Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: ELRIY9OYNW4zZKtm/6UO+mEV3DhtnzHfoeGzZFAGDzw=
Subject key identifier: 62:65:16:95:9C:A7:48:A3:24:B4:7D:5A:C5:11:1B:92:1B:3B:58:7B
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0194C463AA00CB633180B42A28F11A621052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 036F
Signing time: Sun 02 Feb 2025 02:00:53 +0000
Manifest this update: Sun 02 Feb 2025 02:00:53 +0000
Manifest next update: Mon 03 Feb 2025 02:00:53 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: 1I7+WFIfr0We4IbI4OwKPlx1ek++C7oD1yJvQJ6wGLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:aa:00:cb:63:31:80:b4:2a:28:f1:1a:62:10:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Feb 2 02:00:53 2025 GMT
Not After : Feb 3 02:00:53 2025 GMT
Subject: CN=626516959ca748a324b47d5ac5111b921b3b587b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:7a:21:77:dd:2f:d0:0c:d9:ba:cd:45:6c:
e4:33:66:87:96:9a:8a:7e:e9:f2:2a:43:e1:4e:19:
14:2c:51:f8:51:be:15:78:ec:15:28:f3:d9:1a:bb:
c1:92:36:fd:dc:72:83:bd:d5:59:7a:13:61:fc:d0:
38:0b:99:44:4a:c3:c4:a7:5b:9b:63:fa:3e:b3:8e:
ae:5e:cc:e3:2e:a6:26:ac:2c:86:27:cf:e9:bb:05:
62:a0:20:0e:a1:f8:65:5f:78:ee:d5:5f:a4:ac:68:
08:4c:62:5a:65:88:97:f8:1f:67:08:9a:d4:e3:6b:
29:f9:74:cb:b8:4b:1e:1f:f1:11:79:2e:bb:9a:0d:
39:b4:27:a0:de:1b:6d:41:b6:54:f4:a3:d0:42:ae:
c3:1f:23:be:1b:c4:0e:42:60:9e:20:28:4b:9a:51:
5b:08:7a:e7:3e:c5:21:c1:ee:10:bd:87:de:0e:82:
ad:a8:08:96:7a:4f:22:31:a1:5e:27:22:cc:29:d2:
38:27:e1:6d:25:cc:d5:37:87:cd:b1:42:ae:9b:de:
2c:79:3b:b5:84:51:a6:e6:32:eb:2a:56:6c:b5:41:
91:e2:91:6e:2e:6e:3e:33:9f:b0:4a:6b:aa:12:c7:
c9:14:95:07:75:fb:e6:a6:c0:34:fa:db:77:c4:bc:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:16:95:9C:A7:48:A3:24:B4:7D:5A:C5:11:1B:92:1B:3B:58:7B
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d5:93:81:81:5d:19:2e:3f:40:87:66:33:5f:03:ee:bd:da:
ff:76:2c:27:23:fc:77:00:79:2c:31:bf:66:00:45:fa:c3:27:
26:1e:96:3d:dc:c9:f8:2f:b6:c4:30:e8:dc:20:67:c6:66:c1:
f3:4b:ce:07:6a:00:89:07:b5:e4:e6:15:26:cc:dc:dc:f3:cd:
82:9b:79:f0:c5:16:5d:14:fa:56:ab:6c:ae:c2:71:79:01:b9:
48:37:45:b3:54:94:b4:2e:99:08:b2:ee:8d:64:de:19:b0:f6:
94:af:5b:7c:bb:0b:2b:56:d0:78:73:63:1e:29:57:67:1c:2c:
1a:51:30:1a:07:c0:87:31:34:f9:0a:ca:b3:d5:fd:a6:54:56:
16:89:0a:8b:67:34:4e:a9:b4:46:da:c1:79:44:5a:b0:16:c6:
7c:c0:db:24:1f:98:21:00:c3:8c:23:ee:ad:5c:18:08:f3:e8:
a4:4e:a2:06:1c:8f:96:c8:fd:49:73:a4:af:d7:ba:84:bf:d9:
0a:04:4a:a6:e9:d2:c9:11:f6:53:79:4c:c2:7d:aa:e5:00:5d:
0e:4e:d3:da:df:08:34:f1:93:e6:75:f3:e0:58:a4:16:75:0c:
3f:e7:7e:19:2b:28:4b:25:eb:db:d0:b6:7c:0a:a5:c2:3e:0d:
b6:dd:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:28 2025 by rpki-client