Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
File: 2q4t5U2ijHPxmz4E75V06ZBX8aI.mft (raw, json)
Hash identifier: HBUMrNTDrZja+UL8UIf0dywMB8gxugIHJC4VdTKqpOk=
Subject key identifier: 06:5F:B0:00:D5:E6:5C:1C:40:E7:E4:EE:6D:BE:9A:D0:AF:E3:36:F5
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 0194C3F614B1FE25C68A0201C219D2BCDC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
Manifest number: 89
Signing time: Sun 02 Feb 2025 00:01:11 +0000
Manifest this update: Sun 02 Feb 2025 00:01:11 +0000
Manifest next update: Mon 03 Feb 2025 00:01:11 +0000
Files and hashes: 1: 2q4t5U2ijHPxmz4E75V06ZBX8aI.crl (hash: J+oX3Fsap3XZdls/9dHxVnXMsTw5FiShm0wxthHWTN0=)
2: do4MLi2XOROC_5hp-i0wtkMXxiI.roa (hash: XtNQLEaSVJ/naERfmHPmWmnX71JF7xa9zoeT8jSVaYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:14:b1:fe:25:c6:8a:02:01:c2:19:d2:bc:dc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Feb 2 00:01:11 2025 GMT
Not After : Feb 3 00:01:11 2025 GMT
Subject: CN=065fb000d5e65c1c40e7e4ee6dbe9ad0afe336f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:6a:dc:a2:79:d0:a6:51:1c:c3:7c:9b:af:
91:0b:6a:5f:f8:0b:dd:31:b4:e5:c1:aa:03:34:9f:
82:da:13:8d:3f:6e:1c:51:86:5e:e4:af:21:1d:c4:
5c:14:31:e1:40:f9:7b:02:b1:83:fd:82:a0:98:79:
83:36:6b:3c:25:05:20:28:b4:62:0d:0d:bd:70:fd:
f8:c2:f2:dc:c5:01:14:5e:f6:7d:8d:9b:b3:c8:a1:
8d:9f:39:ca:a2:b0:42:5b:3d:6f:59:e6:2d:d8:57:
e8:4f:6d:9e:2d:9b:aa:8a:65:b5:35:c0:e4:79:59:
24:36:d6:21:15:40:c3:60:80:63:be:59:88:b0:aa:
b0:23:15:83:9d:c1:e5:ca:19:49:d0:67:2d:5c:65:
53:cb:fb:79:9b:c7:11:a5:7d:37:68:ba:ec:94:ca:
71:5e:dc:c9:51:9e:ba:88:f4:72:32:d9:03:98:8a:
fe:82:30:5e:e3:68:89:0c:44:e0:dc:20:ec:76:c2:
70:92:59:80:89:82:a3:6b:35:1e:9e:5f:be:a0:65:
8e:a8:b0:b5:e8:09:b4:f6:f6:52:ea:e4:c5:0f:cb:
43:e2:5e:e0:3b:47:ae:0f:50:36:42:09:94:d6:e9:
93:f8:88:7a:ea:93:37:ce:50:71:bb:98:92:21:2f:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:B0:00:D5:E6:5C:1C:40:E7:E4:EE:6D:BE:9A:D0:AF:E3:36:F5
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a6:3f:20:9d:c5:5c:52:ea:fa:ff:dd:53:dd:35:93:c9:0f:
a8:4f:c9:64:1b:7b:64:26:b0:35:67:f1:a7:f6:6e:59:9b:d4:
7b:90:9d:31:a5:49:89:20:06:91:d9:ee:bb:6e:35:2c:3c:d5:
0a:ae:e1:ba:fa:93:7c:77:87:2a:59:86:45:72:46:0a:a8:4e:
1a:63:1f:85:6d:cd:c4:fc:e0:fa:c0:3d:28:47:af:85:ee:c2:
32:cd:10:39:00:6d:d5:3b:12:24:77:36:50:fe:a6:99:6c:e2:
10:e2:f5:20:5e:e1:10:52:80:79:22:4b:33:2f:12:18:dd:91:
35:5b:2f:6a:94:93:f0:3d:be:8d:1b:a3:a4:0a:50:8d:28:ca:
a0:e0:89:da:5b:6d:2b:9c:1b:a6:db:5c:ce:f9:5c:fb:ea:86:
31:b0:9c:f5:c3:d5:b4:7c:9d:48:72:d2:a0:db:34:0b:de:9d:
f1:fc:f0:18:5d:c2:05:69:44:74:1e:3e:66:24:07:14:7b:40:
19:19:53:78:ef:87:00:a1:0f:b6:14:6b:66:42:f6:cb:58:f3:
ac:27:db:f9:79:fc:ab:37:23:86:11:81:be:00:4f:57:31:b7:
68:b5:8c:6c:b2:b8:40:13:6e:c5:db:eb:7a:0e:ae:b2:9f:95:
99:12:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:13 2025 by rpki-client