Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier: cVxBqs/E3i2oyFLCPBJDZNW4UfaEtZTcQxflGwr2LMA=
Subject key identifier: F1:A7:AA:91:DE:C1:E9:AE:26:EC:66:4A:BA:FE:B3:AC:6C:0B:46:3F
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer: /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial: 01951210C4EEDB2E4CDE5B58865718089147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number: 11E5
Signing time: Mon 17 Feb 2025 04:00:43 +0000
Manifest this update: Mon 17 Feb 2025 04:00:43 +0000
Manifest next update: Tue 18 Feb 2025 04:00:43 +0000
Files and hashes: 1: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: QjQLrApob+hTMLUGFskJxiY1f7cRDJYrrC6YwK0stsI=)
2: qgSgsUNmjGc3XOuValdIkwwl07g.roa (hash: K6iu6N/DtzSRuE8h4cXXnk/shnPgBX6kLrlWrpVPx3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:c4:ee:db:2e:4c:de:5b:58:86:57:18:08:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Validity
Not Before: Feb 17 04:00:43 2025 GMT
Not After : Feb 18 04:00:43 2025 GMT
Subject: CN=f1a7aa91dec1e9ae26ec664abafeb3ac6c0b463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:03:c3:6d:2b:e2:79:94:9b:af:88:a3:3a:
74:c7:35:cc:3a:8e:ac:fd:9b:90:e5:f0:b2:34:91:
88:68:39:86:3c:d5:f7:a6:6d:84:d0:bf:b0:48:c3:
3a:f5:64:cd:7f:59:5a:7f:78:4a:b3:d5:d3:f1:78:
23:8d:82:93:ad:31:f3:09:d0:3d:67:82:0e:cc:92:
43:b3:24:43:64:d0:ee:35:9c:dd:94:e7:32:b0:c8:
be:95:42:9b:d3:77:0d:05:87:69:b6:08:76:b3:f2:
a2:42:63:8d:cf:8a:63:81:9d:f3:b5:66:5d:26:e3:
50:1f:8b:a1:8c:37:8d:53:ce:f1:b9:08:06:ad:43:
ee:08:61:4c:c6:92:ce:2a:ba:a7:30:84:52:1a:70:
3f:7b:e0:5b:d4:85:0a:0d:9d:62:82:56:48:f2:07:
a9:28:fe:43:ea:31:21:72:1d:0e:56:5b:57:39:26:
e6:3a:42:82:14:13:83:4a:14:48:d3:c0:fe:07:97:
b0:86:d1:10:4f:99:c1:f2:5b:e1:c2:6a:c4:af:63:
6c:44:7d:0f:70:27:28:a8:11:78:c5:74:2a:d9:34:
b5:b6:63:2c:9e:2e:ee:fc:f4:0e:8f:ff:d5:33:b4:
5f:9a:ff:50:57:62:3c:13:04:d5:59:b6:82:52:a4:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:AA:91:DE:C1:E9:AE:26:EC:66:4A:BA:FE:B3:AC:6C:0B:46:3F
X509v3 Authority Key Identifier:
keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4d:72:83:85:58:27:cd:43:94:52:6b:a8:c0:87:12:1d:79:
fd:50:2d:c1:03:b0:a6:81:a9:e0:35:be:f0:2c:15:f1:ab:f4:
03:0c:07:a7:1d:4c:2e:54:2d:5c:8a:7b:7d:80:1c:15:19:ac:
ea:09:90:f2:00:42:11:b9:5a:72:cd:1f:2e:2c:a0:b3:ad:90:
4e:8c:0d:d3:70:4f:36:37:6b:cb:73:ec:3b:6e:79:6f:b4:64:
01:af:52:f7:d2:23:b7:fe:f5:f2:04:69:78:4a:80:3d:8d:ff:
0f:ef:be:0c:d1:46:3d:fa:6d:fb:25:57:45:f6:01:55:fa:03:
70:5e:f8:e7:e0:1d:77:48:ed:62:98:95:09:93:92:7b:dc:35:
04:fe:08:5b:51:90:64:2b:47:89:d8:0d:04:9e:9f:ba:24:b3:
97:f1:b2:97:a5:30:07:ea:2f:74:c5:55:0d:18:95:dd:4c:6d:
dd:89:de:7e:1c:60:d7:35:fb:e5:0b:5c:19:17:06:7b:e4:4e:
7a:55:f5:b4:1c:76:14:6f:16:67:9e:b8:83:49:8b:44:ae:09:
00:e2:76:82:0f:2d:36:67:48:5e:dc:2c:6c:c6:65:4d:22:f3:
d3:29:42:6c:bf:5d:a0:4b:7a:79:9f:59:7f:e1:44:38:47:fc:
0b:8d:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:14 2025 by rpki-client