Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File: pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier: Up7Z/OkaPbKQrSjpqtvKqMSd2twstqg2StUrL09x664=
Subject key identifier: 6F:EC:1D:87:0D:E3:2A:91:28:4C:6C:90:48:15:11:53:31:71:E0:00
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer: /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial: 019582EEA5B8538045BEC6F2F3B3F223F60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number: 06C5
Signing time: Tue 11 Mar 2025 02:00:32 +0000
Manifest this update: Tue 11 Mar 2025 02:00:32 +0000
Manifest next update: Wed 12 Mar 2025 02:00:32 +0000
Files and hashes: 1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: QaGMLr1g1ne8IwOTEqt5+279cSyjgFixhA+RuOGwtvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:ee:a5:b8:53:80:45:be:c6:f2:f3:b3:f2:23:f6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Validity
Not Before: Mar 11 02:00:32 2025 GMT
Not After : Mar 12 02:00:32 2025 GMT
Subject: CN=6fec1d870de32a91284c6c90481511533171e000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:3b:5b:12:ae:1b:fd:0f:46:fd:8c:cc:be:
a6:65:da:e2:bf:77:f8:1f:9a:f6:cb:27:af:54:ab:
9e:68:d2:8f:2a:3d:05:0d:9b:44:d2:bd:c8:77:9b:
6e:93:d3:ca:0d:6a:a7:89:c8:e8:5b:64:e9:a9:ed:
c3:4d:4f:a6:ad:8c:dd:d0:3b:96:4f:0e:b9:5e:19:
ad:0d:52:0d:57:b9:f0:7c:86:30:4e:8e:54:55:cb:
59:c8:89:49:d7:3e:a9:0c:65:75:b5:37:a7:51:26:
c6:0a:e1:ed:6d:ea:a6:a8:e3:5f:7a:9b:c5:8a:b1:
c7:fd:3e:90:82:b6:c2:42:12:6d:51:19:9c:75:91:
4f:fd:0a:f2:26:14:64:22:30:8d:b7:98:91:33:4a:
c4:57:5c:f9:d2:8d:d2:5b:9c:d9:eb:c6:94:de:e2:
3e:3d:26:fe:a9:34:9d:7b:1e:70:60:1d:82:88:f2:
24:34:33:7a:4f:a4:1d:2d:45:5b:20:76:2b:9a:6d:
7b:c7:dc:c8:4a:49:41:77:46:85:1e:a1:8a:22:43:
1d:91:c8:45:1a:c2:c6:ce:f3:fa:b2:9d:d1:be:58:
8f:ac:82:e1:20:e8:4b:2a:03:86:ef:00:f6:5e:09:
74:99:b5:1d:e4:aa:b2:79:74:1d:78:fc:89:26:20:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:1D:87:0D:E3:2A:91:28:4C:6C:90:48:15:11:53:31:71:E0:00
X509v3 Authority Key Identifier:
keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:a7:2c:ae:f6:07:d9:50:8c:f9:03:17:b5:c6:72:c8:68:
b2:da:3d:b5:e1:67:f7:36:93:0f:de:dc:aa:cf:d4:69:a7:92:
b5:4e:5a:bc:66:20:63:a4:99:8e:e5:a9:e4:b4:c5:7b:b2:03:
bf:40:af:b7:4d:2f:bf:1e:e7:33:ae:dd:21:d3:4f:de:b2:fc:
b0:7a:71:38:fc:12:f4:ed:85:5e:22:df:ee:76:9e:b6:8a:f1:
78:18:d7:5a:88:26:ad:71:1c:c1:f3:09:1d:68:48:0c:73:19:
15:aa:3c:b8:78:e5:38:56:18:22:4c:36:58:5b:f7:77:ab:60:
89:35:bc:78:cd:b3:19:36:5b:46:71:c2:cd:55:82:c5:34:5a:
17:14:89:3a:13:0b:f3:62:ac:78:c4:ec:98:87:d4:20:dc:26:
8b:cb:95:7c:1c:d8:f8:43:69:2b:f4:28:59:ac:8f:17:25:58:
d3:15:53:55:0d:af:ea:ea:ee:ee:82:3f:e4:4c:f4:aa:23:3d:
42:68:a1:32:c8:3b:d5:8f:45:0a:4a:4d:80:4d:6d:74:d7:4f:
44:63:ca:33:d7:eb:5e:75:20:44:b7:e3:82:56:74:9f:87:42:
9f:f3:6b:4b:36:ec:40:96:db:fc:d9:83:5e:1e:76:00:9f:31:
d8:b3:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:11:28 2025 by rpki-client