Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier: AByOqoEJjc2rDULcocE6s5UAKwv78qfFycKtc9eBCOU=
Subject key identifier: 6C:67:84:30:2F:AD:0D:AD:FE:2E:01:42:2C:32:F9:94:2B:FE:3F:9B
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial: 01951210697CE5D21E5E21EF0C50707A979A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number: 0D3E
Signing time: Mon 17 Feb 2025 04:00:20 +0000
Manifest this update: Mon 17 Feb 2025 04:00:20 +0000
Manifest next update: Tue 18 Feb 2025 04:00:20 +0000
Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: OTdPtYJvhxxrPEagpYMxXTNzExT+3LLI7hEjmJVftho=)
2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:69:7c:e5:d2:1e:5e:21:ef:0c:50:70:7a:97:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Validity
Not Before: Feb 17 04:00:20 2025 GMT
Not After : Feb 18 04:00:20 2025 GMT
Subject: CN=6c6784302fad0dadfe2e01422c32f9942bfe3f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:8a:9c:f1:a2:1a:d0:d9:cb:f7:c1:63:b9:
91:4f:9a:86:d4:7b:73:70:3b:40:bd:d0:ca:99:75:
fa:8e:08:4c:00:dd:46:d4:c4:36:15:95:2e:67:e1:
14:1c:22:0d:43:09:62:26:b7:1c:aa:0f:7e:60:b3:
c1:63:af:86:5a:23:72:75:1e:ab:1a:cd:12:ec:44:
43:69:7b:81:14:11:3d:ee:42:20:78:e9:84:d4:13:
49:3d:28:6b:54:35:33:11:fd:70:39:ce:ee:6e:a4:
2d:f8:40:54:c8:59:55:01:db:d2:3b:cc:eb:a0:60:
a9:76:e0:0f:4f:1a:ec:ca:f7:81:85:77:2c:89:7e:
71:83:87:28:4f:5a:5e:aa:f5:37:bb:0f:3f:6e:84:
96:fc:34:15:db:22:17:55:31:69:2c:1e:fb:c6:70:
b3:24:06:fc:3f:d5:d9:d5:94:67:9a:cf:75:ff:a3:
d2:37:7e:c5:57:93:f5:f9:6b:99:66:d0:3b:37:f1:
44:57:c2:4a:b4:52:52:62:7a:5d:c1:82:6e:7f:59:
ff:f0:c5:c3:1e:58:ce:70:41:73:17:4b:19:71:b3:
26:32:ff:48:82:23:d9:76:39:10:eb:1d:e7:c8:d5:
1d:28:27:6e:37:ad:1c:8d:37:4c:f0:38:34:08:ca:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:67:84:30:2F:AD:0D:AD:FE:2E:01:42:2C:32:F9:94:2B:FE:3F:9B
X509v3 Authority Key Identifier:
keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:04:f1:9d:a0:e5:b6:20:93:8f:df:cb:d9:74:7e:7a:34:e9:
2a:34:4f:9c:38:5b:4a:65:9b:36:79:bd:14:50:7f:8a:cf:f5:
25:3b:f7:04:88:de:ad:46:e0:2d:ca:f6:27:d5:0d:c4:da:64:
9e:25:77:f2:a4:a7:14:30:76:94:d3:f8:88:4c:d5:b1:20:43:
ea:b6:35:50:e4:bc:52:e4:1b:b5:a8:73:e8:a3:8e:2d:34:0f:
21:28:01:e3:d9:ec:9b:99:20:76:f5:c0:7d:6d:b3:6e:c6:49:
ec:39:4b:d7:07:9a:b3:fb:e7:65:63:27:d7:57:d6:0d:27:9c:
91:5d:22:07:a2:e2:28:e3:e6:62:b4:35:f1:74:e3:ca:46:c4:
cf:c0:af:7a:8d:36:a6:99:e0:b7:6f:92:de:90:2b:0f:f9:61:
09:f9:b0:d5:bf:b2:91:4b:13:e4:f4:c9:4e:ed:d0:43:45:db:
ff:49:df:41:8c:1d:be:6c:84:b2:f0:2a:59:3b:97:f8:6d:d7:
8e:ee:0f:aa:35:b2:d0:6a:94:ce:f9:32:60:a4:09:32:63:2b:
8f:cb:a5:7e:ef:35:95:e6:f6:f0:99:50:66:08:32:a0:a8:ad:
0a:cc:db:f0:84:6b:96:04:46:f7:c1:62:4c:9f:a8:19:ee:37:
9a:9c:eb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:52 2025 by rpki-client