Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
File: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft (raw, json)
Hash identifier: dAt0dktTxRgFpNmVHSazhZl8tQzFjM3toYdqfMvcz4U=
Subject key identifier: C8:84:F5:40:30:D3:E5:17:BF:09:98:1E:90:CA:5E:C5:21:F9:E4:7A
Authority key identifier: DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
Certificate issuer: /CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Certificate serial: 01951090080DE1F8A4063492EB1032177E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
Manifest number: 0210
Signing time: Sun 16 Feb 2025 21:00:29 +0000
Manifest this update: Sun 16 Feb 2025 21:00:29 +0000
Manifest next update: Mon 17 Feb 2025 21:00:29 +0000
Files and hashes: 1: 2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl (hash: dXuTPI45a2FCS56Y2BczSiQMMjYIORl2o86RLRQrJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:08:0d:e1:f8:a4:06:34:92:eb:10:32:17:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da725c3a9c5cd8666f86b07a808f132e0911199e
Validity
Not Before: Feb 16 21:00:29 2025 GMT
Not After : Feb 17 21:00:29 2025 GMT
Subject: CN=c884f54030d3e517bf09981e90ca5ec521f9e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:28:f7:20:81:11:e6:82:79:ff:52:3a:4d:dd:
45:c9:84:d9:92:fa:f6:47:b5:b2:ba:9e:40:c4:86:
d7:71:e5:73:0f:d1:af:db:03:4c:81:54:8a:55:44:
82:9d:96:66:50:d4:96:e3:73:2c:d1:f1:9e:a9:12:
9a:be:57:58:2c:ae:e6:68:04:f9:da:14:bf:d5:78:
d7:63:3b:25:f4:80:74:24:c0:4e:99:ff:82:c0:41:
23:dd:dc:f8:41:30:83:b7:e5:8b:d0:07:1e:e9:84:
9e:3e:ef:db:4f:bd:14:9b:94:d9:4e:2c:23:ea:ad:
f1:76:ef:ec:da:72:33:65:d3:c4:cd:57:b5:7a:69:
7a:95:ff:f9:24:fb:44:40:c3:fa:0c:2e:5e:b1:0a:
45:dc:93:26:93:51:45:43:e4:78:3a:75:e1:56:df:
60:52:93:ec:4a:40:5f:ab:77:e2:92:c8:d8:5a:19:
92:6d:d4:c6:f3:d9:90:61:29:ee:ac:56:81:48:47:
30:90:ff:2a:ec:b5:29:ff:2b:c7:9f:4f:3d:21:25:
f7:10:84:3a:46:8c:7b:82:4a:bb:1a:7d:81:dd:74:
77:98:a3:0e:41:0f:b2:5f:6d:c5:8b:81:8b:8c:24:
ab:6c:cc:83:3e:eb:4e:f3:60:8a:6c:bf:a2:ab:de:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:84:F5:40:30:D3:E5:17:BF:09:98:1E:90:CA:5E:C5:21:F9:E4:7A
X509v3 Authority Key Identifier:
keyid:DA:72:5C:3A:9C:5C:D8:66:6F:86:B0:7A:80:8F:13:2E:09:11:19:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6b8d9-6992-4841-a1a5-3fd180341cbb/1/2nJcOpxc2GZvhrB6gI8TLgkRGZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ea:f6:30:5b:89:c1:8a:7d:2b:18:22:34:15:c8:9d:bd:1d:
99:16:1e:f9:94:f1:0b:85:97:5a:3b:31:2a:f2:39:35:f6:7b:
70:d1:63:b6:4a:dd:40:ab:5f:54:64:6b:41:d9:93:e1:16:88:
e9:11:6e:56:b2:b3:d6:97:0a:d0:fa:48:70:8f:d5:2e:25:50:
8d:d3:b6:e7:94:ac:34:dd:bd:16:d1:bc:28:97:c5:a0:10:55:
d9:13:4c:71:a1:0e:67:ea:b8:b5:ce:49:21:3b:48:1b:91:02:
e2:2e:42:fd:9d:a9:24:3e:22:00:7d:88:9e:83:2f:29:88:ef:
fd:c9:4d:9a:71:bf:72:cc:b5:ba:72:76:5c:52:3b:29:dd:e6:
d5:e5:52:27:f9:45:25:ff:f8:50:45:d1:ba:a7:27:a6:2b:da:
20:07:d4:a4:f6:8b:1d:e1:9a:e2:2d:4e:35:a0:7c:a8:38:47:
8e:17:f6:a9:ec:a8:67:67:75:46:c1:9d:c5:17:71:7b:54:a2:
8e:00:4b:43:c6:54:74:43:eb:02:47:c6:d4:66:86:a4:0e:bc:
71:71:ab:50:95:97:d9:e4:a6:f5:f8:08:00:2e:38:57:01:2f:
91:a9:f7:a3:7e:90:72:fb:d1:95:8a:2d:65:09:f5:b4:5e:42:
93:0e:68:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:26 2025 by rpki-client