Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
File: avOqAUC3mDUA6oKfPDa7-2WvmXI.mft (raw, json)
Hash identifier: 6bRVQ3JeZl1o3w6f4fN/rPcEycrFlDVAXq+boD+xEkg=
Subject key identifier: CB:83:89:68:D9:08:62:B5:63:4C:E8:A9:BD:67:77:8C:3E:2A:80:7F
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019510FE14BFB5E2A8EBEAABA016C3FF5E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
Manifest number: 037A
Signing time: Sun 16 Feb 2025 23:00:41 +0000
Manifest this update: Sun 16 Feb 2025 23:00:41 +0000
Manifest next update: Mon 17 Feb 2025 23:00:41 +0000
Files and hashes: 1: avOqAUC3mDUA6oKfPDa7-2WvmXI.crl (hash: RU8OIpaB4El40tsUmtqTqK71F70iFgCVrxvtQg56BLI=)
2: lqUgtVIOgNM_8oahrIOECTTMeHE.roa (hash: SpiLSoHograVnyHrwg8KcUf+YJh+U33Y4LuzthE2ieU=)
3: t7AOBzb4Is80NIsg5AED49fAWd8.roa (hash: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:14:bf:b5:e2:a8:eb:ea:ab:a0:16:c3:ff:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Feb 16 23:00:41 2025 GMT
Not After : Feb 17 23:00:41 2025 GMT
Subject: CN=cb838968d90862b5634ce8a9bd67778c3e2a807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:08:f7:4c:53:40:3a:38:2e:42:a0:56:6c:
cc:54:a9:bb:79:f2:24:51:ee:cf:c0:ca:e7:e4:f4:
c4:8e:d6:3f:8c:1a:49:ae:ad:51:b6:3e:e0:74:f7:
85:91:df:d8:5f:66:e8:5e:55:e4:fd:79:cf:6e:b6:
c5:18:3d:a8:c3:1d:a4:39:dc:56:4a:3d:5c:cd:1a:
70:18:68:21:c8:64:0b:8d:d4:0f:da:a2:f3:7b:b6:
9a:f7:dc:93:79:dd:4b:f1:7b:d8:89:a2:5f:4f:58:
4f:14:ce:d6:3d:5f:8e:28:68:2c:fc:8f:30:dd:78:
25:a3:52:0c:a7:e3:b7:f1:73:46:87:c4:7e:ef:13:
1e:e8:9f:bd:35:ef:19:98:37:57:7a:9f:9b:d7:1e:
32:47:74:11:06:8e:d3:3f:a2:80:61:46:c9:47:54:
8f:8b:f5:b8:35:07:68:ee:5d:27:72:e6:5c:f7:96:
09:8a:9b:6a:73:2a:a8:35:dc:06:d5:1f:b1:56:72:
a6:c3:65:e8:83:51:34:13:a8:0a:4d:f4:47:c7:fd:
13:c2:99:fc:2a:c6:4e:c8:f0:6f:f5:be:7f:14:5a:
93:07:41:11:33:15:48:60:3d:9e:d9:56:d0:8c:be:
0a:a1:3c:e4:d9:3c:a1:07:97:8c:55:1c:22:a8:3a:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:89:68:D9:08:62:B5:63:4C:E8:A9:BD:67:77:8C:3E:2A:80:7F
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:8c:51:a1:6c:89:80:21:17:9d:2d:ef:e6:e9:d3:2b:ca:
56:f8:0b:2f:3f:1c:13:3b:fe:a6:b4:f9:aa:07:0d:9c:24:d7:
5a:b7:36:81:c0:35:d7:76:dc:0f:0b:e5:6b:83:16:58:19:72:
84:f7:d6:35:62:8a:72:2b:d3:01:09:97:a9:09:5a:96:af:e0:
a9:dc:06:25:57:b4:e0:b2:bc:3d:2e:8d:f4:2b:d0:46:1f:62:
a1:29:03:14:96:4c:ed:96:83:de:c3:7c:41:0f:2d:c5:9e:24:
2d:79:a6:8b:c2:f1:a9:f0:fa:27:97:4e:d0:5d:2c:ff:85:64:
ca:ea:9e:19:47:b0:dd:cb:c3:9a:5f:ed:c0:5b:f0:04:3f:1f:
86:fa:e0:73:61:d5:aa:e7:ce:20:5b:2a:1e:83:48:aa:f5:fd:
3b:4d:79:68:a6:36:d1:30:5b:27:d6:88:2c:f7:c1:64:4b:14:
3a:19:76:ed:ac:a0:e3:9d:80:06:d1:a3:6c:e8:b9:59:43:c5:
dc:03:b1:47:ae:8f:33:2c:88:4f:ff:a8:9b:7a:da:02:03:53:
6c:78:98:7e:2f:0e:13:6f:ab:f4:b1:6d:3a:bc:ee:dd:99:ec:
49:29:c8:f1:56:1e:bb:a2:ba:92:06:ae:19:a2:59:01:4b:80:
0e:fd:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:04 2025 by rpki-client