Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier: qZazvArIjvJfoHhBcGNZ+e0DcMMRbrjhHlZY5dt3KOM=
Subject key identifier: 22:F8:F2:E4:3B:1D:AF:9F:1B:EB:6C:03:4E:21:1B:4B:7A:61:2C:52
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial: 0194C4D11DEE89E04FEAE1141564E23082DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number: 02D5
Signing time: Sun 02 Feb 2025 04:00:26 +0000
Manifest this update: Sun 02 Feb 2025 04:00:26 +0000
Manifest next update: Mon 03 Feb 2025 04:00:26 +0000
Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: PNDgZK9K157gdpFoP+AWXST6BQO7P3H4iDhnLtdsnOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:1d:ee:89:e0:4f:ea:e1:14:15:64:e2:30:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Validity
Not Before: Feb 2 04:00:26 2025 GMT
Not After : Feb 3 04:00:26 2025 GMT
Subject: CN=22f8f2e43b1daf9f1beb6c034e211b4b7a612c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:00:3b:0e:80:9f:0a:97:49:78:95:13:72:
27:0f:18:ab:45:71:94:de:73:8e:8d:bf:04:fa:4c:
d2:22:a3:c2:b3:25:0c:a5:7f:e7:70:a3:d8:eb:1d:
c3:8d:f5:78:a4:8e:9c:3a:0e:f2:4d:c8:ae:45:29:
47:8b:d2:b8:12:5a:e0:30:ec:2d:17:e2:8f:d3:f4:
46:a3:e8:a0:a0:4e:4e:ff:93:ed:70:dc:14:85:b7:
d0:32:2c:7c:77:ef:3c:01:18:64:a4:46:a4:dc:7c:
7b:4c:11:c5:6e:3f:77:3d:c1:64:ab:61:60:39:6a:
05:40:ac:17:80:03:d7:c6:af:32:fb:60:be:bb:b7:
ed:22:b8:f1:46:0e:bd:6c:f6:2e:9c:51:67:8f:85:
df:c7:cb:d6:fb:c7:27:e3:20:e3:5d:fa:28:eb:a8:
8e:fa:a8:04:d8:36:d6:bd:65:a3:4e:d4:ab:f4:04:
19:4d:67:b5:1c:de:65:24:0b:f4:2f:9d:4f:26:6a:
34:7d:c8:7b:ba:f1:3d:85:11:95:16:90:9a:40:69:
74:72:6d:63:c5:7d:28:e7:cf:9a:82:a7:e7:10:d6:
78:9b:ee:cf:e9:a6:99:ec:f0:f1:83:df:bc:da:16:
1c:98:24:54:18:af:f1:a3:b5:27:1a:ae:2d:95:40:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:F2:E4:3B:1D:AF:9F:1B:EB:6C:03:4E:21:1B:4B:7A:61:2C:52
X509v3 Authority Key Identifier:
keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5a:8b:dc:57:78:e5:cb:b5:6a:c6:2f:28:13:ef:b2:4c:58:
a1:fd:e8:83:8e:47:e6:5c:4b:29:0e:a6:fa:69:48:22:5d:a5:
fe:79:86:ab:32:a3:3c:1b:35:c9:1c:bb:e3:58:98:d6:b7:4c:
9d:d9:e5:47:c4:51:46:d5:45:0e:e7:51:06:2a:54:be:c6:64:
91:bd:5f:bc:a7:e2:39:f6:95:cf:b3:0e:71:aa:11:47:81:f2:
d1:37:57:2e:97:67:d5:2a:71:3f:bc:18:c2:a6:10:2e:bd:19:
ef:3e:85:c5:80:db:e5:e6:01:5a:81:b4:4d:45:15:23:21:c2:
a0:54:3b:6c:26:1d:59:a8:23:a1:bf:c7:32:c0:6d:3f:23:5b:
1f:c4:0d:00:33:0d:cd:82:37:97:59:f8:a3:2e:07:3a:fc:b3:
08:65:e7:93:90:1e:44:ef:c4:1e:32:ce:16:70:76:3f:a5:27:
2a:f2:2e:bd:cf:fc:4a:d9:ea:04:cf:83:f8:2e:be:da:fa:db:
8a:34:bb:df:19:b7:35:b6:c6:f8:55:02:60:7c:39:5b:25:24:
c0:e1:84:2c:d3:89:82:3a:84:81:70:59:ee:54:b4:a2:eb:af:
d5:ce:d0:6c:22:89:04:48:65:f9:cb:b9:52:7b:b0:2d:71:ca:
e4:89:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:15 2025 by rpki-client