:C2:0C:86:FC:E9:F3:46:01:B1:3D
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 0195113504F562B9464D847F12B72CA73E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 13E6
Signing time: Mon 17 Feb 2025 00:00:42 +0000
Manifest this update: Mon 17 Feb 2025 00:00:42 +0000
Manifest next update: Tue 18 Feb 2025 00:00:42 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: roAf76k7XFDfYQcrhH8sp6nDJYCFMIIimtJmiy3FMIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:04:f5:62:b9:46:4d:84:7f:12:b7:2c:a7:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Feb 17 00:00:42 2025 GMT
Not After : Feb 18 00:00:42 2025 GMT
Subject: CN=b5831eb3f842132ff931c20c86fce9f34601b13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:02:60:39:b6:42:a6:8b:a4:d6:a6:d8:46:
ea:79:e8:7e:cb:ab:af:3e:64:31:6e:10:21:d8:bd:
a7:2e:d3:f4:a6:7c:39:40:3b:ab:08:85:1b:11:6a:
ce:5c:71:ce:cd:9d:a7:b8:84:4d:7a:3e:0c:97:25:
8b:aa:b3:03:38:5f:d6:c4:08:2b:77:8a:50:c1:84:
05:a2:74:dd:2a:f2:3b:5d:c8:45:56:e1:e3:92:ab:
39:11:3c:8c:e1:fc:51:b0:56:7c:8d:9b:0e:b0:e9:
84:6b:af:af:7a:32:94:b6:69:8a:0c:a1:4c:f8:85:
f4:4c:75:39:7f:0a:e3:2b:7f:4f:db:d9:f6:b3:05:
fe:99:e5:f7:aa:d6:e4:39:52:52:3d:ce:40:a4:e2:
c2:a0:f3:6e:17:21:c5:0c:3b:16:00:c0:a1:c5:4d:
d7:0b:0d:bd:f6:58:2a:fa:f9:be:d4:35:39:d5:0b:
0f:49:ec:ce:a8:67:8f:3a:72:cb:7c:15:fb:97:8d:
53:b5:1a:a7:af:83:d5:cd:a7:3f:7c:14:53:a3:4a:
1e:16:d3:9b:aa:08:19:e1:95:51:ab:34:00:6a:11:
3f:5a:ae:dd:60:51:b5:5d:eb:a7:86:9c:49:72:e2:
0b:68:b3:46:66:6c:c8:41:4d:6e:79:ef:31:f8:f1:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:1E:B3:F8:42:13:2F:F9:31:C2:0C:86:FC:E9:F3:46:01:B1:3D
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:c1:88:f6:e7:9e:2f:26:b7:0f:5b:63:eb:c8:b5:ea:4a:
8c:29:3c:0b:6b:3c:a3:c4:48:bf:e5:1c:a7:f7:87:15:28:f1:
b2:36:18:ba:97:1a:5f:9e:5c:dc:42:25:6b:84:f5:95:66:b7:
9e:e1:2a:d1:df:f2:e5:ef:9f:65:ba:aa:3a:b0:67:e8:70:59:
69:e8:aa:0a:59:0b:d4:27:f1:d4:b1:86:59:cc:31:be:6f:cf:
0c:6c:1d:ea:02:55:e7:cc:65:f6:c1:bc:9b:cf:0c:07:17:83:
31:65:51:9d:e3:2f:4e:b7:b2:8e:b7:5e:1a:e8:8c:72:99:2a:
3b:83:dd:3c:83:30:86:34:20:30:35:77:8c:65:78:6e:c0:67:
7a:64:d2:4d:49:2e:1c:ab:40:25:93:90:73:2a:65:4e:df:3f:
4c:49:92:39:7c:04:ad:d4:5c:63:c7:3b:e6:aa:59:bc:9f:55:
0f:21:eb:3c:2f:62:9b:cd:bb:bd:d0:d9:ab:b4:3b:21:55:b0:
fe:ae:a3:ae:3f:13:37:fb:33:34:d2:a7:8a:3b:85:37:97:ca:
72:ff:d6:bd:a8:42:c7:f6:da:5f:80:b5:c6:a7:dd:27:b6:49:
78:73:aa:27:d4:62:24:dd:67:6b:11:8c:65:22:b1:6c:d4:5b:
84:6b:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:50 2025 by rpki-client