Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.mft
File: c2RjyY7ju-w65IiN6AadrHSaUSY.mft (raw, json)
Hash identifier: SGbet3GOW4yEiAEXpU11alVsXDUZYkuuVXJJKXV2xTs=
Subject key identifier: 2E:07:80:C1:05:17:8D:F5:27:5B:E7:F9:82:35:32:2C:64:F6:A9:DB
Authority key identifier: 73:64:63:C9:8E:E3:BB:EC:3A:E4:88:8D:E8:06:9D:AC:74:9A:51:26
Certificate issuer: /CN=736463c98ee3bbec3ae4888de8069dac749a5126
Certificate serial: 0194BABBC771EF2BA64963921BE2850A6FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2RjyY7ju-w65IiN6AadrHSaUSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.mft
Manifest number: 12D5
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: c2RjyY7ju-w65IiN6AadrHSaUSY.crl (hash: NvuiPSpS5syaK40zm+lyWnedYRf5lqIBuflkyPZUkuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2RjyY7ju-w65IiN6AadrHSaUSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c7:71:ef:2b:a6:49:63:92:1b:e2:85:0a:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736463c98ee3bbec3ae4888de8069dac749a5126
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=2e0780c105178df5275be7f98235322c64f6a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:2b:cd:c8:34:ed:03:4e:93:2c:19:43:36:
a9:d9:0d:ad:c2:8e:67:94:c8:d4:96:e5:0f:00:f6:
94:78:16:bf:e4:df:a6:70:12:b4:51:36:12:da:0e:
96:c0:f3:10:86:92:a1:60:b0:3b:69:09:b6:a2:36:
b9:33:f6:1e:e1:72:b4:f4:13:e6:70:41:4f:90:95:
13:92:37:19:74:3d:4d:a2:98:fe:4c:8d:74:76:13:
de:23:21:68:25:22:c8:d6:cb:4b:38:e6:ff:60:bf:
dd:d6:06:17:bb:21:15:e6:0c:af:7c:b1:6a:16:e1:
74:11:2e:62:aa:ad:01:e5:6e:7f:9a:12:cc:ed:74:
04:24:69:d5:8d:49:86:0d:13:4a:9b:27:4e:95:f0:
8e:0c:99:5f:fb:49:22:b1:fb:95:67:70:b9:e6:67:
47:23:4f:ac:50:d5:4c:cf:d5:05:b3:c3:46:14:c9:
a3:22:32:65:0b:d1:c1:b2:b9:17:7e:c4:e6:83:9b:
68:56:7e:24:ab:66:af:87:b4:7d:7a:72:80:98:95:
a8:62:2a:66:78:d8:58:8a:af:54:a3:25:b9:33:49:
7f:a3:e8:2a:72:a1:eb:77:4a:2b:63:2a:38:9b:fc:
78:30:34:c3:a8:b0:56:5c:2d:8e:ce:e9:94:54:0a:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:80:C1:05:17:8D:F5:27:5B:E7:F9:82:35:32:2C:64:F6:A9:DB
X509v3 Authority Key Identifier:
keyid:73:64:63:C9:8E:E3:BB:EC:3A:E4:88:8D:E8:06:9D:AC:74:9A:51:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2RjyY7ju-w65IiN6AadrHSaUSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f9e4e7-fd78-4b86-a924-6f358070c358/1/c2RjyY7ju-w65IiN6AadrHSaUSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9c:ef:6e:7c:90:44:1b:4a:3d:31:1f:57:74:2b:b3:e9:eb:
cc:34:dd:b2:4e:3b:a2:e9:97:f6:f0:ba:2d:ed:c8:83:0c:31:
1e:cc:52:40:fb:5d:89:35:95:6d:86:b5:e1:d0:4b:71:c0:e2:
9a:38:0c:4b:80:78:93:dd:52:1c:1f:90:23:94:2a:92:aa:87:
80:1e:ec:9c:89:8d:75:bd:4f:6e:7b:7a:cc:1e:44:72:05:d6:
44:43:ce:41:29:d1:54:11:67:5b:f4:49:5c:ba:a6:05:a7:b9:
d4:ce:41:c9:07:b3:08:c8:e8:95:a6:62:f8:af:3e:b8:3a:f9:
27:d2:c8:0e:0a:07:99:1c:e7:86:da:f7:0d:05:3e:08:8b:95:
96:69:12:86:65:b6:02:8b:b1:09:f6:e1:e6:8a:fb:96:64:0c:
6b:f8:0f:b8:5d:25:78:43:f4:a0:c5:be:7d:a8:08:b5:7f:b1:
55:4c:e0:2c:fc:5e:2c:16:32:67:a2:33:be:a7:77:3b:7d:af:
b3:71:29:b0:5d:02:57:11:0c:20:a4:b9:1b:0a:db:36:65:23:
2d:0c:2c:16:35:92:c6:9b:15:3c:ad:b9:08:33:73:74:be:cf:
47:8a:21:b2:1c:3c:e5:67:01:59:c0:bf:7c:b4:1e:61:5e:85:
7a:a0:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:45 2025 by rpki-client on console-fra.rpki-client.org