Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: 04dRIuMFjIy+4gjY/Fkmwtu4EzV47e7EKCSSPkh7hHc=
Subject key identifier: 72:3A:C0:EB:87:42:59:BD:F4:8C:39:AD:E9:AE:C4:D6:43:F5:80:C5
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 0195116BA1AD0A675F61D83D43E1A96097B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 014A
Signing time: Mon 17 Feb 2025 01:00:21 +0000
Manifest this update: Mon 17 Feb 2025 01:00:21 +0000
Manifest next update: Tue 18 Feb 2025 01:00:21 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: tX1v5NNP0fOdM5R2saFabcyhsQzMngSSXA+OOREKlrY=)
2: bFwnlPb3JkTM0-_fQyjycPLTOXg.roa (hash: T3+8uVMg57oldqwBxpb7FIVcJ3Kl6M0sjRANKp19Uzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:a1:ad:0a:67:5f:61:d8:3d:43:e1:a9:60:97:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Feb 17 01:00:21 2025 GMT
Not After : Feb 18 01:00:21 2025 GMT
Subject: CN=723ac0eb874259bdf48c39ade9aec4d643f580c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:0e:ed:1d:13:50:72:70:06:fe:19:bb:eb:
25:c0:86:26:a1:ac:c7:f1:df:a9:2a:66:79:93:09:
ae:0c:34:74:e9:10:f5:75:35:00:8e:b9:96:4e:b7:
34:0f:5b:70:fd:08:b8:9d:9e:f2:65:dc:0f:96:b9:
49:84:61:8f:d9:25:8b:61:83:8d:ad:93:4e:ac:6b:
12:2c:db:af:69:ac:b1:8c:d3:17:79:ca:50:dc:67:
4a:63:6d:1b:52:54:47:ab:40:75:72:51:34:88:93:
d4:5b:14:d4:cc:72:e0:93:a0:cc:f1:60:a9:81:4f:
9b:4e:0f:15:ab:19:1e:6a:4b:fa:89:55:53:a4:64:
b7:a6:b5:98:00:cd:ec:62:ac:d9:01:d0:91:5d:d5:
ba:d2:dd:d8:4f:d5:58:47:3a:4e:05:d4:6d:b1:d3:
47:4a:c3:b0:6b:62:5a:cc:23:83:47:a9:23:51:7a:
23:5c:b5:4b:80:6d:6d:88:e7:26:e3:d7:74:c8:b9:
10:a0:73:4f:4e:5d:c0:6c:13:97:a8:16:54:59:4d:
22:aa:0f:aa:06:5b:1c:18:85:9f:64:09:5e:c2:12:
fe:d6:3d:5f:86:30:e3:16:f5:ca:25:96:96:f8:45:
55:82:27:0f:2a:e3:d2:51:3a:23:2b:2c:80:e1:9e:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:C0:EB:87:42:59:BD:F4:8C:39:AD:E9:AE:C4:D6:43:F5:80:C5
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:90:f2:00:f5:5e:8e:45:1f:71:ec:20:4f:13:18:60:fb:
77:21:df:56:15:91:50:84:2e:78:8c:24:0c:c3:b2:0e:fb:83:
f6:d3:7a:6e:cf:90:45:b4:b8:df:19:91:2b:f0:58:6c:25:50:
bc:8d:3c:5c:48:c3:bb:27:8f:dc:24:cd:91:97:ed:b9:d2:65:
07:cc:76:b6:c6:f9:9f:ef:0d:f8:6a:84:1e:9f:38:ee:96:f2:
88:32:a4:68:98:e9:47:9e:58:6e:24:0f:87:4e:48:6e:b3:f3:
7b:31:03:cc:4d:29:79:d2:59:f9:f6:d4:18:21:99:5b:41:eb:
9a:6c:ae:4e:1f:55:e8:a5:4b:e1:32:6c:a0:85:87:75:ed:8a:
5b:7c:e2:ac:e8:98:63:c1:de:a5:80:2e:ef:29:57:9c:7b:d6:
2f:02:27:18:2a:ac:38:c5:1b:d8:6f:95:c6:2b:13:fa:62:cf:
a1:63:b3:74:51:37:e0:01:87:db:0d:cf:2b:7c:71:70:86:c3:
bf:ce:a5:53:fe:bb:73:63:bd:56:37:9a:b9:81:0e:cf:e2:db:
08:4f:68:f2:b5:ea:1a:6a:b3:99:bd:36:89:0d:1a:62:95:9e:
5b:d3:49:3e:d0:26:0b:ea:e6:32:a2:3b:49:2a:39:af:54:27:
4a:d3:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:13 2025 by rpki-client