Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: jJRDm3KoUj6Jio2wP/ByWC6O2Bq4wmU1oGTJD8O1uG8=
Subject key identifier: C9:73:7E:89:64:03:97:04:DA:E5:B2:9F:AC:77:F1:E8:37:65:8D:6C
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 0195116BC91B82D9FE2311DEA75429FB7712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 13E4
Signing time: Mon 17 Feb 2025 01:00:31 +0000
Manifest this update: Mon 17 Feb 2025 01:00:31 +0000
Manifest next update: Tue 18 Feb 2025 01:00:31 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: VDmiy/5Pz1QIE6Q9fikE1LLCz5FS40NgLkXDpqf1QTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:c9:1b:82:d9:fe:23:11:de:a7:54:29:fb:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Feb 17 01:00:31 2025 GMT
Not After : Feb 18 01:00:31 2025 GMT
Subject: CN=c9737e8964039704dae5b29fac77f1e837658d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:49:d4:25:d7:cc:11:f1:65:92:e8:7c:d6:
6b:29:42:46:87:a9:12:77:3b:60:73:a0:41:13:76:
5c:ca:a5:6c:48:af:06:35:af:dd:18:b6:68:60:75:
e2:15:6b:e3:8e:75:97:69:ba:43:70:af:55:82:ad:
41:e2:af:db:bb:9d:1d:ac:8b:55:17:bd:c0:63:42:
48:7d:89:93:6e:59:7b:ef:d1:2b:cf:00:82:41:00:
d9:d8:7f:1d:8b:e8:45:23:6e:0a:92:ab:30:2e:3d:
65:fd:a0:f0:9d:6c:39:b7:84:e8:10:f4:b0:05:c9:
81:2b:9e:37:97:2e:7e:c7:d1:dc:6a:1e:49:02:68:
f3:8c:b5:ec:b2:75:27:97:71:32:d2:30:2d:78:e3:
ad:da:b1:ab:61:49:98:7b:e7:14:09:7d:97:57:8c:
c4:80:31:32:7b:f7:81:ae:96:03:b0:7a:70:7d:8c:
0e:b6:21:e3:75:43:e6:d9:1c:d9:42:b2:5b:61:41:
92:58:4e:0e:70:3c:c9:5e:23:91:da:8b:df:1a:93:
a2:86:63:a1:8b:3e:6f:5a:d6:2d:56:01:4e:81:49:
b7:36:03:5c:94:ba:75:04:e7:c1:53:ae:13:68:07:
bf:d4:33:45:c6:4f:a9:15:08:26:46:f7:0d:6c:27:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:7E:89:64:03:97:04:DA:E5:B2:9F:AC:77:F1:E8:37:65:8D:6C
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:64:ff:2e:78:7f:24:bc:36:b1:09:c6:31:8d:32:73:5d:bb:
ea:d6:88:2b:28:17:ca:76:9c:b1:88:81:d6:f5:7f:0e:18:9e:
f8:1c:fa:56:94:d2:1b:fc:4a:0d:d7:60:34:47:ea:cb:40:9e:
80:62:85:19:72:a1:07:48:50:6a:e9:ed:3a:25:08:12:9f:82:
c7:da:da:9c:1b:18:76:cd:a2:80:52:27:98:10:58:bc:23:be:
83:0e:46:b9:5c:05:fd:7a:81:a0:5d:c6:a7:77:c8:32:c3:bb:
ff:20:f3:67:c7:d0:6d:05:7b:bf:1a:4c:97:15:c9:a3:23:dd:
82:ea:8d:e3:15:0b:6f:27:3f:30:ec:4f:1e:77:76:b1:bc:35:
28:f9:7e:85:37:34:96:2b:de:71:9c:46:9c:e6:98:8a:12:02:
95:ca:34:a0:6f:6c:93:56:47:b1:1e:4d:52:bc:3a:9c:ab:9f:
5f:f2:98:4e:3b:1b:9b:d8:19:ea:f7:b6:80:e0:03:41:bb:6f:
b2:a1:71:e3:25:7a:c2:8d:46:9e:65:8d:c4:55:1a:28:2c:d8:
f9:ac:35:27:7c:71:36:9c:95:ee:be:86:c8:54:84:ca:a6:28:
29:76:31:cd:49:e7:a6:2d:18:05:53:de:48:82:aa:6b:14:87:
ee:f2:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:45 2025 by rpki-client