Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: JtfMqOHvjW5kmRQuAswGq/UYhVwLRN05p4GEtW9Uv+M=
Subject key identifier: 94:9E:A6:1D:B5:D9:FA:1C:8C:28:0E:25:00:77:3B:31:26:A2:BE:F8
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019511D97BC9EE06CD7EE10550A3B13A40CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 03:00:20 +0000
Manifest this update: Mon 17 Feb 2025 03:00:20 +0000
Manifest next update: Tue 18 Feb 2025 03:00:20 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: FY7pY9I65a7CHWn6qObi9E/4+HmrArsBNvgnoeZ5Q30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:7b:c9:ee:06:cd:7e:e1:05:50:a3:b1:3a:40:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Feb 17 03:00:20 2025 GMT
Not After : Feb 18 03:00:20 2025 GMT
Subject: CN=949ea61db5d9fa1c8c280e2500773b3126a2bef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:68:a4:46:ef:5e:c0:e4:5c:f4:fd:3d:9a:
f5:b7:5e:c6:29:d0:05:a5:25:bf:48:25:72:15:f1:
dc:eb:05:5f:a8:b6:37:60:4e:3c:22:aa:bf:84:34:
19:61:72:ee:95:df:55:3d:84:59:c5:f3:78:4a:fd:
43:68:1f:ad:a4:65:d9:37:6e:b3:05:53:5b:1b:d8:
1c:88:ac:c0:1d:12:7b:bb:f7:81:70:55:fd:c2:9f:
8e:6c:a4:be:6b:f4:13:43:62:a4:a3:f7:2b:de:f4:
00:71:67:93:91:de:68:cd:48:53:2a:1e:47:c6:3c:
cc:de:91:23:ab:7e:03:cf:8f:14:bb:bf:33:c1:66:
a9:a8:27:8d:9a:4e:77:f9:70:83:77:7e:93:12:2d:
e9:bb:c4:ef:31:14:28:a9:a9:7e:3f:6b:f8:19:f1:
61:0f:30:fa:13:72:ca:e5:64:7b:0f:a4:9a:4e:d6:
c6:85:68:a3:58:d4:79:9c:6e:ba:f3:d7:a2:54:02:
15:0d:47:7d:1a:27:6a:cc:c9:98:9a:fb:2e:ea:66:
8d:e0:19:17:0e:c3:d2:72:b1:44:29:49:d0:18:e1:
28:66:97:fc:ec:ef:d3:1a:c1:3a:1f:41:b3:2a:55:
48:fb:95:c4:ed:c8:2b:f0:4d:07:c3:86:c8:0c:a3:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9E:A6:1D:B5:D9:FA:1C:8C:28:0E:25:00:77:3B:31:26:A2:BE:F8
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:8a:63:c0:46:b9:56:6f:64:e2:db:db:96:8c:40:d6:91:
05:32:58:de:3b:11:bd:37:50:e5:94:bf:7d:9b:ae:aa:d3:98:
8f:2e:34:90:a6:4f:8e:96:7d:f4:56:0d:5b:b6:ad:4b:95:1d:
3b:72:af:c4:62:67:9b:71:5b:29:1b:3e:9a:b3:58:61:e8:6d:
54:fd:8a:d3:09:f4:00:8a:5b:ef:0f:29:d8:d8:3d:24:47:a0:
2d:72:c0:ef:7f:07:8c:c3:65:4c:2a:ce:36:18:c8:4e:2f:33:
5e:ee:78:dd:df:19:90:92:6f:b7:6e:60:e9:b2:4e:58:95:19:
3c:9d:9f:da:8e:dd:f1:8e:52:1d:b6:58:10:33:92:8d:ef:ce:
5e:97:15:3a:97:91:e6:9f:b0:fd:7d:5e:92:95:d9:48:e0:74:
e1:08:ec:95:86:55:3b:55:d8:92:1e:44:bf:e9:90:92:9b:a7:
6c:fb:c6:5d:06:d5:fe:eb:98:85:ce:75:e6:97:14:93:f5:54:
1d:0c:97:13:42:3b:d0:26:bd:4e:c7:4c:4e:14:36:a2:b9:60:
ac:68:0b:10:83:07:71:4b:2b:e3:3c:7b:1d:12:ab:f4:03:e6:
36:f1:52:71:13:91:81:68:ba:90:c0:3e:b9:54:ee:70:2c:66:
92:51:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:29 2025 by rpki-client