Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: hmFX2+zQzmsL0UxPw4F7sq49n2SxksSJ/0Ib8zmMO0w=
Subject key identifier: CC:ED:AA:91:80:50:2F:AA:BF:B0:D0:E4:1F:3D:79:68:0A:57:5E:C0
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 0194C46364B9AE8F6477D47992E007D5E07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 54
Signing time: Sun 02 Feb 2025 02:00:35 +0000
Manifest this update: Sun 02 Feb 2025 02:00:35 +0000
Manifest next update: Mon 03 Feb 2025 02:00:35 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: gJ+Zebllp+1rx+eW62zDh2Hriww1QJGcyTf/L6KuBDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:64:b9:ae:8f:64:77:d4:79:92:e0:07:d5:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Feb 2 02:00:35 2025 GMT
Not After : Feb 3 02:00:35 2025 GMT
Subject: CN=ccedaa9180502faabfb0d0e41f3d79680a575ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:74:c4:7f:71:3c:8f:38:53:3d:62:69:67:
dc:ab:18:55:5b:90:9c:cb:d0:66:d8:47:94:c5:9e:
04:2f:9c:21:3e:75:ef:45:af:68:da:80:b5:a6:7e:
c5:3b:e6:d4:f4:7d:6b:1b:6a:e2:2d:d2:79:c9:66:
a5:f1:87:24:19:5f:52:84:da:e6:11:fe:20:2a:29:
63:36:9a:8a:fa:03:ca:06:b6:46:83:42:f6:a5:61:
7f:60:cc:21:16:02:97:ac:9e:b0:01:aa:85:73:d8:
ce:7f:cb:a8:01:d7:cf:fb:11:3f:fb:e6:57:39:21:
83:7a:25:a1:57:35:15:a0:8d:f7:79:65:37:b0:a5:
bf:4f:ed:03:55:1f:43:2a:f2:60:20:20:5c:24:f0:
3f:7d:fd:9a:b5:9f:c4:b9:6d:47:f0:b6:f1:1d:d1:
73:f2:33:c2:86:74:1c:b9:65:b8:ec:af:a5:83:8a:
4b:87:88:3d:f5:a7:b5:1e:db:e6:99:35:78:8e:bd:
15:58:26:c7:a2:90:fd:56:45:ff:82:51:66:4c:2d:
8a:68:44:83:83:6d:74:05:42:52:29:da:2b:c3:08:
8b:15:50:90:11:17:c4:36:ea:95:71:59:ed:de:fc:
ad:81:22:d4:ca:24:51:69:8f:de:cb:f6:06:dd:32:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:AA:91:80:50:2F:AA:BF:B0:D0:E4:1F:3D:79:68:0A:57:5E:C0
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:25:5a:cc:e9:1b:2d:05:0f:c8:b5:6e:12:fc:ff:ac:2d:
39:ec:b6:f9:cc:4b:97:50:58:d3:e2:77:89:51:71:b6:15:f0:
2e:53:e3:dd:08:f6:0b:d7:90:9e:da:bc:4c:4f:fc:b7:d6:c2:
83:f7:d6:27:b7:0c:cf:65:b7:ec:59:4a:70:ae:59:ce:f8:4e:
46:53:e2:2f:02:ab:c5:26:25:1e:b7:a6:c6:6a:d4:87:57:ba:
68:90:67:8b:e6:f8:25:7d:b1:7b:69:11:19:eb:01:2b:d7:52:
f4:7c:6f:30:5d:45:22:53:f0:f1:a3:a5:db:27:95:a6:4b:25:
1d:24:28:fc:7d:3b:40:b2:0f:b7:db:4d:f2:8d:a4:75:ae:56:
43:16:db:d9:cd:b5:92:d1:e9:70:12:f7:f7:ee:a6:31:20:33:
34:27:a6:9b:b3:f7:46:f9:58:d4:ae:10:67:33:e1:73:a6:ae:
61:2d:2e:1c:b5:86:94:65:f7:62:31:89:e1:ba:67:c7:1c:09:
12:63:17:e5:b1:45:c2:00:ad:b9:59:41:8a:da:09:2c:c9:4d:
c2:df:1f:52:cf:85:56:60:ea:be:2a:dd:b1:f9:02:73:b4:0f:
63:aa:19:54:59:36:b8:3d:95:a0:b4:f6:4e:0e:41:75:0c:94:
fa:cb:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:54 2025 by rpki-client