Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: vQ4/po9/E9fcPLTptHyVPcVEwTVeR136KxN3wqqt4Dk=
Subject key identifier: 51:DA:A4:4C:F3:E7:75:FB:AC:5A:8A:9E:54:66:2D:40:7C:E6:AE:6D
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019511D9C87C8D5AD2A540C2DFB2362A94D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 03:00:39 +0000
Manifest this update: Mon 17 Feb 2025 03:00:39 +0000
Manifest next update: Tue 18 Feb 2025 03:00:39 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: iIh8xZ1C8H/YaCkc2ZyKSPHZ5mwzGWLUo/eP6MaGSII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:c8:7c:8d:5a:d2:a5:40:c2:df:b2:36:2a:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Feb 17 03:00:39 2025 GMT
Not After : Feb 18 03:00:39 2025 GMT
Subject: CN=51daa44cf3e775fbac5a8a9e54662d407ce6ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:e6:eb:d6:93:3d:3c:d0:3c:e3:96:a6:dd:
7f:30:5c:10:32:97:96:9f:c6:b3:e1:c6:92:59:68:
95:67:51:05:be:c8:bf:17:c3:37:94:a3:da:a9:23:
28:d7:a5:a2:3e:f3:00:cd:f0:38:ca:e9:7d:d6:ec:
d7:cd:af:9c:d6:b3:a7:35:d7:ff:7b:e3:e6:73:34:
26:4b:79:c3:b4:6c:67:bd:0f:5c:2d:52:44:9e:0e:
03:00:b1:d2:fa:6a:36:ef:0c:73:87:9f:3a:bb:c1:
27:5a:db:c8:52:d2:75:36:25:14:51:f0:98:87:9e:
00:4a:f1:46:d4:30:d3:56:cf:da:5c:e4:3d:fe:02:
98:52:d9:09:81:c8:34:8c:4b:b5:8c:db:f0:18:84:
ce:b0:8b:b6:76:c0:39:7e:91:69:20:ba:a9:4d:c8:
a9:aa:00:be:e4:55:b4:46:9a:94:34:29:80:0e:c9:
e0:b6:5a:06:2b:71:51:39:04:63:4a:e6:a1:49:c5:
8d:d6:7b:92:9a:a5:3d:b7:ac:5b:77:be:08:67:f2:
86:92:26:25:97:2c:6c:d8:27:a1:f5:85:28:df:66:
64:5d:3b:37:01:f1:4e:23:59:1b:60:7e:eb:ed:98:
a6:e9:b3:b9:2f:79:74:bf:1e:29:c4:45:e0:48:6c:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:A4:4C:F3:E7:75:FB:AC:5A:8A:9E:54:66:2D:40:7C:E6:AE:6D
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1d:20:4a:6e:e4:7c:35:fb:fc:49:a8:fd:0c:ab:19:5a:ac:
45:4d:7d:22:2b:de:22:9a:98:d2:7e:b8:b7:8f:70:34:0d:19:
ad:52:0c:d5:25:7e:ec:98:df:34:3b:5a:13:33:08:a4:1b:3b:
d1:30:77:de:90:78:31:4a:81:8d:20:ba:06:28:40:93:c3:03:
90:9a:f0:b1:20:01:71:c1:18:d6:72:d5:5b:7c:4a:62:c0:f7:
23:d7:b4:d8:a9:f6:3d:15:e7:3c:79:c8:33:97:33:37:03:b0:
7b:f1:60:45:83:f7:6c:e9:cb:ee:0f:e1:4d:56:a9:e1:55:2e:
a2:99:81:45:d5:51:f8:5d:1f:da:3a:06:53:9a:7b:ac:48:3b:
b4:ea:6e:1b:2e:d9:a3:05:72:06:c1:95:5f:99:15:42:0b:aa:
d9:db:c3:e0:bc:8c:f8:05:1c:3e:ec:d0:55:43:c2:53:1a:59:
6d:03:22:3c:09:70:5f:b3:88:4e:70:34:69:e3:f7:7d:02:22:
31:e3:ca:41:ff:5a:36:2c:c2:74:9d:82:61:b6:8b:d4:12:47:
45:e0:e0:3f:9b:ef:ec:24:c4:b6:8f:75:36:16:b1:a0:84:74:
c7:1c:da:69:03:d9:d2:cd:9b:a9:db:f9:e7:33:e6:c8:47:b8:
bd:94:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:22 2025 by rpki-client