Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: 1gaIrGshTov1HbAQ7sKqe1OlmLPBYGS/78yU2nEC09E=
Subject key identifier: 06:59:E2:6C:53:DC:41:69:C4:8C:EF:76:F7:50:5B:9F:88:F1:6F:B2
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019511A2A8999AB10AB909F965F510229197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0394
Signing time: Mon 17 Feb 2025 02:00:27 +0000
Manifest this update: Mon 17 Feb 2025 02:00:27 +0000
Manifest next update: Tue 18 Feb 2025 02:00:27 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: 02f7AQZi94UmjbftfICqayn92i+DUno8mgELG5VS2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:a8:99:9a:b1:0a:b9:09:f9:65:f5:10:22:91:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Feb 17 02:00:27 2025 GMT
Not After : Feb 18 02:00:27 2025 GMT
Subject: CN=0659e26c53dc4169c48cef76f7505b9f88f16fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:1c:20:68:5b:56:40:d8:38:0d:21:92:2c:
68:2e:2b:02:c4:84:68:e5:5e:3a:f0:02:51:b8:c6:
8b:d3:63:4e:77:07:b8:0c:cb:25:38:be:73:30:dc:
52:21:64:7c:35:ee:4e:38:50:f0:fa:55:8f:64:d6:
ab:6f:6d:64:9c:51:df:f2:0d:f9:7c:b5:37:01:96:
1c:b9:b7:ec:03:f1:8a:a8:fa:e1:15:37:04:5a:74:
82:23:0c:7d:92:43:09:40:b5:db:ea:2b:91:7d:19:
6a:2e:39:7e:1e:8c:17:ec:8f:51:da:eb:87:e2:5e:
b8:80:33:1f:57:02:58:0b:5c:98:3e:cb:75:6f:f4:
3d:42:51:e8:88:b4:01:53:18:96:6f:d4:3c:03:b9:
73:b3:d7:10:c8:86:aa:18:8e:2d:10:42:79:ad:5b:
1c:1f:5d:20:f4:bd:a5:57:b8:fc:8a:12:cd:5e:2d:
e7:d4:73:bb:ad:d1:16:2e:53:64:7f:14:21:d5:fc:
0b:9f:44:62:24:75:e1:e8:16:44:e1:df:29:ea:17:
60:c9:9b:13:c8:c9:5d:98:dd:93:39:e1:2b:1d:85:
1d:b8:49:d4:61:2b:d1:5a:f0:e3:d3:6f:aa:86:45:
99:fb:83:9b:f4:12:cf:09:98:d3:3f:7c:d6:bb:d7:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:E2:6C:53:DC:41:69:C4:8C:EF:76:F7:50:5B:9F:88:F1:6F:B2
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:94:2a:d4:81:97:14:07:20:34:e5:27:1f:c1:40:d9:a5:16:
d3:d1:02:93:b6:44:e9:6c:0f:3f:d4:02:14:92:7f:a4:0c:93:
95:80:15:c4:66:e9:cc:bf:98:07:0d:43:a4:63:95:50:34:80:
1c:4f:cd:49:44:8e:2d:aa:00:a0:f3:52:ec:15:b5:e5:b4:57:
0a:27:cb:3b:2f:66:c5:a3:83:35:1d:92:bb:0f:4b:2a:97:f5:
cb:05:c4:4c:98:6f:c2:96:d3:ca:a7:ac:d1:29:8a:49:c4:88:
57:1e:19:5a:b7:47:82:00:76:af:19:38:26:d8:2f:4c:6f:01:
64:b2:e1:46:68:d9:76:0d:13:18:c4:8d:9e:3a:a5:5a:82:b3:
63:eb:4d:36:8e:2e:0a:2e:31:21:3e:ab:b6:84:fa:0f:fb:ae:
64:11:f0:97:2c:ba:0d:22:5b:cb:67:f8:77:eb:7a:7a:ab:57:
5c:c7:1c:6a:9b:ff:02:70:21:ea:29:87:a0:76:fe:65:df:02:
1e:6a:c1:fa:55:44:31:04:cd:a7:6c:7a:12:7a:69:3e:88:30:
d7:7d:26:21:e6:3f:09:5c:eb:7a:9c:ca:b8:92:29:03:f0:04:
6b:8f:c6:3d:26:fa:2f:b6:ce:4f:20:a0:82:a4:92:cc:4a:fd:
8c:09:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:41 2025 by rpki-client