Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: EcrXtz6N6B8YbrKBV6Nhf68irwyoHCiKdY9mreombWk=
Subject key identifier: 5D:D6:0D:1C:99:09:2E:77:90:5A:2E:36:AA:64:AE:58:51:AD:F8:5D
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 0195116BB4218E84E392FDD7D3723F4ED7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 01:00:25 +0000
Manifest this update: Mon 17 Feb 2025 01:00:25 +0000
Manifest next update: Tue 18 Feb 2025 01:00:25 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: vEHo+3lqUsn6lLOvk56TaWB2j20HhWvp4GunHFHNrvg=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:b4:21:8e:84:e3:92:fd:d7:d3:72:3f:4e:d7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Feb 17 01:00:25 2025 GMT
Not After : Feb 18 01:00:25 2025 GMT
Subject: CN=5dd60d1c99092e77905a2e36aa64ae5851adf85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d2:45:9a:e0:35:8c:90:7a:8a:68:37:46:32:
19:86:40:e3:e4:33:74:14:56:33:dc:7a:15:f4:e1:
1b:41:36:b8:23:ad:a3:46:89:7b:88:85:5e:e6:ef:
e7:8f:cb:2c:ff:e8:ab:36:d0:0f:99:41:dc:1c:b2:
b5:b8:63:c9:05:ad:7c:47:90:09:5b:fe:5a:0a:a7:
b8:e6:b2:37:82:5f:29:36:6d:cc:ea:fe:41:5e:5c:
db:60:5f:f0:5c:63:53:ee:c5:18:7a:48:c3:27:d1:
82:f4:f8:9b:a4:de:12:06:aa:13:bd:c9:d5:2a:0d:
1b:bf:8d:3b:73:f1:c0:8f:35:35:e8:1a:98:4b:61:
1e:2d:15:17:69:bd:b8:b2:9e:01:dd:fc:00:33:fd:
84:73:ca:41:71:7f:b8:e5:a1:10:c3:e3:ad:d6:d9:
43:e9:36:e1:20:1a:f1:32:fc:4a:a2:90:dd:a5:1e:
b1:2e:31:4f:d2:f8:cb:a7:31:38:58:8a:89:4a:52:
d1:8f:4b:b9:fb:c0:39:ea:e4:8c:3f:ca:a3:21:77:
94:14:c0:c9:02:fb:0e:a2:11:b4:67:1f:96:ed:bd:
f3:79:4c:0a:ea:b2:24:46:a9:2f:74:d5:5f:52:ab:
bb:a3:fe:07:2d:69:d8:14:b2:2c:e9:db:cd:db:08:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:0D:1C:99:09:2E:77:90:5A:2E:36:AA:64:AE:58:51:AD:F8:5D
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:12:88:10:ee:22:99:8c:98:63:37:dc:0e:5d:6c:d0:43:
50:35:90:61:9e:ba:f9:3b:e0:f1:07:67:fc:e4:9f:0a:23:55:
af:43:3a:8f:d2:7d:bb:e2:1c:b9:f0:c8:12:ca:1f:fe:9e:8a:
a2:51:6d:34:f0:84:75:bd:c9:b3:5f:d3:0f:37:1e:c5:9d:f9:
aa:b3:69:36:bc:71:ea:21:6e:38:fa:23:91:de:8f:5e:26:42:
b4:78:4a:f6:ae:ec:3e:c5:06:d9:61:e8:af:74:82:27:3b:bb:
4b:1b:e9:9e:e1:cb:1b:f8:e5:1a:43:74:be:2f:73:be:7b:2e:
84:75:01:3d:33:cc:97:f6:e5:d0:92:d2:05:6e:16:84:f7:59:
ea:ed:48:32:8c:bf:e1:70:6e:0e:c4:6b:f1:56:eb:4f:45:a1:
a9:46:3b:24:32:06:b5:57:a5:a2:1e:7c:e7:ba:67:2e:85:4a:
2f:72:b6:0a:b3:6f:cd:53:56:50:4d:32:73:81:94:eb:19:b8:
6b:36:2c:76:68:a1:73:d5:5d:01:b9:70:76:41:67:94:df:29:
45:61:cc:f0:7f:16:c9:2f:9d:6e:f4:c1:51:99:1a:5c:94:63:
4c:1b:7a:c2:45:9d:db:04:8c:46:ec:8f:cd:f1:82:4c:13:22:
cd:d0:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:58 2025 by rpki-client