Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File: 6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier: 6L79Dzz/PhbQrsqGSmzKtGyiQUy/JZDlcqVRWUw6X3k=
Subject key identifier: AE:A9:38:CF:15:52:6A:B7:09:3A:69:13:46:7F:99:DA:98:6B:28:7E
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer: /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial: 019511D99BD1381656BFE6814A33B1E99548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number: 02D7
Signing time: Mon 17 Feb 2025 03:00:28 +0000
Manifest this update: Mon 17 Feb 2025 03:00:28 +0000
Manifest next update: Tue 18 Feb 2025 03:00:28 +0000
Files and hashes: 1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: vk6kTKAFXvNMhloPeVk8r9wPEYhX2QWkRtCCDa2CmQc=)
2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:9b:d1:38:16:56:bf:e6:81:4a:33:b1:e9:95:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Validity
Not Before: Feb 17 03:00:28 2025 GMT
Not After : Feb 18 03:00:28 2025 GMT
Subject: CN=aea938cf15526ab7093a6913467f99da986b287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:f3:7f:2d:c7:d7:6e:68:73:2b:1d:ad:a0:
19:a2:51:65:a6:29:ec:22:58:12:fb:1c:63:c6:bf:
1c:e6:59:18:71:51:61:af:b3:2d:ed:e3:96:d1:cd:
0d:59:b8:c8:fb:2f:e3:78:65:ee:85:ba:89:64:ed:
6a:a4:c4:8c:55:37:11:87:fe:39:9c:85:e6:b7:2c:
51:54:04:0f:bb:df:b4:f9:25:41:9f:d8:bc:b7:ff:
32:1d:71:c7:86:16:1a:1c:cb:a1:a3:74:0e:16:e4:
7b:e9:74:88:da:fe:23:4f:81:24:06:c4:77:81:1e:
b0:0d:1f:d4:b2:dd:7f:48:24:a3:ac:19:d1:f9:64:
d1:a8:1d:bb:b0:d4:ec:59:6f:2e:71:61:80:dd:0a:
e7:28:c5:c7:91:07:8b:48:06:b5:d4:33:b7:87:f9:
ef:c7:bc:41:5f:58:37:9a:ca:66:64:29:6f:4d:46:
9a:3e:1a:1e:26:f5:1e:48:82:9e:ec:da:37:25:98:
4d:d6:5f:8c:d5:f5:2c:a7:91:47:55:9d:59:b2:ab:
00:b7:e0:02:34:a8:09:b9:2c:c1:c7:b0:9b:09:83:
b9:4b:0f:d0:d2:0a:86:6e:85:19:e4:8d:d6:3b:ef:
77:dc:35:d7:80:d8:77:c3:e8:51:87:d1:c6:b5:b0:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:38:CF:15:52:6A:B7:09:3A:69:13:46:7F:99:DA:98:6B:28:7E
X509v3 Authority Key Identifier:
keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:92:10:dc:05:96:6d:70:d8:d1:a5:8a:cd:c8:77:55:04:e9:
2a:3f:7c:b5:f3:c4:f2:3e:1a:e9:82:fe:6e:91:b3:26:bb:84:
6e:65:5b:f7:32:59:15:7c:f3:db:70:1a:ba:be:44:1d:e6:a5:
42:b5:f9:34:cb:d4:aa:2b:9b:47:8c:ea:9e:39:77:82:62:46:
a1:1e:23:13:8f:39:ed:ad:6e:d2:54:c6:5e:27:e9:a9:9b:9b:
fe:bb:c9:97:fc:48:08:4f:54:40:cd:6d:d5:4b:d5:a3:b9:58:
ac:4f:59:91:c8:f6:15:30:66:64:88:5f:1f:32:12:74:cf:d6:
72:d5:3f:dc:74:c4:90:b3:e8:db:b8:ea:79:ab:ac:3d:95:1c:
6c:d5:3e:4a:a3:87:d2:bc:25:41:4d:36:51:7f:3d:38:93:98:
e9:36:cf:7d:62:4c:64:8e:69:54:a9:19:0d:7c:0f:ab:a2:a9:
a9:5b:e3:e0:08:07:38:04:e0:47:13:f1:51:e2:ce:45:6c:c2:
e5:80:3b:e2:7b:cb:ba:c3:ab:e0:73:9a:4c:d6:14:4c:63:60:
d4:10:84:35:ab:15:e2:0b:1c:f2:27:78:f6:11:28:39:c8:3b:
f4:1c:c9:a1:7b:8f:4d:e6:48:82:5a:88:b5:6e:8d:e3:fe:50:
26:1a:a6:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2ZvROBZWv+aBSjOx6ZVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzBiNWQ3ZDdjYWY3ZWY0ZDM1NTVjMGQ5MGU5NWQ3YmY4
NmU2MDYwHhcNMjUwMjE3MDMwMDI4WhcNMjUwMjE4MDMwMDI4WjAzMTEwLwYDVQQD
EyhhZWE5MzhjZjE1NTI2YWI3MDkzYTY5MTM0NjdmOTlkYTk4NmIyODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCjzfy3H125ocysdraAZolFlpins
IlgS+xxjxr8c5lkYcVFhr7Mt7eOW0c0NWbjI+y/jeGXuhbqJZO1qpMSMVTcRh/45
nIXmtyxRVAQPu9+0+SVBn9i8t/8yHXHHhhYaHMuho3QOFuR76XSI2v4jT4EkBsR3
gR6wDR/Ust1/SCSjrBnR+WTRqB27sNTsWW8ucWGA3QrnKMXHkQeLSAa11DO3h/nv
x7xBX1g3mspmZClvTUaaPhoeJvUeSIKe7No3JZhN1l+M1fUsp5FHVZ1ZsqsAt+AC
NKgJuSzBx7CbCYO5Sw/Q0gqGboUZ5I3WO+933DXXgNh3w+hRh9HGtbA48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6pOM8VUmq3CTppE0Z/mdqYayh+MB8GA1UdIwQY
MBaAFOjAtdfXyvfvTTVVwNkOlde/huYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEt
MzU4MjBmNTFjNTc4LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNDczMWMtYThmZS00YTBiLTk5MWEtMzU4MjBmNTFjNTc4
LzEvNk1DMTE5Zks5LTlOTlZYQTJRNlYxNy1HNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipIQ3AWW
bXDY0aWKzch3VQTpKj98tfPE8j4a6YL+bpGzJruEbmVb9zJZFXzz23Aaur5EHeal
QrX5NMvUqiubR4zqnjl3gmJGoR4jE4857a1u0lTGXifpqZub/rvJl/xICE9UQM1t
1UvVo7lYrE9Zkcj2FTBmZIhfHzISdM/WctU/3HTEkLPo27jqeausPZUcbNU+SqOH
0rwlQU02UX89OJOY6TbPfWJMZI5pVKkZDXwPq6KpqVvj4AgHOATgRxPxUeLORWzC
5YA74nvLusOr4HOaTNYUTGNg1BCENasV4gsc8id49hEoOcg79BzJoXuPTeZIglqI
tW6N4/5QJhqmBA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:31 2025 by rpki-client