Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json)
Hash identifier: IxQTMIdph4F9iVKSxz+OzpzY2qAfDDJ66kM7fPurvZU=
Subject key identifier: 81:38:0A:49:41:BC:A2:68:E4:1E:35:76:C5:8E:3C:03:E6:4F:A1:80
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 0194C5083C7214C30E4D089409DFD55C9A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
Manifest number: 0D
Signing time: Sun 02 Feb 2025 05:00:38 +0000
Manifest this update: Sun 02 Feb 2025 05:00:38 +0000
Manifest next update: Mon 03 Feb 2025 05:00:38 +0000
Files and hashes: 1: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: YHZtz7XfxM1C5W4VHcfmG0MoHgUfz49chvWtxOULa9E=)
2: 2_qP_wNq8AHUW-EoyL-lwp2z10s.roa (hash: s2dQbzadExO8v0zgkawY9FWp62vIpIla71iZ5vtmqv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:3c:72:14:c3:0e:4d:08:94:09:df:d5:5c:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Feb 2 05:00:38 2025 GMT
Not After : Feb 3 05:00:38 2025 GMT
Subject: CN=81380a4941bca268e41e3576c58e3c03e64fa180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:71:50:81:1a:9d:5f:13:c6:3f:21:cd:a6:
24:9d:f2:92:fe:a2:bd:a8:d1:43:c7:16:be:3b:9f:
d4:3d:9e:53:a5:33:fc:6f:01:9d:98:19:97:09:bb:
79:4f:1c:4f:c3:2b:e3:fe:67:fa:a9:1a:75:1a:47:
ad:cb:11:f7:42:12:97:b2:7f:1e:47:c7:6f:42:b5:
2c:ec:e4:3b:74:67:59:de:b8:a6:86:93:f0:82:80:
ac:8b:db:a1:eb:65:ec:e2:36:04:0f:e0:1a:7a:61:
18:34:a9:7c:f0:8f:77:e1:6b:67:42:47:42:c7:69:
65:ce:d6:3d:d7:b9:58:e1:43:5c:47:29:70:cc:4f:
8f:af:a7:af:16:d0:7f:90:73:5d:f3:ac:c8:3f:b0:
04:4f:5d:3a:1c:a5:63:49:0a:9e:80:aa:5f:ee:cb:
6a:82:a3:65:d2:4a:87:8f:d1:e3:d0:3b:c1:01:06:
c7:04:9b:fa:b3:4d:66:d4:9b:84:ef:67:fb:7f:c1:
4e:de:d0:bf:ae:1d:31:0c:3d:44:a3:aa:9f:35:a3:
21:d3:3e:cb:5b:1e:7b:cf:dd:4e:04:f2:8d:2e:aa:
4d:67:0b:3e:49:2d:fb:b5:6f:36:40:7b:e9:49:b5:
fb:8f:b1:a7:61:ee:2b:ba:3c:98:29:17:16:eb:d6:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:38:0A:49:41:BC:A2:68:E4:1E:35:76:C5:8E:3C:03:E6:4F:A1:80
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:68:11:02:fd:a1:99:db:c1:da:cb:11:c5:09:c5:55:c1:
cd:f2:5d:35:8e:b4:58:cb:b9:03:62:e1:57:d1:7a:e7:e0:8e:
b8:74:f3:eb:22:8e:77:79:62:b5:d9:e9:70:da:e8:09:9d:0b:
eb:82:bf:79:d0:31:8f:dd:13:e8:2b:cf:84:f6:5c:07:cd:1a:
44:5f:38:d1:6d:a4:e0:aa:a3:ff:b8:62:25:e4:9a:d4:e0:de:
03:96:a8:35:bc:3d:56:21:fb:71:aa:ac:34:29:e0:61:02:36:
92:e2:db:4f:01:4d:c3:d9:26:21:d0:fa:d1:56:d7:c2:d5:c1:
e2:90:f8:d1:a6:90:c5:34:d3:f9:9a:06:83:12:36:ed:30:a9:
2a:e2:7a:52:ab:90:05:4f:2a:7a:f4:70:ee:d0:d9:c1:49:86:
de:f8:11:a8:4c:c0:cf:a6:5b:1a:44:23:f5:2c:e0:40:06:d0:
b6:04:b3:d7:a4:87:b5:5a:5e:41:c4:44:42:f0:1b:08:f2:68:
2b:ba:b3:a2:4e:33:6a:fe:09:04:cb:0a:53:02:8f:6b:04:21:
f6:ce:b6:45:dd:d8:47:a3:96:4b:4f:6f:61:fa:83:7a:0b:6a:
3f:e9:65:ed:fa:98:50:ab:99:4e:7d:10:79:95:ae:24:66:b3:
3b:34:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:15 2025 by rpki-client