Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: tgYii3ohYnINnBPCSC4mIJPuzJGdfGIxmwX2QNlb8eA=
Subject key identifier: 58:C3:9E:98:B7:5C:C5:A9:8D:F7:17:40:0C:3E:E9:22:86:C2:85:6E
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 01965048464D067C6C0715A63D83E98C1911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 0121
Signing time: Sat 19 Apr 2025 23:00:35 +0000
Manifest this update: Sat 19 Apr 2025 23:00:35 +0000
Manifest next update: Sun 20 Apr 2025 23:00:35 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: KMUs1sgIUamibamUpcZI/ckeXFo6yXASeG4sKQYPAwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:46:4d:06:7c:6c:07:15:a6:3d:83:e9:8c:19:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Apr 19 23:00:35 2025 GMT
Not After : Apr 20 23:00:35 2025 GMT
Subject: CN=58c39e98b75cc5a98df717400c3ee92286c2856e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:8a:bc:93:45:ac:69:ba:24:20:17:41:a9:
a7:50:bb:6a:b7:05:b2:0c:e3:e0:f6:58:93:82:35:
c6:0a:62:6f:73:c1:d5:66:38:24:9e:e0:39:47:6b:
f3:ea:01:b2:4d:c8:01:4a:ca:ea:a2:03:d4:e0:4e:
6c:5c:d5:10:a8:2f:4a:71:84:5d:54:60:3e:9f:85:
2d:25:7f:e3:a1:0c:87:b6:ad:d3:25:d0:5e:64:9c:
08:4c:9c:3a:46:d6:9f:26:f4:69:30:3c:c1:cc:a9:
7e:c3:6f:fc:98:11:b8:89:84:af:6f:53:ac:05:b6:
51:c0:a2:f8:c1:74:48:2e:0b:7b:01:08:20:4d:41:
7a:49:ba:ae:7b:75:91:d7:3c:45:6f:1f:4c:84:f7:
2b:07:14:7e:6e:6f:2f:8e:76:92:06:c5:80:f8:c0:
f0:20:ab:08:ce:6c:23:ad:e8:34:2a:5e:b9:ee:ce:
99:e1:40:7b:15:4f:20:f0:37:50:f7:6e:fb:ba:2d:
89:bd:9d:90:0b:d2:cf:25:5a:9e:33:91:d4:9c:b0:
b9:82:e7:be:e6:29:97:e5:78:77:0d:92:5a:60:88:
20:4e:d5:cc:2d:3c:30:0f:23:2f:58:02:ef:55:78:
5f:9b:ab:d5:30:30:d8:1c:2d:22:7a:4e:13:e7:c1:
41:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:9E:98:B7:5C:C5:A9:8D:F7:17:40:0C:3E:E9:22:86:C2:85:6E
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:5b:50:03:6e:f6:47:4f:28:46:76:f8:47:80:56:15:23:
b7:c4:54:12:f6:d1:38:5b:02:63:a8:b0:43:89:4f:b2:a0:50:
4b:47:b9:09:3b:b5:ed:e6:f0:34:f4:86:7c:80:9a:36:78:e7:
12:2e:2d:fe:60:1e:6d:a5:ea:ca:52:49:34:f7:ab:c7:76:5e:
4f:64:dc:96:5e:1b:7c:6b:bb:e6:6e:4a:eb:b6:92:6f:b8:ce:
5e:9f:82:0e:30:aa:59:76:4d:8d:7b:57:3b:c8:41:09:5e:96:
9d:af:89:c4:d9:ad:0a:b2:8e:d3:cc:83:e5:20:ca:88:fb:5b:
20:65:0c:b7:3d:cf:98:2e:e5:28:b1:95:f4:de:5d:06:06:17:
86:f2:ca:73:02:9e:bc:f2:fb:ac:2c:eb:0d:5d:ad:3e:9a:48:
ae:5f:5e:a2:5b:af:53:39:ff:87:6e:f5:0b:a7:7e:64:22:ea:
d0:5e:7f:c2:32:7d:07:f7:0c:db:0a:84:c9:66:bc:5d:c8:c5:
31:03:9c:40:75:25:e3:00:c3:b9:d5:b0:60:9f:1b:1b:25:81:
21:2e:8c:1d:15:9f:80:fa:53:a5:63:77:47:24:6c:bd:8d:ff:
2e:24:f7:ad:a4:b6:3e:11:fa:41:6e:82:37:8a:9b:39:03:12:
9d:0a:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:08 2025 by rpki-client