Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: ETNBgGGjeUlM56i2FE365UEGciQEAEmB63HqhRmHYkU=
Subject key identifier: 67:56:11:25:96:93:BF:D1:61:80:89:B6:7B:47:0D:3B:87:7C:5D:DA
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 0195121044068F8EC8CC79493016D948CFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 06E6
Signing time: Mon 17 Feb 2025 04:00:10 +0000
Manifest this update: Mon 17 Feb 2025 04:00:10 +0000
Manifest next update: Tue 18 Feb 2025 04:00:10 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: ImSGz6wXbrqWKtvwqXxP9Sx5hzuyUybb9molCHJZjk4=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:44:06:8f:8e:c8:cc:79:49:30:16:d9:48:cf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Feb 17 04:00:10 2025 GMT
Not After : Feb 18 04:00:10 2025 GMT
Subject: CN=675611259693bfd1618089b67b470d3b877c5dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:40:36:5c:4a:3d:50:d6:65:d8:08:f1:62:
51:8b:6d:71:a4:9f:d8:6e:be:12:e3:43:d6:27:66:
39:34:35:e9:4f:cc:5a:bf:2b:af:5f:bc:1e:ef:92:
21:47:f5:e7:ca:32:5a:7d:bc:8a:70:c5:25:d7:e5:
b5:d0:59:1f:0b:2c:6c:5a:77:6f:3c:6c:91:31:9a:
6c:c8:48:79:d8:ec:49:71:cb:24:c3:67:ea:29:56:
90:77:33:f4:5c:da:31:8f:f8:04:e8:62:22:7c:4d:
d0:53:53:d6:de:00:27:c5:83:50:0b:91:15:05:f8:
df:13:16:f8:99:ee:0e:ce:cd:a5:5a:57:9c:cc:19:
13:33:92:15:7d:b4:b1:79:56:ff:04:54:2f:6d:45:
cb:a1:a6:94:04:32:bb:e0:1b:74:e3:c1:07:5b:21:
1c:4f:d7:55:9a:7b:91:28:34:a3:8d:c5:eb:9a:ca:
4b:0a:fb:22:0d:b0:1e:15:3b:5a:84:37:4d:b8:af:
f8:8c:70:11:23:7c:2f:d6:81:15:77:2b:a5:c8:ca:
3d:14:e4:77:30:3b:17:29:0b:a4:88:10:f7:bb:2e:
ad:0a:74:c3:07:ff:ef:28:b7:07:99:51:8f:e8:77:
8d:db:cb:bf:d8:3f:7e:fe:78:7b:58:08:11:3c:ab:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:11:25:96:93:BF:D1:61:80:89:B6:7B:47:0D:3B:87:7C:5D:DA
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e4:11:52:9a:22:e3:1a:f3:56:f4:a4:19:0b:ef:ab:86:64:
5e:9a:32:f2:d3:d0:86:02:72:ef:3f:a7:8b:17:59:0d:d9:da:
f8:74:dc:28:72:5e:b9:8d:05:74:e8:06:2c:0c:af:c4:c1:16:
2c:ed:e3:64:bd:71:c4:f0:18:e7:d6:06:1f:4a:f3:51:3f:ab:
42:35:dc:8b:91:8e:c1:d6:d2:10:52:c8:07:43:55:00:3e:c6:
45:d8:84:3e:71:af:b2:3f:df:7c:1e:60:ab:f7:cf:3c:21:35:
2f:0d:c6:6d:ec:7d:43:c4:3f:05:11:7b:4e:2f:fa:6f:51:09:
87:de:f7:19:83:09:4a:b9:8c:b1:b7:ca:32:de:10:ff:42:c7:
b4:2f:c7:18:1e:47:ba:42:fb:07:ac:91:96:a7:3b:4d:15:33:
36:6b:fe:68:ee:35:67:61:61:62:db:96:38:27:b9:81:10:f0:
8f:05:c0:07:38:f8:0d:bc:64:1d:dc:4a:7d:d7:73:e8:b8:b1:
48:e5:00:af:b3:fc:bd:da:b5:3f:d4:50:11:da:36:8a:58:6a:
20:43:3f:67:97:9e:0e:84:82:f3:5b:8e:c6:b0:0a:0c:dd:23:
5f:e5:68:06:e1:f1:45:ec:45:fd:b4:c1:09:31:40:20:9b:ce:
8b:ca:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:56 2025 by rpki-client