Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
File: a9wGwwC61lEu6H_dJAEF8u8n1eA.mft (raw, json)
Hash identifier: i4WsYGyoSdJVzKtesUCmraw6/l1PT0LBvUzgzeucYGI=
Subject key identifier: 7D:F8:72:4D:67:90:2E:F8:AB:86:0C:D8:E1:1E:1A:7D:B9:F3:9D:F5
Authority key identifier: 6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
Certificate issuer: /CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Certificate serial: 0194C38784D0275976F09FF487419206B229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
Manifest number: 03C7
Signing time: Sat 01 Feb 2025 22:00:26 +0000
Manifest this update: Sat 01 Feb 2025 22:00:26 +0000
Manifest next update: Sun 02 Feb 2025 22:00:26 +0000
Files and hashes: 1: a9wGwwC61lEu6H_dJAEF8u8n1eA.crl (hash: g4hKxBJxFJGY4+hO05k8jKYFoLiTi1cdWmRPmFGuBhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:84:d0:27:59:76:f0:9f:f4:87:41:92:06:b2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Validity
Not Before: Feb 1 22:00:26 2025 GMT
Not After : Feb 2 22:00:26 2025 GMT
Subject: CN=7df8724d67902ef8ab860cd8e11e1a7db9f39df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:d1:a1:94:18:a2:b7:fd:4d:56:ed:b6:33:
62:f1:e3:cc:99:8b:d5:6b:ba:93:d3:d9:58:b6:cd:
6c:28:d7:81:fc:c7:75:12:fe:ff:5f:18:f4:7b:45:
10:79:d7:53:b9:99:b8:cd:6e:d2:02:42:c6:50:a2:
af:50:74:06:c3:47:23:9a:9b:a7:1b:87:82:91:a3:
d5:14:4a:98:46:28:60:a6:39:e2:28:89:c2:bf:d8:
e1:ca:ce:d6:19:7d:0b:7f:97:10:48:a7:37:8c:df:
dd:3c:af:c4:31:6b:91:ae:59:ae:05:06:16:13:ac:
73:67:32:b5:a8:45:5d:82:27:7d:52:ab:3e:49:b9:
03:c3:77:2e:cf:c8:42:ef:71:68:2e:bc:1a:77:a5:
c2:37:e7:a6:20:cf:72:fb:d8:dc:17:72:1c:d4:8a:
5c:c8:22:67:13:8e:5e:2b:6e:cb:39:98:c7:e3:36:
9f:05:ca:de:b6:ee:fc:0b:b7:63:d1:27:7c:90:26:
b1:18:57:a2:48:54:e6:72:37:f7:b9:f2:9a:68:d8:
ee:b6:31:6f:b6:d9:bf:39:50:80:62:ca:2c:59:f7:
85:6c:b1:79:da:c5:6f:32:69:14:ed:9d:c0:58:43:
50:9e:68:4a:e5:b9:a6:8e:32:e3:e0:df:4e:71:59:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:72:4D:67:90:2E:F8:AB:86:0C:D8:E1:1E:1A:7D:B9:F3:9D:F5
X509v3 Authority Key Identifier:
keyid:6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:95:18:67:ca:fd:ea:43:8a:df:70:d2:e6:db:a9:ab:ce:7d:
d4:91:08:d8:de:ec:d4:dd:35:5b:90:ee:97:65:fc:11:3e:d7:
78:64:68:c3:72:75:bd:19:77:46:bb:58:ba:4a:d1:2c:a3:bd:
c4:1d:09:c1:94:7d:1d:35:95:31:02:f6:8a:e8:4b:df:82:58:
4b:2a:46:5c:be:a9:62:cf:ec:82:a1:1a:70:93:32:9a:d4:89:
e6:02:d7:53:3a:ce:1d:1d:15:06:38:e3:0c:fc:a3:ea:ea:19:
8f:84:37:36:d8:60:57:db:6c:e9:97:f2:50:ca:80:22:37:6f:
20:04:24:da:7a:e5:bd:95:85:64:04:9e:0a:5a:34:0d:1a:e7:
af:08:e4:9f:ff:d4:b7:66:34:39:a9:78:ef:6a:7a:cd:2b:f6:
1f:e0:4a:4c:7f:9b:67:da:18:4b:ae:68:a3:07:ba:40:45:78:
26:42:bb:5a:fd:e0:0e:3f:3e:3b:41:83:97:2a:89:8c:7c:e6:
08:52:1c:7d:12:36:2b:36:f8:a9:74:ef:9c:77:16:1b:d0:54:
cd:9c:82:b9:3b:5c:e1:fe:c0:e8:ba:42:1d:85:c1:67:0c:39:
8b:d9:5e:4c:ba:b4:cd:46:68:bd:7d:3a:cd:83:0a:d8:80:07:
01:fe:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:27 2025 by rpki-client