Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
File: ayKtTPZHpItjH_hPIn6gJSEwVS0.mft (raw, json)
Hash identifier: sI1NrV+TEFXZQznP+7woe/ruN8In7BAYYMLxgloNaZM=
Subject key identifier: 35:B2:99:D0:2F:33:F4:2F:FD:EC:6D:B3:CE:07:6B:C7:1F:21:ED:25
Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Certificate serial: 0195121083A9A9845D50B21C5BE8942D271E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
Manifest number: 10CA
Signing time: Mon 17 Feb 2025 04:00:26 +0000
Manifest this update: Mon 17 Feb 2025 04:00:26 +0000
Manifest next update: Tue 18 Feb 2025 04:00:26 +0000
Files and hashes: 1: ayKtTPZHpItjH_hPIn6gJSEwVS0.crl (hash: fTkBIrrzKuGRIm8Jcz84jVIyOklyHfqMly14vM3wdt8=)
2: sKAD-zz-BRWYNXUbPUkAH8zshko.roa (hash: EDXKNxmjLcm1f7Z+fC9VrUm9WnMWvsfY7cjn8s/MMDI=)
3: sTJ8g6TTY2UuXfLwNf59KxMe0Ck.roa (hash: +jqZMtdreDLK//f5JbKCQ0ZFiAghZAZLwWdEli3rEUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:83:a9:a9:84:5d:50:b2:1c:5b:e8:94:2d:27:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d
Validity
Not Before: Feb 17 04:00:26 2025 GMT
Not After : Feb 18 04:00:26 2025 GMT
Subject: CN=35b299d02f33f42ffdec6db3ce076bc71f21ed25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:d4:92:a3:8b:2e:e6:2f:dc:33:b6:ef:82:
82:a5:ed:2e:6a:ab:ac:a9:00:14:07:e5:29:e0:ab:
65:71:89:b6:da:d9:15:d8:a1:04:38:c1:b7:ce:93:
8d:1b:fc:b1:c8:ad:ac:5e:c1:f3:9d:22:a1:72:c5:
f1:c9:d8:8b:52:b3:5d:df:22:a7:d0:9a:e3:bb:2f:
99:da:58:9c:4f:63:70:1d:c7:5a:d6:a0:09:8e:18:
ec:c6:1e:53:db:7e:14:d0:04:14:40:b7:99:d9:c1:
d4:11:b4:bf:12:e2:e2:3f:f6:cb:8f:80:35:96:18:
7c:80:7f:04:8d:db:1f:ce:ed:f3:6e:f2:33:74:89:
34:cd:78:1d:8e:95:20:ab:1f:4a:89:18:ff:76:d4:
3c:07:b5:99:09:e8:c9:b5:e0:14:7d:08:18:1e:53:
29:c9:00:af:71:3d:ca:c6:fc:e9:5b:ed:22:fc:69:
ba:42:bf:2e:96:82:94:85:6b:41:bd:f5:92:fa:f9:
4d:01:0a:95:04:e5:8f:4e:be:95:5d:47:dd:b5:5e:
bd:a5:ba:92:f3:4c:07:f8:09:10:6d:57:82:24:4e:
85:7c:c4:a2:c9:ed:4a:30:03:2d:7b:d7:6e:87:a1:
83:b9:ce:38:75:67:7c:1b:0e:11:d7:0d:70:aa:7e:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B2:99:D0:2F:33:F4:2F:FD:EC:6D:B3:CE:07:6B:C7:1F:21:ED:25
X509v3 Authority Key Identifier:
keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:11:15:e2:5a:4d:96:0f:fd:da:61:09:fd:39:0a:9f:6d:
51:fb:d7:1d:1c:e1:8c:dc:fb:b0:a7:e4:cd:c6:e8:94:5b:72:
dd:df:58:76:8a:dc:6b:f8:64:2a:5a:da:dc:13:3d:12:86:03:
04:a9:6e:77:dd:e8:e1:57:ae:1d:07:e6:7c:cb:e6:8c:9d:83:
69:40:36:d5:f9:57:60:6a:62:22:56:dc:95:64:6b:a3:34:4a:
36:40:a5:b8:f7:8b:b7:34:66:a7:32:23:bb:ad:95:2e:28:6e:
1f:69:65:d9:5b:07:c2:5d:e3:41:cd:a4:fa:c7:6f:58:55:59:
4d:85:fe:6a:f7:ef:de:f4:b6:f6:15:90:aa:e9:b4:95:08:49:
59:51:f6:89:4f:6c:fd:41:7f:44:4d:67:16:66:19:81:a5:46:
83:5e:dc:00:3d:6b:6e:0b:63:29:23:8f:08:19:03:c4:10:7f:
ca:7e:4f:06:d0:21:a4:b6:8d:59:dc:45:8c:cc:dc:4a:28:60:
8c:34:07:c6:06:92:7c:05:75:62:13:95:ed:7b:b6:7d:17:1e:
c6:70:05:63:af:10:1e:d6:e7:59:20:14:91:09:30:03:af:0d:
84:e5:b5:5e:2d:71:01:68:2c:b7:c5:29:73:34:be:e3:66:8e:
c5:b1:48:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:11 2025 by rpki-client