Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: ngZjgm4rt+OLUAYqxd+XCWvBPchFG2ig5X9gJpvP9VY=
Subject key identifier: 6A:76:B5:86:13:D1:7E:DA:F0:17:4D:56:21:07:25:5A:A6:3A:1C:55
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019511A24C6B2CAF70D702FF91D19019A48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0B11
Signing time: Mon 17 Feb 2025 02:00:03 +0000
Manifest this update: Mon 17 Feb 2025 02:00:03 +0000
Manifest next update: Tue 18 Feb 2025 02:00:03 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: 5NwTjBskJyyFiuhwOlqRnqhCJz8uoJx9Bd1l+ndOumQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:4c:6b:2c:af:70:d7:02:ff:91:d1:90:19:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Feb 17 02:00:03 2025 GMT
Not After : Feb 18 02:00:03 2025 GMT
Subject: CN=6a76b58613d17edaf0174d562107255aa63a1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:7b:c3:c9:89:a9:97:6b:79:94:68:ad:8c:
46:b9:0a:ab:c3:a3:db:3d:8b:e6:89:bb:57:b7:49:
ee:5d:34:a9:4a:dd:6f:d3:30:e8:09:0a:63:e8:28:
37:b3:3b:34:4a:8e:da:f3:4e:bc:0b:d9:82:3e:df:
fc:10:e5:46:a3:1e:8e:e1:44:84:6c:fa:d5:49:f5:
2b:53:85:77:04:ef:da:96:59:90:66:ef:b1:bd:d5:
f7:be:bb:ba:06:66:fe:91:45:af:05:e3:35:5b:d2:
d9:00:79:36:b7:b6:0e:5f:77:0a:bc:fa:2a:9e:fa:
2e:9e:54:4d:92:72:e8:cf:2f:32:6e:bd:5d:d8:3c:
0a:18:80:38:40:3a:5c:6e:3f:1f:fc:95:d5:f9:05:
45:e8:37:d5:ec:51:ea:68:4c:15:58:7d:7c:24:64:
f8:70:75:20:d9:63:ee:f9:52:80:7c:f1:34:b9:d6:
0f:e7:9c:89:a2:47:ae:d6:0e:21:b6:33:28:c7:a6:
4e:c3:ee:9e:b2:87:5c:4d:9a:e5:3a:e0:15:fd:2c:
b2:77:df:9d:bc:64:72:14:1a:c5:96:cb:d5:13:3f:
07:e8:53:ec:2c:7b:b9:20:c0:d1:fa:b8:f8:26:11:
6e:1a:b7:0b:0f:3e:db:e8:b8:49:3e:ac:f0:8d:83:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:B5:86:13:D1:7E:DA:F0:17:4D:56:21:07:25:5A:A6:3A:1C:55
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:13:04:d0:a2:26:6b:56:b3:4b:3b:eb:e5:dd:9b:d9:1a:2e:
6a:65:2b:5a:1d:f8:76:b1:9f:26:6b:86:43:ed:be:a4:bb:78:
3e:79:c7:f1:c5:6e:7b:9f:19:6e:c4:2a:ae:e1:61:74:9a:57:
94:f7:3c:ba:ad:3f:5c:3d:ce:3b:68:8f:22:11:9a:a4:d9:1c:
fb:e7:7e:33:a8:7c:af:ec:74:75:d0:77:db:c0:69:cb:a3:ae:
6d:4e:d4:a5:70:d8:50:f4:c3:4f:9d:0a:7b:ca:48:0b:ba:41:
b2:ec:a8:60:11:05:74:2e:75:79:97:5d:d6:0b:41:98:11:4f:
03:7e:5d:e6:21:ba:e4:96:41:56:63:27:02:0e:14:e9:94:27:
3e:12:de:48:dd:cd:68:92:0b:e7:6f:d3:1d:8a:ef:a1:54:89:
ff:e1:95:25:52:0a:10:eb:4e:2b:cd:04:74:40:ee:4b:ff:99:
51:c2:df:cb:22:9b:eb:d3:f3:6b:5a:90:a2:e5:91:33:d9:f3:
8e:8c:64:6c:67:23:55:ee:2a:3c:a6:79:48:ff:76:aa:94:e0:
22:05:af:ce:d7:44:f7:ed:a7:b0:88:82:2f:27:b5:b4:30:f4:
c4:74:af:96:c3:be:eb:a8:82:96:6c:6e:c0:c5:33:e2:fa:61:
52:f5:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:36 2025 by rpki-client