Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: ScfQM7USSazvr7ZghVAFyGxvXHzxcGRbQQT7sfQFB9E=
Subject key identifier: 65:A2:C8:3F:6C:C3:D6:26:1F:29:27:4E:BC:0A:21:F0:09:3D:9B:8D
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019510C75582D0DE4D5F3FE82585CD5DE37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1246
Signing time: Sun 16 Feb 2025 22:00:53 +0000
Manifest this update: Sun 16 Feb 2025 22:00:53 +0000
Manifest next update: Mon 17 Feb 2025 22:00:53 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: 0rhbz9e/4anzSAQRyeH0cNV90WZ1c2S6OnjYDdp0oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:55:82:d0:de:4d:5f:3f:e8:25:85:cd:5d:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Feb 16 22:00:53 2025 GMT
Not After : Feb 17 22:00:53 2025 GMT
Subject: CN=65a2c83f6cc3d6261f29274ebc0a21f0093d9b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f8:26:96:a4:20:ee:4b:f8:ee:0e:7d:4e:33:
52:b6:27:e8:2c:5c:6e:46:3a:28:2e:dc:c3:81:e9:
7a:ca:68:8c:25:28:4d:ed:53:28:23:d8:83:23:57:
0c:fe:7b:55:b2:7c:e0:56:f1:a4:26:bf:dc:d5:f9:
1f:ce:fe:45:8e:44:47:0e:9b:6c:16:e3:5c:02:da:
cd:b2:dd:d4:fb:82:eb:ab:0e:81:08:fb:ac:9e:e5:
e0:f1:9d:86:d0:4a:77:f0:eb:d3:b0:6e:d8:53:9e:
66:dc:80:65:13:bf:36:c4:e8:15:09:fd:d3:d5:8f:
5e:58:82:4d:c2:1f:1b:4c:c9:a3:ce:c5:13:f1:32:
39:1b:bc:b8:50:fe:28:60:8b:e2:72:a0:3a:40:57:
32:ac:4a:8e:8a:12:11:10:5b:ce:8a:fb:6d:ce:73:
44:49:97:f6:cf:19:4f:83:42:bf:91:5c:d5:49:d2:
f6:ab:76:c1:7b:9e:a3:20:d1:f3:01:02:45:9e:f4:
5e:88:29:71:21:1f:6e:b7:2f:97:65:1c:68:9e:56:
d4:23:35:ef:08:56:97:59:18:77:9a:aa:a6:19:87:
9f:af:24:50:9d:de:f9:cc:b0:32:52:0b:e6:48:31:
9b:12:89:5a:63:fc:2a:09:de:da:da:f5:c3:d2:d0:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:C8:3F:6C:C3:D6:26:1F:29:27:4E:BC:0A:21:F0:09:3D:9B:8D
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:16:bb:06:b6:1f:36:5e:0d:e7:4e:33:68:a0:8f:58:ae:
1b:54:dc:18:7c:e1:99:ee:23:03:76:b7:0a:83:5c:e8:21:22:
99:a2:71:f7:f5:8e:b8:35:57:ea:b9:1a:2e:1f:5c:cb:7e:57:
da:9c:f2:7d:b8:c7:82:4f:e0:ed:e6:53:0e:4c:76:6f:4c:6b:
dd:66:07:eb:96:75:e9:62:0a:c0:e8:a4:66:ee:cb:8e:ee:4c:
68:70:e9:87:bd:70:c9:b4:af:70:80:99:22:b5:73:f9:e7:9e:
48:3f:fe:cc:06:7f:a0:5a:cc:b3:fd:52:5f:38:fb:ef:24:29:
eb:3b:7c:bb:c6:55:4b:ea:a7:42:3f:09:be:45:ab:1e:6d:a7:
85:2b:aa:ab:c2:3e:99:68:ea:ed:27:64:e1:1a:e2:e1:76:5b:
94:d2:24:5a:7c:25:33:7a:fa:fd:3e:55:1b:c2:17:8f:eb:98:
b6:b0:c2:a8:ed:30:32:a2:14:48:05:48:00:28:2b:09:b7:d0:
0d:40:de:7b:82:88:d8:1a:f1:4d:b7:f7:a3:d0:6d:68:72:d3:
94:98:ed:2c:12:5a:f2:af:67:d5:f0:26:c0:09:ad:7f:9d:13:
b4:32:43:d2:0c:40:75:7b:3d:12:52:d9:58:de:9b:99:a9:bf:
ea:fb:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:30 2025 by rpki-client