Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: aUdTGMXDBSjBRtKYxbKbVHbp16DIDR0x7KaxZQ+YDCw=
Subject key identifier: 6A:8A:B3:C1:1A:8D:94:78:2E:B6:9F:4A:34:E3:78:21:16:20:2C:50
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 019511D93982B332D1113B7E40AC99A560E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 03:00:03 +0000
Manifest this update: Mon 17 Feb 2025 03:00:03 +0000
Manifest next update: Tue 18 Feb 2025 03:00:03 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: MWQpES1S39sXm+VMYQ64ImSdXNNNYz24xnULve29lQs=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:39:82:b3:32:d1:11:3b:7e:40:ac:99:a5:60:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Feb 17 03:00:03 2025 GMT
Not After : Feb 18 03:00:03 2025 GMT
Subject: CN=6a8ab3c11a8d94782eb69f4a34e3782116202c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:33:1a:45:9b:e8:45:17:9e:d6:72:c9:97:
ef:f3:2f:87:e9:09:9a:33:9a:b2:99:2f:54:e1:8b:
f9:35:aa:b8:2c:d5:a4:9c:60:5d:bb:62:dc:4e:2e:
60:83:ed:99:62:85:62:56:4b:69:7f:48:44:3c:8c:
05:1e:70:46:11:6f:53:f2:43:17:5a:30:62:b3:b4:
65:2c:46:3f:30:48:d1:b2:9a:3a:b8:6d:1b:1a:1e:
a2:5e:9a:3f:b5:cb:d7:e1:dd:91:0a:84:6e:c8:d4:
0a:c1:97:0d:a3:a8:fd:92:7e:35:a8:2a:f2:16:e3:
82:54:18:c1:2b:45:bf:2d:fb:ad:0c:11:fd:98:e9:
f7:8d:b9:98:2a:8e:88:cd:e9:d0:9c:67:43:c6:0e:
30:2e:37:36:e0:f3:cc:58:9a:09:bf:ad:ad:46:91:
cc:77:3a:28:f9:b6:ba:71:aa:d2:62:ca:7a:4a:fb:
87:ad:9a:3e:00:dc:e3:88:29:92:6e:e0:db:72:b9:
27:c8:82:f5:50:20:bb:9f:49:9c:fa:49:50:c2:ff:
5b:c7:e9:c2:d6:cd:22:58:33:55:5d:13:ad:83:71:
0a:74:fc:4a:a1:40:57:65:a3:3b:f3:9a:f4:60:77:
d7:d3:53:4f:94:47:d0:2f:1c:b5:e1:fd:f4:87:81:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:B3:C1:1A:8D:94:78:2E:B6:9F:4A:34:E3:78:21:16:20:2C:50
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5f:ea:39:5d:3f:61:ee:0a:d9:25:b7:07:e1:e0:bc:a6:a8:
9b:07:c1:66:26:a3:55:5a:b8:e4:19:ba:a9:ae:a3:bc:08:e7:
fc:7e:d8:8c:c6:f1:39:41:09:1a:52:b7:a2:df:54:9a:29:d8:
ae:03:b0:f0:6d:a2:13:a5:29:9d:0f:98:e7:6e:3c:e6:4d:84:
f2:90:24:af:09:4d:f6:7c:75:c2:60:34:5e:41:4f:e3:c7:fc:
22:82:1e:0c:15:bc:99:99:f9:37:b3:b7:03:87:49:80:24:40:
bb:0c:16:5f:6f:a1:56:6c:9d:3e:f0:3d:bd:7b:e1:7a:5c:56:
ba:23:45:ca:6c:14:70:7a:c0:56:82:86:fb:5c:aa:1e:11:03:
68:93:58:23:81:3b:62:7e:8c:7f:9e:3b:ad:77:1a:88:37:03:
d5:d3:9b:62:0e:b9:ac:02:ed:1b:39:65:1f:64:cb:b1:17:0f:
e3:9d:af:d7:d6:e8:a8:e4:7c:0f:14:db:d2:b3:65:bf:12:65:
51:48:dc:fc:b9:fb:03:7d:be:aa:50:69:3e:a3:9d:16:03:3e:
11:55:95:74:67:1f:cb:96:53:a4:98:7b:7c:02:38:bc:e2:df:
8a:a9:d8:37:f8:be:25:c2:9e:f9:b8:c6:ef:09:83:40:0a:2f:
32:59:4a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:01 2025 by rpki-client