Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: S0kb1d3sVao16AFETchvWb34Dvl9aGd/LDjO8+VzUII=
Subject key identifier: 1F:B0:D3:2D:70:B7:3C:96:86:C4:9E:CD:EB:29:2F:EB:97:FD:9D:B6
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019511A2F8FEDB444A89C979A34CCD4E5BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 13E5
Signing time: Mon 17 Feb 2025 02:00:47 +0000
Manifest this update: Mon 17 Feb 2025 02:00:47 +0000
Manifest next update: Tue 18 Feb 2025 02:00:47 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: eJDYH6ByUIs2fyNQSc2HokiKlnk/CeH5GmXYtySlA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f8:fe:db:44:4a:89:c9:79:a3:4c:cd:4e:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Feb 17 02:00:47 2025 GMT
Not After : Feb 18 02:00:47 2025 GMT
Subject: CN=1fb0d32d70b73c9686c49ecdeb292feb97fd9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:54:56:95:ba:b8:17:50:ce:8f:6c:19:04:
02:9d:19:ff:7f:bb:86:8c:02:fd:b4:df:cc:6e:eb:
94:d3:f8:ad:5b:30:50:60:e1:fd:0f:3b:28:85:1f:
f9:52:03:3b:c1:5f:c5:f8:2f:72:9f:4e:66:3c:56:
21:95:97:9a:e5:86:69:9c:59:9f:53:19:d7:51:61:
44:6e:2c:c5:3b:8d:8c:88:c0:f5:02:0a:75:4c:1b:
36:6a:f2:3b:26:80:46:c3:97:d3:2e:dc:bf:61:f1:
89:8d:96:64:c8:92:fc:f0:0d:79:22:b0:f9:8a:94:
e9:0e:28:31:c7:8d:88:3d:54:b4:b4:f8:0e:01:87:
d8:d0:0c:c3:ce:db:69:7b:2e:88:69:68:82:bf:92:
3b:9b:31:58:7d:d0:55:61:92:bf:16:92:09:3e:10:
47:43:fb:d0:9e:54:bb:18:fa:bf:75:cb:ed:d5:78:
67:54:38:9a:80:06:56:da:05:af:e9:71:8e:b2:d2:
7a:7d:47:68:cb:90:d3:f0:94:94:41:47:e4:a9:10:
dd:8a:cc:b8:c2:3b:43:64:94:8f:13:80:c0:74:fd:
6f:15:91:fc:1e:9c:78:af:f3:42:b7:3c:a4:ca:6a:
94:9b:d1:a1:4e:0a:e6:2f:5f:56:cb:be:ea:91:11:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:D3:2D:70:B7:3C:96:86:C4:9E:CD:EB:29:2F:EB:97:FD:9D:B6
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:7b:75:01:bc:a0:dd:8d:30:e8:66:fe:0c:2c:ae:28:e2:
33:8d:04:8f:0a:f4:f6:a8:7f:96:da:dc:17:f6:43:06:6b:49:
2a:fa:c1:e8:71:4e:0e:70:22:f5:52:55:2b:f8:22:4a:4e:33:
2e:a9:d6:74:a0:02:38:9a:93:79:12:89:21:51:3c:6c:f6:f0:
cb:a8:a6:2b:61:01:a4:d6:8a:10:7c:37:6a:f0:32:51:68:a4:
8b:4d:9a:c4:6d:a2:0d:24:ab:35:03:f5:6d:34:b6:37:84:0a:
00:81:06:b1:cf:ff:65:78:cc:da:a0:e6:43:06:82:3e:37:60:
af:e6:60:d7:87:b9:eb:12:8a:e2:f0:1c:d9:50:d1:44:e8:68:
04:83:a2:da:d7:7a:1b:9a:9c:e8:e2:1d:38:6d:60:be:9f:51:
dc:72:29:57:da:ae:75:af:f2:d4:d0:7a:3b:d3:c8:16:e6:95:
e5:bf:0c:8f:d9:a2:c3:71:0e:42:99:fa:07:67:e2:e4:94:28:
3d:64:05:1f:9d:7f:51:b1:04:b8:84:73:4c:06:ba:6d:ac:d6:
bf:50:b7:7c:b3:e9:67:52:f0:8a:2e:a5:b7:09:87:99:0a:53:
71:6c:3c:b0:a1:5b:29:90:a2:ff:29:9e:c7:d0:9c:ef:5d:c5:
45:2b:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:02 2025 by rpki-client