Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: 7X8HubNERuayqhQ53Cn0dllT3W90GU5kM2qeaLaV9bU=
Subject key identifier: B2:BC:06:96:1D:AA:93:1D:0C:43:88:97:1C:61:44:C8:AA:1C:4D:71
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 0194C4639FBEDE512485CD78238AED0D5C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 2D
Signing time: Sun 02 Feb 2025 02:00:50 +0000
Manifest this update: Sun 02 Feb 2025 02:00:50 +0000
Manifest next update: Mon 03 Feb 2025 02:00:50 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: mrLmUdAhnONf4B8EaUZSwJ+quwOiMdtQrg8eA1F/QUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:9f:be:de:51:24:85:cd:78:23:8a:ed:0d:5c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Feb 2 02:00:50 2025 GMT
Not After : Feb 3 02:00:50 2025 GMT
Subject: CN=b2bc06961daa931d0c4388971c6144c8aa1c4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:6a:c3:98:1b:2d:3d:ed:83:ac:80:d0:f5:
1a:01:8e:77:b6:de:75:be:ba:d0:44:60:2e:3f:ac:
19:be:7d:68:60:0e:cb:98:a2:1d:00:b1:f3:db:93:
28:b0:15:a4:20:b5:6a:23:b2:cf:05:88:fe:c4:22:
b6:a1:aa:15:a3:21:55:93:92:8d:37:6e:47:93:f4:
be:de:3b:60:d8:f8:f5:e7:4e:bf:93:d9:bb:54:a9:
97:24:d1:f6:22:24:d8:ca:31:a2:55:f8:1b:a1:e5:
f5:7b:4d:9f:66:a5:54:2e:14:de:65:f0:94:06:1e:
d6:62:56:3f:a7:d4:23:62:52:cf:1d:f5:70:f0:95:
4b:5c:54:57:d6:f3:1e:5e:c8:4a:9c:e1:70:f2:4b:
92:01:e1:5c:ae:38:62:5a:63:58:e8:1f:88:77:f7:
62:36:30:3f:e6:79:c6:3f:51:db:73:1f:0e:51:28:
fc:e7:b1:f0:6f:9f:5d:ed:b9:2b:9f:06:92:f7:2f:
ab:b1:c7:2d:0a:2c:09:8e:71:af:78:5f:f1:a3:59:
c0:95:9d:40:5c:43:5d:5e:98:be:c5:7d:53:28:d1:
89:ee:9f:1c:57:5b:0c:50:e6:ca:29:46:3d:58:a9:
06:c1:53:84:85:cf:bb:99:33:cc:59:b0:26:de:f4:
ac:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:06:96:1D:AA:93:1D:0C:43:88:97:1C:61:44:C8:AA:1C:4D:71
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:1b:29:e7:75:f6:25:b6:e2:72:55:00:4f:8f:2f:0c:7d:
5d:d8:b1:18:c2:8e:e0:2a:97:4c:47:ad:02:03:d3:91:6f:c8:
71:c4:ea:eb:b6:1c:8b:86:c7:6c:23:76:e0:7c:ac:03:27:02:
9d:6d:a4:80:9a:10:ff:ca:2e:1d:cf:a2:f6:e8:23:cc:af:e3:
f4:59:4c:12:0c:31:ba:c6:e6:d4:6d:60:ca:b3:09:20:2f:13:
15:24:97:76:37:9d:eb:67:8f:fc:f8:c1:f2:dd:c6:39:c2:6a:
5c:be:1f:a5:d2:75:26:08:61:7a:da:a4:21:2e:b3:8f:a4:df:
25:73:6d:06:1e:f4:9d:26:ee:81:b2:c3:93:d4:4e:14:c7:09:
d3:9e:5c:77:58:8d:bd:a8:be:b3:db:a4:29:ad:97:f4:52:0b:
1c:50:7a:86:75:65:64:ce:07:e6:99:05:81:d7:88:0f:e7:18:
d1:bd:95:a3:c8:52:a0:03:76:1e:fd:1b:7d:67:d4:0c:05:ba:
39:c8:62:70:b6:7e:5b:82:7a:57:38:00:8c:02:01:d6:6f:d5:
a0:2d:b3:7e:70:e9:ff:fe:12:8b:10:f7:58:c5:2e:ce:6f:87:
65:73:22:c9:c7:77:b2:34:02:07:76:30:14:2b:3e:fa:22:65:
db:38:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:54 2025 by rpki-client