Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: 74NGCupi1zkP1cwiPAM42vRneSVfy0+Vby7x/Y7Oghc=
Subject key identifier: 83:2B:2B:F4:A6:B9:7C:9A:7D:E2:CD:A4:B2:C4:2E:43:B2:60:18:26
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 019510C7EDF469A9B5127B9CC1A5F8F1FE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 0F36
Signing time: Sun 16 Feb 2025 22:01:32 +0000
Manifest this update: Sun 16 Feb 2025 22:01:32 +0000
Manifest next update: Mon 17 Feb 2025 22:01:32 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: SckAX9OfM+VVfDPiaGn65bsb+ukIOgErlbDQe7WGx/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:ed:f4:69:a9:b5:12:7b:9c:c1:a5:f8:f1:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Feb 16 22:01:32 2025 GMT
Not After : Feb 17 22:01:32 2025 GMT
Subject: CN=832b2bf4a6b97c9a7de2cda4b2c42e43b2601826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:a6:7e:f0:01:0e:29:81:eb:e2:f4:b9:2c:
a1:80:2f:a0:2e:8c:e0:b5:77:0c:f8:df:df:fe:cd:
bb:96:1a:2f:38:e1:19:e3:ef:3e:80:b7:89:49:ed:
25:f0:42:7c:39:a4:dd:fc:a5:20:6c:4e:f1:cd:0c:
45:8f:bb:af:70:b1:e8:4d:d2:4f:19:be:4f:df:34:
22:a4:d3:1c:7e:2d:1b:3a:3d:46:bb:74:be:1d:52:
1c:69:3b:13:d9:bb:cb:37:07:c9:13:d0:75:82:d9:
5a:09:3e:c8:5a:98:31:ed:fe:e6:18:54:ff:c3:b0:
6e:80:07:af:c0:a6:c0:64:ba:3c:72:70:b3:ef:de:
7b:d9:b7:f5:27:74:ea:45:b0:18:a2:20:f6:82:b0:
11:c3:f4:cf:41:5e:98:b9:8a:52:80:5f:04:17:c2:
73:e7:78:43:f2:e3:18:bd:f6:eb:cb:6b:3d:5a:b4:
a2:5c:46:c1:61:f2:5f:8a:eb:ce:06:23:2c:07:63:
30:0f:18:d6:84:88:01:a3:36:ca:2d:46:fe:e0:16:
e7:5a:04:0a:7b:f4:62:27:fe:d3:6e:50:85:e4:3d:
00:d0:8b:77:2e:63:93:8b:16:b6:7b:16:a5:a9:71:
4a:de:36:ab:a1:ac:e0:89:f5:e3:e2:25:22:83:43:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:2B:F4:A6:B9:7C:9A:7D:E2:CD:A4:B2:C4:2E:43:B2:60:18:26
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c1:bd:80:a9:08:72:2d:43:f1:19:9b:b0:31:7c:e8:36:18:
41:1a:5c:2b:42:85:7b:4b:9d:0f:51:61:39:b1:b7:79:b2:34:
5e:9a:bc:a7:08:a8:6f:c0:b4:34:0d:b8:19:e7:6d:17:3c:59:
45:a7:07:47:60:e7:99:c8:99:d3:2f:ce:0e:6c:92:5d:0a:70:
91:6e:6b:35:1c:b3:7d:d1:ef:b5:d4:89:74:3e:1b:c0:70:4f:
b5:c9:6e:05:e3:b9:b3:be:e8:f9:d3:3a:4f:c6:83:34:11:a9:
95:23:2a:3e:55:cc:a1:70:84:06:16:7c:b2:b9:32:37:12:b7:
14:0b:80:21:74:7a:31:e2:48:fd:a6:17:11:8c:ad:b3:be:aa:
92:91:2d:61:99:0e:a3:57:cb:99:3c:47:63:4f:72:90:45:6f:
b9:61:78:7c:29:ab:8b:33:b3:f5:02:7f:1c:c2:42:fe:7d:a4:
dc:05:61:65:2c:6d:ec:ce:ee:20:5e:ba:6e:5b:f4:02:a1:59:
e0:67:f9:72:5d:73:c2:02:cd:94:30:85:3e:30:45:90:27:1c:
fe:91:6b:85:ea:2a:53:b9:31:b3:0c:e4:b0:a2:c9:7c:46:1a:
f3:41:bd:47:73:ab:4a:10:7d:d7:9a:da:14:fb:88:86:7a:d8:
22:5a:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:44 2025 by rpki-client