Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: 0xfgjW1AwlN6VUKOm1CQ4yI5FMzhBRaUnUdn9Efu5eI=
Subject key identifier: AC:E1:BB:96:36:3A:E2:78:11:6B:9D:AF:63:DB:7E:8F:C8:D8:6E:1F
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01951134DF0A40E3DA8B4F0850B9682948B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 08D6
Signing time: Mon 17 Feb 2025 00:00:32 +0000
Manifest this update: Mon 17 Feb 2025 00:00:32 +0000
Manifest next update: Tue 18 Feb 2025 00:00:32 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: qXc1urCNx8i8CDibCucCsqR4sUXLuZNfC22S+3P9AcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:df:0a:40:e3:da:8b:4f:08:50:b9:68:29:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Feb 17 00:00:32 2025 GMT
Not After : Feb 18 00:00:32 2025 GMT
Subject: CN=ace1bb96363ae278116b9daf63db7e8fc8d86e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:f5:bd:7c:d6:3d:95:10:04:42:0d:2a:db:
cf:4d:94:47:31:cb:29:27:7b:dd:10:d4:6b:7e:56:
d6:4b:a2:e3:e9:99:bd:d7:35:49:37:79:a1:92:a9:
04:15:eb:5e:52:c3:4b:2f:0e:f0:d9:8a:76:5b:c7:
a3:27:b7:f8:09:02:ac:a4:92:7b:0e:64:49:97:44:
22:1b:50:70:81:3d:13:fb:02:95:63:c3:c2:f3:6a:
da:4c:72:f1:e7:4d:1b:44:d4:fb:e3:f8:bc:f8:a5:
ae:d7:8f:1e:92:13:0b:33:d0:6c:98:27:40:59:20:
92:dc:5b:7f:fd:30:f4:9e:6b:f4:73:22:f1:0f:0d:
17:90:58:b9:21:ee:fd:06:1e:e3:ef:e0:b4:ea:35:
56:2a:a5:dc:ef:a8:eb:eb:c8:ef:00:03:b7:91:4d:
6a:70:34:d3:1a:62:e8:ab:1b:3b:ed:10:d2:97:6e:
5f:5f:7f:66:43:08:88:10:cb:b5:34:2b:bd:ae:dd:
72:2e:13:d0:0e:5b:dd:de:de:e5:73:ba:3a:f8:da:
8f:09:e5:63:06:dc:d6:fc:99:23:59:e8:2d:f6:74:
64:14:2d:d5:be:87:a6:81:72:40:61:23:4e:8e:a5:
3b:f9:f8:36:31:d9:c3:b2:cc:d3:11:9b:7a:0f:13:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:BB:96:36:3A:E2:78:11:6B:9D:AF:63:DB:7E:8F:C8:D8:6E:1F
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:eb:20:d0:12:ab:cd:4e:7b:df:53:cf:40:f7:f8:54:af:ae:
69:ca:0b:c8:14:03:5b:36:7b:33:f0:d2:b6:80:cf:9b:86:fe:
22:cf:40:32:f9:e8:89:54:b7:46:20:d0:5b:ea:ec:86:ab:00:
11:b7:80:28:79:33:3f:29:28:76:1a:bb:2c:67:20:1a:6f:92:
b3:7e:06:83:4d:56:c7:cb:1c:72:02:06:8b:74:81:1c:10:75:
84:82:88:d0:a1:a1:51:e6:52:93:4e:81:86:e1:c1:7d:0c:85:
72:2f:d0:97:f3:64:3f:bb:14:72:14:e6:36:e4:04:84:69:57:
fb:00:30:80:bf:ee:98:44:58:6c:ae:e3:9d:f3:73:00:3e:ae:
01:74:bf:1f:fc:89:52:34:28:ed:99:a6:7d:21:0c:6a:24:19:
52:31:9a:a5:2b:d4:8a:d3:ba:3e:f2:7c:21:2e:8f:74:f8:74:
71:84:8c:cf:65:c9:a7:a8:2a:44:d5:56:e8:f0:51:dd:48:25:
c0:ff:0d:55:db:11:f7:f8:f0:0a:f2:9b:cb:0d:95:dd:7b:38:
a7:f7:c0:54:b7:19:f8:18:d1:ea:66:dc:a9:78:4d:6b:31:54:
88:cf:eb:6c:cd:1e:73:a2:5c:84:b7:ee:b2:37:3f:2f:83:5e:
7c:84:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:54 2025 by rpki-client