Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: EXIXE10GaxrVan4rSLs6SYTWVA8qfgA5ZTBBjzHsW5A=
Subject key identifier: 5F:BE:2D:F8:39:7D:6B:3A:13:33:8B:D5:5C:8F:13:BC:30:00:43:01
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 0194BB291BC4BA3C5B645B0EE98DD889FD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 07:00:20 +0000
Manifest this update: Fri 31 Jan 2025 07:00:20 +0000
Manifest next update: Sat 01 Feb 2025 07:00:20 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: 2x1eOpkpIM1MDnnOEO8DW7PGApAILymMhxC2KtMPU20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:1b:c4:ba:3c:5b:64:5b:0e:e9:8d:d8:89:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Jan 31 07:00:20 2025 GMT
Not After : Feb 1 07:00:20 2025 GMT
Subject: CN=5fbe2df8397d6b3a13338bd55c8f13bc30004301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:0f:c1:22:42:2d:88:b6:a0:ae:aa:4e:ef:
c0:bf:85:ed:4f:cf:77:4b:5d:15:a6:37:04:82:b7:
1b:64:89:95:53:66:e0:3a:b8:5d:6a:fa:0b:76:d3:
0c:84:d3:6c:9d:50:2b:b4:43:5c:53:e3:25:b4:66:
2e:8d:05:7a:94:16:cd:aa:dc:a3:31:37:04:af:93:
f8:0a:38:f9:83:de:24:88:99:a6:55:4a:61:2a:7a:
90:45:ae:f7:66:45:52:09:ef:f2:73:a1:96:91:f5:
f6:2f:fe:e7:62:7a:06:69:6b:4a:43:56:40:fc:28:
18:d3:50:b3:23:86:4b:7d:cb:17:15:e7:b6:e0:ba:
79:3d:43:9f:88:e4:3c:2c:fe:e9:06:fb:cc:e3:68:
6b:c3:0a:6d:f9:cf:6e:a9:79:b3:2f:12:3a:1b:2c:
5a:fe:01:9a:23:c4:e4:be:36:de:ef:f1:00:cd:da:
24:be:c1:dc:fe:74:ee:a6:28:0d:4b:e5:aa:b2:62:
3b:c0:1d:64:81:8d:29:4f:f6:cd:73:21:21:f5:52:
8b:19:eb:1b:14:49:ef:c8:01:5a:a2:20:ee:a8:7a:
7c:85:4f:b1:70:e0:69:c7:57:c1:59:3b:84:a4:1e:
5d:7f:41:b4:b0:19:82:09:9b:4b:23:da:d5:a6:37:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:2D:F8:39:7D:6B:3A:13:33:8B:D5:5C:8F:13:BC:30:00:43:01
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d9:3c:a4:5e:7c:fb:09:c7:0c:6b:67:0a:43:49:e8:4a:e6:
c5:ec:64:32:78:ba:a6:39:9d:ae:4a:bc:56:a1:45:94:f4:63:
21:9e:d6:d3:5c:02:a1:86:8b:d4:54:7f:ff:eb:47:49:43:24:
56:51:d6:83:85:d6:c1:24:33:f1:c3:e4:42:a4:c7:90:0f:5e:
25:02:cc:2b:f2:2f:6f:33:1c:56:aa:5c:10:87:e2:93:99:d6:
03:5b:ab:b9:96:01:fe:ba:9a:74:cb:c2:bd:8b:fc:eb:6d:32:
6d:85:60:35:79:ae:f9:44:9d:a8:a7:d0:37:46:8b:6f:36:26:
45:92:79:4e:e2:d8:7b:47:91:d2:b9:ba:f7:31:79:de:d4:e5:
47:84:10:76:30:dd:8c:0f:27:2f:9a:88:5d:cc:40:82:11:70:
5e:7c:7b:10:71:a4:63:4a:d9:58:34:15:20:fe:df:b8:e5:d4:
37:8e:7a:2a:22:e2:d3:c4:71:86:a8:ee:14:f5:18:af:03:77:
cc:fb:99:0d:a8:af:86:ef:69:2d:ed:3b:7a:eb:e9:77:7e:5b:
d6:82:7a:0e:49:26:40:a3:e0:76:79:34:0f:b6:ca:41:f1:1c:
18:27:cc:87:3c:74:2c:c1:e7:0a:4a:56:ae:cd:d0:fb:4a:2f:
76:45:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:48 2025 by rpki-client on console-fra.rpki-client.org