Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
File: aq57yNMxY8xLbdoXGjh_-YAioPY.mft (raw, json)
Hash identifier: OuFSmFBFgnnERXmjEjtEnfqBZt8emNsaScz1m4+Dg/Y=
Subject key identifier: 0A:E9:AE:31:9B:8C:C8:E1:EA:62:0E:56:EB:68:3D:D2:BF:7A:76:E9
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 019511D95FB3C812630FB190D5CBF4070441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
Manifest number: 1252
Signing time: Mon 17 Feb 2025 03:00:13 +0000
Manifest this update: Mon 17 Feb 2025 03:00:13 +0000
Manifest next update: Tue 18 Feb 2025 03:00:13 +0000
Files and hashes: 1: aq57yNMxY8xLbdoXGjh_-YAioPY.crl (hash: 8mgca/N/fOWcpPG0qBudGbYRwmijy0+KaP44YPIENLc=)
2: gQqJELq1-EV3FBRQEAYd71OCUP8.roa (hash: bKz/Il/boauhNtFoORiL2V0u7PFpV3gpz4FiQkcwVo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5f:b3:c8:12:63:0f:b1:90:d5:cb:f4:07:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Feb 17 03:00:13 2025 GMT
Not After : Feb 18 03:00:13 2025 GMT
Subject: CN=0ae9ae319b8cc8e1ea620e56eb683dd2bf7a76e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:dd:8c:ae:f2:5a:ae:8f:02:44:33:c4:32:
21:80:3c:0b:50:83:9d:42:b4:70:22:f9:96:91:d0:
b8:b4:99:e5:53:2a:0d:74:c4:fc:05:21:69:f1:e5:
f5:d8:eb:fd:df:ff:93:7c:5c:1e:ac:14:4e:2b:0d:
42:37:88:63:43:a7:3e:3d:f1:bd:cf:68:6a:15:3b:
82:d3:d9:76:16:c6:73:24:f7:ea:28:5a:84:ab:06:
17:2e:2f:d7:97:f3:ed:ec:e4:b7:e7:62:0c:07:ed:
73:58:22:8d:c1:11:1a:ce:41:35:e9:55:9b:42:ba:
4c:6a:53:92:3e:bc:94:3e:a2:76:7e:e3:ea:92:4e:
93:86:c8:22:2f:fb:a5:76:d0:64:59:b7:8c:1d:28:
08:c5:e5:12:9d:06:fe:94:b5:0f:10:93:63:e6:e7:
82:ef:f9:df:e0:7b:fd:6b:a5:bc:32:0d:f0:43:a4:
3f:9e:0e:9c:f2:68:d2:b7:55:b0:61:7a:3b:02:b0:
74:43:07:4a:2d:60:42:fe:92:bd:0c:70:27:d5:25:
44:8f:b9:fa:43:0d:ac:0f:db:5d:47:19:af:de:f6:
32:ed:8c:63:a8:97:64:29:97:46:f1:6b:2c:3b:92:
6d:1e:90:18:d1:31:3e:22:25:9e:d9:31:0c:77:60:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:AE:31:9B:8C:C8:E1:EA:62:0E:56:EB:68:3D:D2:BF:7A:76:E9
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:05:ef:4b:cb:0e:87:ea:fb:e4:f5:af:c3:f6:67:73:6b:
75:37:5e:82:e5:70:d4:15:9c:0d:02:cb:1e:28:ba:57:83:37:
bc:1e:ab:17:74:4c:49:42:ed:aa:b8:f5:7d:89:57:e8:3f:b0:
07:32:13:65:a1:a0:e2:04:e1:33:7e:ec:6d:f8:c4:be:42:31:
6d:56:a6:79:47:d8:7a:a2:aa:7c:7e:25:67:5f:61:6c:58:cd:
6f:86:47:19:36:6d:b8:01:42:3c:8d:48:05:80:55:ab:82:cd:
2c:ad:b1:d6:fc:c3:ee:0d:91:1b:88:0b:b8:7d:2b:c1:27:06:
81:b2:1e:1e:7f:bf:fe:51:7e:1f:73:2c:ab:8c:c1:a1:7d:b5:
2f:3d:08:47:8c:e6:0e:b8:c8:b1:1b:75:4d:97:7a:b7:1a:45:
08:be:6f:57:5c:20:db:4b:3b:f1:04:5c:ca:86:ba:28:05:5b:
8f:4c:07:7f:94:8d:ef:87:bd:8e:1e:91:79:c0:42:0d:57:f5:
e5:78:4f:b9:a4:27:c6:67:85:d2:e2:a4:2e:5e:69:f0:71:f2:
bc:10:af:46:89:fe:f9:eb:4c:12:59:04:49:18:09:b9:fe:29:
c3:78:04:37:9e:ad:ea:e8:41:6a:17:e8:2d:c0:5b:50:5e:89:
4d:8b:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:36 2025 by rpki-client