Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: 9m4TtZsO9ftpQfq/1QgJMvtcMgsJOlqfn5y1bDED/2Y=
Subject key identifier: C8:B3:86:6D:9B:31:DC:46:39:DF:9F:13:51:F5:02:14:54:E1:73:5D
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 019511A2699D235DC28EB3F2AF3849F0A4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 146C
Signing time: Mon 17 Feb 2025 02:00:11 +0000
Manifest this update: Mon 17 Feb 2025 02:00:11 +0000
Manifest next update: Tue 18 Feb 2025 02:00:11 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: tqfH2yJnGUMKT0kwE6Sdp7cIrqi2qFwU/J7IL++YW1w=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:69:9d:23:5d:c2:8e:b3:f2:af:38:49:f0:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Feb 17 02:00:11 2025 GMT
Not After : Feb 18 02:00:11 2025 GMT
Subject: CN=c8b3866d9b31dc4639df9f1351f5021454e1735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:de:cb:ff:f4:c6:6b:c4:47:1d:69:c8:92:
f0:91:38:c9:4a:b5:72:88:8f:9d:41:17:4f:37:b6:
ba:79:fb:99:2d:f6:2d:c4:79:1e:88:aa:87:96:9c:
00:b8:c4:c6:7f:cf:ed:83:ce:57:0a:28:ce:e9:61:
52:d9:fb:a7:5c:c0:eb:80:8a:14:be:f9:ce:93:20:
7e:50:15:07:65:cf:e9:4d:7f:f4:a6:af:cb:35:d6:
36:53:22:db:ee:24:8c:96:51:58:57:8d:fc:c2:ad:
84:ce:08:64:5e:d9:6e:20:c9:5f:0b:b7:2c:f6:bf:
a6:16:ef:8e:bf:aa:75:ae:d4:19:99:4f:e0:41:e5:
27:e7:c6:e6:3f:fc:35:1a:41:34:20:25:8b:36:7f:
8a:d6:c4:8b:7f:dd:60:3c:ff:69:18:6b:68:e3:8d:
3d:11:be:f6:6e:c7:e5:b9:3e:65:b5:eb:48:79:97:
36:2c:c8:0e:72:02:85:56:34:5c:46:14:03:d9:bb:
c5:8a:9e:0e:9f:48:0f:3d:00:61:b5:80:eb:9e:0e:
d9:67:3b:06:b4:37:eb:18:8e:97:c0:38:83:d0:ba:
53:3f:73:93:a3:48:19:c4:1a:8e:4f:2b:6d:a4:ce:
9a:e9:b2:10:4f:c6:c9:26:29:18:7b:95:f8:8f:89:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:86:6D:9B:31:DC:46:39:DF:9F:13:51:F5:02:14:54:E1:73:5D
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9e:29:0b:b0:22:c7:d4:76:8c:56:52:62:75:fd:a9:8e:4f:
5e:bc:e2:6c:2b:b4:95:35:41:1f:97:3f:83:81:42:39:79:f0:
c5:21:35:62:52:2e:06:de:61:a4:1d:c7:03:84:87:58:ad:f0:
8c:5f:26:92:eb:83:f1:bd:23:b5:29:ee:09:37:4b:a9:8a:c9:
92:ef:b1:29:cd:54:2d:fa:00:87:ac:e3:64:9c:98:5f:e3:44:
75:a4:38:3d:b3:d0:0a:9d:ed:a8:1b:76:dd:57:2f:8e:2f:f0:
08:55:f1:9f:ea:84:a7:fb:8a:65:e8:6f:be:15:28:cd:f5:37:
bb:e8:6f:c3:a5:9d:cc:70:72:ef:e4:9e:79:fb:ac:1c:74:48:
10:a5:2f:ef:2d:3a:22:3e:cb:46:52:5e:8b:df:5d:52:f4:59:
5d:61:6e:3a:1b:32:13:08:7e:77:c3:21:a4:d4:c5:21:96:fc:
40:68:fc:e9:a2:bc:1f:54:6a:fb:21:2e:fa:94:46:15:8e:20:
54:c0:c7:d1:4c:b2:ab:26:1d:d9:e2:fe:40:34:9a:c8:33:a5:
e0:56:66:f4:6f:b8:f0:e3:c9:e8:b1:79:7b:3a:c4:4f:61:71:
69:7c:e8:5e:28:aa:f8:1d:a9:01:e0:d9:ee:b9:4f:9e:89:16:
ef:ec:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:23 2025 by rpki-client