Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: Dwh7oVjFzQh4qmsf6vc14dCMItWslUNzwAfD4o1Zslk=
Subject key identifier: 4E:6C:F2:61:69:0F:6B:FA:4E:B2:70:F7:48:00:29:A2:8C:53:B0:B0
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 019511A299D787670FDB7ED33C4E340CC678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 13E4
Signing time: Mon 17 Feb 2025 02:00:23 +0000
Manifest this update: Mon 17 Feb 2025 02:00:23 +0000
Manifest next update: Tue 18 Feb 2025 02:00:23 +0000
Files and hashes: 1: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: 4MbL3I3+un7O4POcLQPX4Z63/CxWcHcDB5MZmgAqmmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:99:d7:87:67:0f:db:7e:d3:3c:4e:34:0c:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Feb 17 02:00:23 2025 GMT
Not After : Feb 18 02:00:23 2025 GMT
Subject: CN=4e6cf261690f6bfa4eb270f7480029a28c53b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:98:0a:54:11:09:f1:a4:3b:de:9c:06:3b:
9e:17:ea:ee:32:4a:2f:c1:a3:dd:03:66:b8:b2:59:
1f:c9:09:7e:b6:de:23:61:94:d7:cd:7c:16:9d:42:
09:5e:ed:de:56:03:7b:67:c8:27:7d:1f:c8:23:34:
5f:97:70:63:46:29:25:c1:81:03:4b:eb:b7:7d:ba:
cc:dd:ac:e9:4a:60:3a:c2:ad:33:27:f3:53:7b:e6:
dc:ec:2f:dd:85:8e:58:01:ed:85:24:ee:8a:53:e0:
a5:38:94:68:11:79:95:63:02:d9:6e:ac:6f:f7:5f:
34:5c:6c:f0:19:0c:d0:04:59:2d:20:90:9d:bd:52:
66:07:bc:fb:47:b8:35:9e:64:a1:c4:aa:df:94:76:
ed:be:be:d4:50:e6:6e:a9:75:d6:4d:ae:39:9d:23:
62:2a:d0:4f:3a:98:88:f9:49:fb:9c:30:c6:3c:19:
d0:74:cb:0b:a9:9b:c2:ad:63:d8:10:d5:99:97:ff:
3c:da:94:4b:a2:49:e1:22:d9:a5:74:ed:e5:47:2e:
d2:7d:54:77:f5:a9:ac:38:db:8a:fa:d4:ea:13:79:
cc:21:a5:1d:d0:5b:9a:e9:8e:5c:a0:29:8c:7f:19:
e1:c8:22:f7:43:95:ad:7b:1a:c0:9b:2f:b7:2c:b8:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:F2:61:69:0F:6B:FA:4E:B2:70:F7:48:00:29:A2:8C:53:B0:B0
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:67:9a:89:fe:75:ac:c5:22:f3:ae:ce:e3:dc:48:fb:f8:14:
d1:e9:c0:28:60:12:89:e0:a2:1c:4a:5c:7f:21:78:65:a6:62:
8c:5a:89:56:9a:21:f8:a0:9f:49:b9:1d:1a:71:99:4e:4d:9c:
c6:1e:65:6d:cb:1a:6c:d4:25:8f:fd:be:f4:e6:a9:65:77:be:
02:99:e1:31:0b:f1:c2:a2:39:d1:75:30:a7:a8:6e:c7:b5:e5:
bc:e8:21:1f:b5:24:80:0a:e9:98:d5:04:78:2d:06:bc:53:16:
8f:9c:66:d5:78:8e:7c:5c:d6:f9:e2:d4:57:2f:f1:46:ad:a0:
e0:75:d3:f8:b8:13:81:18:d5:23:e6:c4:fc:df:5d:5b:52:3c:
8c:c4:3a:3f:cf:2c:fa:17:e3:ab:e8:af:d8:0e:11:07:96:bd:
c7:50:13:13:e3:22:a2:b2:f6:da:b0:38:d3:bd:0d:f4:2d:b7:
9e:58:58:90:54:8e:9a:89:d9:1f:72:1e:86:41:ba:b2:42:c3:
59:b6:71:cf:4a:85:9b:a3:fb:cc:ec:c3:52:bc:8a:18:96:46:
8b:04:72:dd:54:5c:cb:1b:1a:0f:e3:a0:ab:72:aa:4a:4d:5d:
10:88:a6:a7:57:45:65:68:de:c8:c3:3f:2e:71:ff:72:87:ae:
e6:02:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:59 2025 by rpki-client