Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: 0fyZdrI2OPHN/lh6IZ+n3Y4IWbJl+cgB2cNmEujp1ZY=
Subject key identifier: 32:98:FA:EF:E3:C1:84:1A:8E:F2:A1:2D:70:01:05:00:C1:98:0A:79
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019511A288A866FE597106689D1BDE802960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 081A
Signing time: Mon 17 Feb 2025 02:00:19 +0000
Manifest this update: Mon 17 Feb 2025 02:00:19 +0000
Manifest next update: Tue 18 Feb 2025 02:00:19 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: +lF3B45wze4fBEPpi4Zqw1A2HMhONPgmcoKWysbmr6g=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:88:a8:66:fe:59:71:06:68:9d:1b:de:80:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Feb 17 02:00:19 2025 GMT
Not After : Feb 18 02:00:19 2025 GMT
Subject: CN=3298faefe3c1841a8ef2a12d70010500c1980a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:d4:48:5d:3c:35:48:f7:df:5e:54:24:8c:
4e:b8:c1:55:2a:dd:de:46:0f:21:ee:c1:0f:39:bf:
a1:d4:63:c4:b1:aa:3b:95:43:77:2b:00:71:9d:68:
96:da:d9:86:f0:6d:c1:85:66:ef:72:2f:35:2b:56:
44:77:a5:5d:68:41:ef:ed:35:2c:5b:c6:3b:e3:78:
45:38:cc:d1:51:64:68:94:3d:ea:38:37:51:9e:1e:
cc:bf:61:09:51:3d:b7:11:77:63:5f:16:89:f9:7b:
b2:6f:9d:3a:76:62:fb:a8:3a:59:8b:bd:ae:17:c3:
67:36:50:f8:3d:fc:9e:70:2d:38:80:1c:09:f6:1d:
1f:2e:ff:94:bc:10:09:48:53:e6:5f:0e:3d:11:83:
25:71:c8:23:08:82:43:71:14:89:34:bd:54:61:4e:
0b:44:b7:b6:99:97:2d:36:a1:29:ae:91:a3:86:a5:
40:b0:1b:92:5c:a9:0d:a8:fb:d9:24:ae:51:38:26:
57:98:ed:21:38:8a:90:2b:00:e6:75:66:f5:d2:33:
a0:12:21:7c:01:7e:5f:7d:19:6e:6b:78:36:2e:cb:
3a:0e:e4:35:da:3f:f1:46:f0:8b:ad:7e:10:eb:e4:
1f:39:ca:5a:10:66:49:d1:ed:f3:09:60:65:ba:a4:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:FA:EF:E3:C1:84:1A:8E:F2:A1:2D:70:01:05:00:C1:98:0A:79
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:07:be:f3:fd:b9:e2:53:7a:bd:c8:d6:f0:03:82:1b:8c:30:
66:9f:40:99:93:52:ed:45:cd:08:53:21:6c:fd:45:fd:b7:b9:
20:00:0a:a3:5b:ef:6a:19:86:83:f5:82:91:af:d7:9c:e7:11:
9f:9e:c1:52:c4:a7:68:18:6c:b0:84:56:8f:b8:0f:56:b2:70:
b5:92:87:7d:1a:43:20:eb:54:2b:0d:36:28:f7:2d:6d:cf:cf:
1a:fc:84:a2:fc:14:d9:fa:17:6f:88:aa:eb:3e:47:3a:cf:fe:
14:01:5e:74:9d:1f:97:dc:44:eb:96:4c:fe:1a:fe:7c:df:c6:
8e:90:14:9e:b5:3f:15:c8:0b:3d:03:28:3e:73:92:19:e2:49:
35:de:f2:67:d7:df:ce:44:22:5c:cb:f7:cf:ad:cf:10:3e:85:
a3:cd:85:ac:28:cc:b2:85:1e:64:62:dc:7d:ad:f5:be:ff:12:
7d:b1:ee:c9:17:9a:4b:eb:fc:3a:fb:9a:20:56:fc:e2:42:69:
7d:82:d7:c3:41:33:38:1b:3f:3e:b0:73:ff:72:6b:08:3c:fb:
10:41:1b:41:d4:ae:a8:47:ba:2c:73:35:7c:b8:1c:1a:75:e1:
41:34:48:92:91:7b:63:3c:32:4b:cf:7e:d7:bd:fa:f9:cd:ae:
25:c9:10:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:14 2025 by rpki-client