Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier: dOP/29v2MjqkkYlcgEhP3ETeUr7Mx2FEv5A6ldy10hA=
Subject key identifier: 4F:94:BB:09:63:CB:8B:2E:CC:CD:E1:93:69:93:E8:CC:48:23:C8:E5
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer: /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial: 01952785B69DBCBCE65DDA3C9B99AE89B769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number: 0BDC
Signing time: Fri 21 Feb 2025 08:00:29 +0000
Manifest this update: Fri 21 Feb 2025 08:00:29 +0000
Manifest next update: Sat 22 Feb 2025 08:00:29 +0000
Files and hashes: 1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: 3D9cqiPwu8n/HXznJRP0fS14UHImHcN2IEeR8dakRkM=)
2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:85:b6:9d:bc:bc:e6:5d:da:3c:9b:99:ae:89:b7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
Validity
Not Before: Feb 21 08:00:29 2025 GMT
Not After : Feb 22 08:00:29 2025 GMT
Subject: CN=4f94bb0963cb8b2ecccde1936993e8cc4823c8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:9c:a4:64:61:56:ee:ac:e2:01:54:0b:6c:
4a:1b:28:a2:01:4b:25:43:c1:86:50:6d:61:44:24:
e0:bb:95:7c:19:9d:d5:9f:f5:88:38:ea:95:a4:de:
e6:a7:4c:c5:3f:32:0f:f9:68:82:1b:bd:91:fc:a0:
22:9e:57:4c:e3:8f:5f:40:41:29:e7:70:d9:04:16:
4e:59:06:5f:57:42:8a:d2:80:4f:f1:04:8b:a2:76:
5c:8b:37:eb:ec:c4:2d:78:d6:67:5d:84:69:68:b5:
e1:68:b1:b8:12:a7:56:45:31:50:ea:cc:1b:4e:63:
7d:d7:b5:c4:b4:c3:a3:56:eb:d9:0a:e2:11:92:e0:
31:88:09:c5:e0:69:9a:7c:a8:42:c1:c8:fc:98:90:
4b:dc:f1:f0:70:96:2c:ea:3d:53:15:0f:3d:32:62:
96:59:5b:16:e9:c7:cd:bc:36:9e:82:00:77:d9:e9:
c2:de:e0:8a:9d:46:85:df:b0:16:85:aa:22:89:1a:
8c:e1:8f:47:43:6a:b1:ef:2c:d0:6e:0a:8b:f1:48:
61:50:1e:4d:cb:10:21:df:00:06:e3:2b:a4:6d:7e:
f9:da:09:11:2e:ac:55:e3:61:c4:45:da:08:59:9a:
b4:9a:c3:6a:84:3a:06:15:2f:cf:5d:5b:ee:c5:70:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:BB:09:63:CB:8B:2E:CC:CD:E1:93:69:93:E8:CC:48:23:C8:E5
X509v3 Authority Key Identifier:
keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2a:bd:2c:c7:dc:ba:01:7f:48:60:2e:92:69:01:b2:b0:bf:
f8:29:69:9c:84:fc:53:82:0a:15:20:2c:2b:bc:97:ed:9c:a9:
0e:80:62:0e:b2:f3:f4:8c:51:a5:09:2a:36:e0:ff:c3:1d:90:
7e:7a:a2:05:ba:05:1b:a2:f8:40:50:5e:ab:82:99:a7:12:9c:
b1:fc:71:e9:b6:87:cb:94:86:cf:08:94:20:b2:00:e3:b6:3c:
05:5d:d6:5d:20:14:3c:93:47:d1:5a:5b:6e:df:57:68:e2:60:
85:a0:1b:99:80:72:42:b9:7e:19:59:ec:33:bf:5f:34:d2:85:
16:b2:73:bd:b3:11:51:9d:86:66:35:b8:b6:19:3a:30:fa:f0:
d8:d8:ff:1d:8f:c7:dc:09:a1:9e:7e:43:d6:a6:84:d7:76:81:
af:23:67:fa:1a:00:ad:51:e0:84:80:64:a2:10:f4:1e:07:bd:
77:35:07:72:cc:61:c6:b4:48:d1:5c:e2:0b:67:8c:9d:81:03:
f4:32:78:84:53:05:0c:d1:84:c0:c0:70:ed:ee:aa:65:a5:82:
50:ad:84:ac:98:5e:71:a5:92:14:a0:b3:b2:13:ad:69:90:20:
33:bb:95:9f:88:56:37:9c:aa:94:bf:bf:12:fb:da:94:d8:fd:
6f:8d:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:51 2025 by rpki-client