Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: 8+5aaDLmLqhb/ngd/MgX2L30bhRixD7wsa7VNbmO5Y8=
Subject key identifier: 9D:75:54:97:64:5E:1D:37:E5:0D:A6:F6:22:C1:66:3A:A5:74:45:AE
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 019510C77F4D00A1DA30D46B586F0F7C46EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 0806
Signing time: Sun 16 Feb 2025 22:01:04 +0000
Manifest this update: Sun 16 Feb 2025 22:01:04 +0000
Manifest next update: Mon 17 Feb 2025 22:01:04 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: dVuheaBeqQw9nGU36JNWCzuW0jIyW2IjAsUlNRbEbLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:7f:4d:00:a1:da:30:d4:6b:58:6f:0f:7c:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: Feb 16 22:01:04 2025 GMT
Not After : Feb 17 22:01:04 2025 GMT
Subject: CN=9d755497645e1d37e50da6f622c1663aa57445ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:e7:7f:14:f4:ec:bb:3f:92:f9:5f:f9:1c:
29:05:a6:ef:43:88:5c:f7:c6:f9:52:e2:64:6a:f1:
21:e5:b8:70:2f:7d:4b:fb:60:2d:49:3b:81:b1:fd:
15:bc:f2:a5:95:fd:9e:ab:e0:1a:9b:55:d5:8a:8d:
f5:1f:88:de:8d:37:c6:87:30:d9:a6:83:fc:16:41:
dd:1b:2d:8e:5f:f7:13:42:66:00:f2:4e:e7:00:bc:
c5:81:2a:d7:0d:b5:d2:c5:01:a1:2e:ae:8e:e6:9f:
42:ab:8a:4d:a0:72:2d:d4:23:6e:f1:d2:3f:e6:db:
b7:37:a8:5b:c7:c8:4f:c6:55:e3:a9:17:37:1b:52:
8d:17:a2:cc:24:85:c3:7d:f0:23:bd:1c:98:41:52:
af:7f:f4:ed:ed:39:8a:c3:66:a5:ce:54:66:76:70:
fd:aa:76:9d:37:f7:05:ae:80:e2:83:81:1c:1a:a0:
4f:22:6f:54:f7:a5:df:09:8b:40:0c:06:71:5e:a3:
bf:d6:94:b5:b5:2b:3f:3a:78:10:1b:10:7b:05:d4:
27:4a:f9:7f:03:d5:11:eb:63:88:7b:5f:fa:66:90:
ea:11:2c:33:d1:22:bb:7f:75:41:24:76:45:9e:44:
e8:35:85:25:bc:ed:d9:15:37:c0:8e:d2:97:32:55:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:54:97:64:5E:1D:37:E5:0D:A6:F6:22:C1:66:3A:A5:74:45:AE
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:de:5d:35:c7:11:58:8c:47:01:fd:98:b7:8e:e0:ba:6a:
83:a0:fc:2e:47:17:b0:ac:4e:5f:02:ed:e3:cd:60:ae:40:16:
eb:47:ba:4d:5d:74:f1:4e:0d:b1:18:33:23:b1:83:86:01:ae:
4e:75:07:a5:43:55:7b:b4:b9:53:1a:54:8a:05:46:40:4e:62:
e9:b2:ba:d8:c8:d4:13:22:ea:ea:3b:62:3e:56:9e:5d:1c:0d:
ec:1f:de:1a:23:c2:d8:f5:dd:6a:0d:2b:72:07:aa:68:cb:c9:
69:ae:df:38:cd:87:b9:b7:22:35:fb:6e:e5:67:2d:91:ad:36:
22:e7:a5:04:4d:6c:be:8e:aa:47:8d:a3:9b:58:e3:66:11:cb:
5d:c3:64:d3:a0:df:74:fb:df:bf:80:2e:9a:e6:de:6d:dd:39:
e2:23:9e:0b:47:76:95:34:df:8e:3b:2e:fd:35:ee:9d:6c:4c:
5e:2f:20:57:56:06:36:2e:95:bb:e5:6f:27:71:7c:5f:72:c3:
1e:e7:0f:d3:a1:c2:38:55:01:2f:ff:f3:f2:82:64:76:a5:ce:
b7:01:ed:94:fd:96:8a:ce:19:2d:83:d6:85:6d:3d:58:50:6d:
79:b1:e9:73:fe:20:e5:36:f5:cf:29:7f:d3:8e:da:03:da:34:
3a:89:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:21 2025 by rpki-client