Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: 8HDMF3cPVrWEKxOdRYvpiS3qX/KTWeQ3gcmtlQ27TKo=
Subject key identifier: F2:05:DF:A0:15:2A:C5:08:DD:1F:21:DD:12:01:01:D1:8F:37:6B:CA
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 0194C50845DF48E4389B76838DCE63F15D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 82
Signing time: Sun 02 Feb 2025 05:00:41 +0000
Manifest this update: Sun 02 Feb 2025 05:00:41 +0000
Manifest next update: Mon 03 Feb 2025 05:00:41 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: zlsahoqizY2Yr0Ocs/PpWLI6B/OjSQyc+h3bF4YJvak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:45:df:48:e4:38:9b:76:83:8d:ce:63:f1:5d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Feb 2 05:00:41 2025 GMT
Not After : Feb 3 05:00:41 2025 GMT
Subject: CN=f205dfa0152ac508dd1f21dd120101d18f376bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:fc:8b:de:bd:fc:9f:e3:4b:6a:f3:58:f6:
da:db:e0:84:df:69:08:c4:8b:14:a6:8d:5b:e3:50:
31:1c:6a:20:ce:b8:e2:c9:e3:3a:6b:a5:a9:4a:0a:
e6:bf:53:b5:4e:2e:4c:22:a5:be:5e:46:50:34:ec:
88:97:14:de:0d:7d:09:d6:ab:2e:5d:66:af:f4:ba:
ba:35:c3:4f:e8:3c:84:4c:ed:8a:94:14:e0:2b:56:
9e:8b:99:56:d2:fe:ff:8b:b3:60:14:36:70:b5:99:
9c:7a:13:6a:f1:a0:d5:80:6d:68:a6:4f:1f:fc:1f:
74:c3:35:af:a6:27:8f:4f:21:4e:94:b9:50:80:55:
66:01:17:b3:f6:00:18:c5:3b:cd:b7:89:72:cf:11:
49:79:c7:06:b8:50:6c:55:e0:3c:3e:95:2c:bd:8f:
5e:71:6f:a4:a5:8f:97:70:57:9a:ac:c1:8f:e9:1e:
b5:55:a4:8d:e4:ff:3d:c7:ad:c5:97:af:0c:48:06:
32:e5:d4:7c:52:55:0f:b6:f2:d8:15:c6:a6:14:45:
72:99:36:41:06:8e:1e:0d:6d:df:9d:f9:78:2a:57:
49:d4:5f:e3:d3:19:21:7c:0f:dd:67:ca:59:75:25:
c4:01:82:59:d9:46:ed:4a:2f:88:4b:8a:ae:37:0f:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:DF:A0:15:2A:C5:08:DD:1F:21:DD:12:01:01:D1:8F:37:6B:CA
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:40:6a:80:d9:7b:fb:30:96:9f:47:8c:cf:42:3c:04:30:
4e:5b:d2:cb:dc:ae:8f:88:8b:d2:48:cc:d2:80:c0:9d:88:37:
6a:43:d1:b9:67:1d:0e:9c:49:55:e1:7b:a3:5f:54:84:d9:a0:
8d:db:bd:5e:4b:34:aa:12:b9:47:69:01:40:37:32:8e:cc:37:
a7:87:32:8a:07:7d:ee:8c:e4:0e:2e:d6:97:cd:4b:a7:fe:fc:
d3:f6:fe:1d:51:b3:9f:94:04:84:7b:ec:6e:98:8b:fc:31:e7:
bb:3c:67:f3:0e:2f:a6:a4:7b:33:f6:ed:d7:5a:cb:01:80:48:
7d:35:38:04:eb:f9:9c:cd:fd:5b:ad:a9:96:3d:dc:db:47:a7:
74:f5:d2:d6:7d:de:63:ad:84:31:17:d2:61:a7:04:8e:00:20:
d3:d1:36:f0:b2:ba:c7:9f:fb:bb:0e:a2:58:f5:a9:93:41:66:
3a:dd:84:0e:0d:7c:90:fb:69:b3:5b:57:36:34:41:f6:67:e1:
5d:2e:39:bf:0a:6c:c9:bc:58:ec:6f:c1:90:ea:f5:ea:3a:78:
03:c5:9a:de:fa:5c:09:68:52:64:48:7d:3b:62:69:1a:aa:f8:
d3:23:dc:df:55:dc:eb:23:9d:0c:36:59:c9:6f:dd:98:95:fc:
13:58:6e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:03:48 2025 by rpki-client