Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: owq6am22nVF+tEgGOZDWZWcoyi5rvAaxrwBTEwSOREc=
Subject key identifier: D5:EF:78:19:BE:90:E2:32:81:8C:C1:AF:64:14:65:BC:ED:AF:E1:70
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 01951210B4C58EBCE096D91345685C415E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 121A
Signing time: Mon 17 Feb 2025 04:00:39 +0000
Manifest this update: Mon 17 Feb 2025 04:00:39 +0000
Manifest next update: Tue 18 Feb 2025 04:00:39 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: uqEzI+ae6uTl9ZZZqItKhupt+JxKZmMuvZKFmubp8no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b4:c5:8e:bc:e0:96:d9:13:45:68:5c:41:5e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Feb 17 04:00:39 2025 GMT
Not After : Feb 18 04:00:39 2025 GMT
Subject: CN=d5ef7819be90e232818cc1af641465bcedafe170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:60:76:80:d4:be:aa:e4:41:0c:d6:0c:e5:
72:53:d6:6a:69:85:af:9b:fa:6b:ae:c3:19:69:9d:
ab:1b:f4:89:64:a2:00:1f:c0:21:83:e7:87:43:80:
d9:20:36:91:4d:6f:38:0a:f6:b0:60:db:69:58:68:
57:73:56:9e:e2:2b:fa:19:e3:28:b5:66:8e:0f:ae:
c1:91:da:e8:c6:d9:ca:c1:3f:a0:76:16:de:48:68:
8b:b9:31:83:ed:56:dd:93:10:da:3e:42:34:cc:90:
ca:4e:f3:63:99:2a:b6:d7:dd:1a:dd:ed:fa:73:36:
45:61:26:b0:42:f7:71:b4:7d:fe:df:44:e8:fd:aa:
60:72:3b:fd:fe:3a:0d:d4:d0:22:77:6e:57:dd:90:
37:b0:53:79:09:9b:32:91:be:bd:3b:b7:1c:01:33:
2f:17:76:02:90:df:d8:ac:b6:98:a4:c4:f2:e9:42:
fe:cd:1f:45:ec:a6:87:40:b7:18:11:81:4e:9f:cc:
53:ce:d6:a4:10:15:9f:ac:3c:06:9d:82:d0:de:ce:
5f:7c:99:57:70:38:f1:be:5a:fd:ab:2f:08:ba:02:
50:5b:8b:92:19:93:8c:f6:e4:9a:47:9c:f3:87:a0:
56:0b:83:d0:98:f2:94:22:90:a5:43:8b:a9:c3:2e:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:78:19:BE:90:E2:32:81:8C:C1:AF:64:14:65:BC:ED:AF:E1:70
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7e:cd:7f:2d:fc:00:50:26:bd:35:f5:e1:f3:c9:a0:f2:1a:
21:43:33:54:61:cb:03:c3:e1:a4:c1:0a:7a:b3:e6:4e:fb:d3:
67:1f:98:ce:1d:60:ac:c4:2b:f5:5d:4c:c0:d8:63:de:1f:77:
4a:c6:b5:1a:2e:62:0b:b0:62:74:f6:04:47:dd:83:25:00:2f:
da:49:dc:3d:13:9d:30:ad:2a:98:18:b4:31:5e:d1:d8:31:50:
ed:77:f5:d4:ab:2a:26:53:9b:24:b7:3d:68:23:d9:40:2d:1c:
2e:37:0a:73:b1:41:5c:5f:60:73:66:29:05:d3:8e:d3:2e:85:
9d:02:67:e8:a7:d2:de:80:1d:4f:c2:89:b5:66:e2:97:89:7c:
f0:74:b1:82:71:ec:33:f0:51:9d:31:dd:19:d8:a7:5a:9a:d9:
e1:74:99:41:00:f0:38:dd:e1:20:c8:75:8a:07:4c:fd:4c:37:
c1:70:c8:67:e6:23:ef:d6:a9:b4:3c:ae:dc:5b:0a:0e:e3:45:
3f:0a:fb:78:21:bd:5f:99:f8:18:8a:58:32:1c:da:93:e4:5a:
f2:b6:e5:c0:6c:fd:4e:f3:c9:7d:f6:d7:92:2d:43:f9:f2:42:
3a:65:46:9a:dd:ee:e0:e7:41:df:bf:a7:7f:f2:de:78:f0:c0:
63:df:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:20 2025 by rpki-client