Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: XJWiTKSNuHjl5fuhzIwFGdF8dlrZVGH7F/U13VXuH7M=
Subject key identifier: 6E:D9:67:12:2A:DE:09:80:76:0A:40:1D:A6:D1:5D:D6:40:8F:27:2D
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 0195116C34B7924F955E5086CBE0639244DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0679
Signing time: Mon 17 Feb 2025 01:00:58 +0000
Manifest this update: Mon 17 Feb 2025 01:00:58 +0000
Manifest next update: Tue 18 Feb 2025 01:00:58 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: WHzry8Km1iLZnAd2njS9lnGWO7QlwKEYHjKyvAdf/9Y=)
2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:34:b7:92:4f:95:5e:50:86:cb:e0:63:92:44:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Feb 17 01:00:58 2025 GMT
Not After : Feb 18 01:00:58 2025 GMT
Subject: CN=6ed967122ade0980760a401da6d15dd6408f272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:b8:01:20:5e:14:8b:c3:0f:d2:0f:ab:79:
d7:a8:89:41:17:ac:61:9a:64:37:99:c1:76:3a:0d:
37:de:d2:d2:03:dc:05:65:3f:03:0f:7d:a8:cc:ad:
26:14:97:a7:35:7d:d5:5d:dd:60:e6:e8:89:7a:3d:
bc:67:01:a6:ca:56:1b:6d:04:d6:a3:44:6d:77:bb:
05:1e:ba:9c:ac:b2:fe:7e:02:5d:f1:97:0b:f9:9f:
1b:62:cf:65:bb:ea:2e:c9:ca:68:d3:84:aa:b3:6e:
1c:ce:1c:b2:b0:c2:4e:7d:f6:1a:a6:7d:5f:88:11:
70:d7:0c:48:7d:55:42:7a:43:e0:07:d9:da:5c:3a:
3e:95:78:a1:b3:36:0a:56:0e:ce:27:3a:3b:5a:bd:
4e:cd:10:c7:01:31:7e:d6:00:ab:bd:a1:3c:2b:47:
55:b9:57:3e:49:3f:ca:4a:51:44:88:71:71:db:ea:
2c:27:59:af:1c:c2:22:4d:b4:9f:e4:4e:8f:70:03:
49:70:4c:c1:4c:a6:5a:72:47:6d:0b:7e:12:b8:7f:
96:92:07:f7:4f:b3:f6:e7:43:87:92:89:fc:42:f2:
90:85:e2:c0:fc:95:0a:1d:48:eb:16:5f:a8:96:90:
81:db:c0:09:db:27:7d:7a:e5:3b:61:a8:3d:1c:2f:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:67:12:2A:DE:09:80:76:0A:40:1D:A6:D1:5D:D6:40:8F:27:2D
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:e4:be:25:2d:d3:58:09:c9:64:e6:1c:7f:83:82:e5:b1:
20:82:1c:df:bd:fe:01:71:00:e6:2c:6d:2f:27:cd:ad:62:2a:
d9:34:06:2e:a4:c7:ab:45:0c:d7:b3:f6:11:19:f5:7c:63:83:
84:8f:1a:ea:60:23:a6:b9:57:e4:12:53:50:f3:8a:87:fa:da:
99:3b:48:e4:24:09:25:66:2b:e7:88:ff:fd:83:4a:f0:20:0d:
9a:5b:6c:7d:2d:a2:d7:f9:d5:85:6b:d4:a9:98:0d:f2:06:53:
75:c8:b0:56:dd:89:2e:16:5b:08:75:f3:37:34:f4:dc:f4:59:
dd:fc:a5:ed:d0:20:2d:42:f3:05:c7:42:34:c2:9c:60:2e:25:
a1:34:9f:0a:b9:4f:ee:bb:4a:c0:69:8d:a3:4a:56:ac:5b:e2:
4f:49:fc:3c:51:5f:d1:ad:fa:f3:31:7d:7b:50:3f:e5:f5:45:
b5:38:ed:c2:cd:e3:9b:61:ab:75:f8:82:6f:8e:3d:3b:e5:d7:
bb:92:c0:2e:53:77:c1:fd:d8:66:b7:e4:11:57:a7:7a:c6:ae:
25:10:51:c8:37:86:1b:b6:44:7e:7c:a7:43:35:77:ee:0c:04:
71:aa:08:91:69:94:4f:2b:39:a8:1e:cb:49:ed:de:4d:e5:a2:
8d:e5:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:51 2025 by rpki-client