Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: VPF1Frckso+x2nnsoHbGe14e/R/Jw9XtM1OF7Y08GIQ=
Subject key identifier: 80:41:8C:44:36:3C:CD:2A:7C:54:E8:5A:B0:0C:AA:6E:7E:27:8E:01
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019511A2E6C8B0DE53CCF1D924FFB55664B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 0322
Signing time: Mon 17 Feb 2025 02:00:43 +0000
Manifest this update: Mon 17 Feb 2025 02:00:43 +0000
Manifest next update: Tue 18 Feb 2025 02:00:43 +0000
Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: 7FapY0jvGwU+WynCWvdgUOezxJnBs0aKeqp+2loZy7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:e6:c8:b0:de:53:cc:f1:d9:24:ff:b5:56:64:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Feb 17 02:00:43 2025 GMT
Not After : Feb 18 02:00:43 2025 GMT
Subject: CN=80418c44363ccd2a7c54e85ab00caa6e7e278e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:e2:cf:4e:79:7f:21:8f:e5:d3:7b:4c:0e:
07:db:78:b3:5e:2f:28:a9:42:88:78:c8:40:e2:2a:
28:0c:10:98:0c:04:d7:ca:25:72:15:f9:3d:56:cf:
9a:05:2c:74:99:61:84:44:5d:8a:d5:02:05:eb:53:
16:61:7e:1f:a3:79:dc:8a:e3:f0:ab:cf:1a:b2:32:
98:72:c9:5e:41:7c:e6:a9:25:d4:c2:7d:0c:09:54:
96:d8:cd:e2:fe:1b:aa:dd:80:f0:fb:8e:7a:f4:9a:
04:08:d6:22:9f:98:f0:67:66:51:a2:ba:66:59:89:
e5:22:11:95:8d:26:fe:9d:b7:91:8d:24:76:35:d6:
19:8f:6f:6d:78:cc:df:48:bd:a6:93:e4:31:77:d2:
a7:00:be:39:ce:c2:cd:1c:7f:34:b3:80:8d:c2:0e:
86:fc:17:5d:c2:ba:5d:35:5b:22:2d:6f:d4:2d:5b:
a0:53:8c:ed:0d:4a:4a:19:33:52:05:09:28:ad:74:
00:76:6e:ca:04:fa:40:7c:c2:3c:dd:9c:f8:df:99:
39:d8:68:bd:59:fd:e5:52:8c:52:a3:dc:4b:da:7e:
86:63:58:c8:be:1f:8a:11:e2:88:06:c6:5e:e3:b2:
3b:2e:07:a7:f5:8a:dc:cb:0e:81:5b:0a:08:da:22:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:8C:44:36:3C:CD:2A:7C:54:E8:5A:B0:0C:AA:6E:7E:27:8E:01
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2c:d3:81:ae:5e:50:d1:de:49:15:61:e1:cb:85:c1:a9:89:
60:44:97:87:ed:fe:f0:be:eb:2e:cb:98:54:9f:bb:c1:0a:c8:
cd:d8:91:01:15:cd:d5:65:93:b1:e3:f3:71:c8:c6:81:cc:e4:
d9:85:4d:28:0e:2b:89:8f:11:61:a5:93:79:0f:46:90:fc:35:
9f:0e:76:91:1b:24:8d:52:1a:d3:a1:dd:be:ac:1f:83:94:f7:
2d:5d:49:7c:37:aa:c8:77:34:ed:5f:f5:84:0f:20:da:94:11:
a5:4c:51:96:a9:a6:a4:10:0c:a8:62:3d:c5:4b:78:ce:3c:f2:
d9:ec:fb:f1:58:e8:a6:7b:d2:19:d4:23:05:01:4f:e3:39:bb:
6c:2c:6e:34:d3:79:2e:57:f2:f5:86:a1:7f:49:ae:a4:da:15:
cb:d3:2b:f0:16:a4:0c:37:ff:6d:3a:34:ac:8d:c6:a1:e5:2b:
3c:84:c1:28:3d:be:59:8a:6f:a2:8a:52:23:09:a3:89:cf:cc:
94:79:4b:53:07:3e:39:62:5d:b4:ad:be:af:8a:45:3c:d9:73:
9e:47:df:5f:43:18:51:a2:03:98:12:46:9c:0d:48:9e:a6:30:
c5:3f:0c:7e:b5:8c:51:b5:c9:05:0c:72:f4:54:39:8b:f7:03:
0f:ad:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:51 2025 by rpki-client