Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: a1YKKN2J7Zn66C+y52OMllKXhRNpI9oE440ust6KmSg=
Subject key identifier: 86:1C:D2:CA:29:7E:90:77:53:EA:D2:E1:6D:C4:8F:55:9E:98:40:D6
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 019510C70F3CCBC676FA0EA3E02E8CD14A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 1244
Signing time: Sun 16 Feb 2025 22:00:35 +0000
Manifest this update: Sun 16 Feb 2025 22:00:35 +0000
Manifest next update: Mon 17 Feb 2025 22:00:35 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: ATHGkxqUztaBVe0uxhDqZygajeEZ5amqDnNzHY/xWXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:0f:3c:cb:c6:76:fa:0e:a3:e0:2e:8c:d1:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: Feb 16 22:00:35 2025 GMT
Not After : Feb 17 22:00:35 2025 GMT
Subject: CN=861cd2ca297e907753ead2e16dc48f559e9840d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:2b:13:44:ff:f6:ac:06:e4:b8:b1:f9:1f:
d5:b2:6d:c8:db:f4:ad:c4:70:42:a6:43:c3:9d:f2:
ab:1d:8f:53:45:f8:65:69:2e:2d:90:4a:83:f9:f7:
58:85:28:6f:da:a7:91:05:4c:6b:82:26:25:ad:c0:
df:d5:cc:4c:e8:52:c3:8e:0e:bf:9e:cf:3c:a4:87:
91:7b:d4:f4:5d:c0:a3:61:7f:bd:43:4c:69:26:13:
a8:32:1f:4a:8f:bd:0f:4d:7f:9d:ab:e4:46:ad:39:
56:c8:74:9f:54:5f:4b:92:1e:5b:78:3e:51:81:5a:
9d:e4:e2:06:01:76:fe:1d:a4:90:b4:0e:19:36:dd:
85:f8:62:f1:86:b0:9d:60:00:b1:5f:7c:1e:0d:8e:
ed:f7:96:32:38:5b:af:16:62:f7:63:c1:06:54:02:
02:86:84:5a:39:f6:f2:6c:03:b3:0b:63:40:1e:63:
d3:63:6f:a8:2c:07:2d:27:59:66:e8:2b:56:e5:a0:
f0:0b:41:2e:4a:ce:e3:11:21:92:e5:c4:0d:4e:6f:
8a:b7:5c:d7:84:35:3c:64:e7:a5:1b:81:8a:1b:2a:
4b:a9:a3:f3:bb:c2:2f:f9:16:c8:2c:d4:70:2b:8a:
a4:66:df:7e:32:dc:3d:b5:62:36:8f:47:a1:d4:0d:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:D2:CA:29:7E:90:77:53:EA:D2:E1:6D:C4:8F:55:9E:98:40:D6
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:76:5e:23:cd:0f:14:2d:8f:04:82:87:71:0e:6a:b4:36:
e8:19:4f:72:95:40:21:e0:2b:d7:9d:94:f1:73:f0:0f:42:c1:
f6:68:24:88:eb:8c:c4:3b:60:d3:bd:10:23:1e:8b:35:8b:e6:
3f:b1:08:16:12:aa:66:ae:9a:34:1a:52:c8:e6:b9:a8:6f:2b:
39:d9:ea:84:a8:43:b1:9c:1f:d9:94:3f:cb:67:df:54:78:c4:
75:08:46:57:9f:51:d9:e8:81:07:5b:38:93:c5:83:a2:43:3f:
35:89:d1:1c:ea:22:56:fe:3f:7d:b8:0b:84:2a:7e:ab:91:f4:
50:2a:58:1f:5c:e4:ce:32:c1:46:54:2b:77:36:d1:76:41:b9:
81:19:51:d6:84:95:bd:6d:57:3e:93:d1:0e:8c:9c:c4:25:d2:
ab:6d:03:db:33:41:5c:c1:87:65:62:a3:3f:0f:08:2f:43:42:
5a:26:8e:a9:ed:ce:20:21:20:89:1e:2e:7d:20:e1:fd:f8:8f:
46:c1:03:04:90:84:7a:49:ba:d9:14:7e:c6:81:dc:2a:91:02:
87:bb:c5:e2:63:c7:4c:f1:55:81:82:49:9c:ea:3a:f4:b2:6c:
18:49:06:33:1a:c4:3c:5e:b3:7a:8f:85:4b:3a:98:a8:58:f1:
c2:22:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:05 2025 by rpki-client