Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: JP0c2KMgllRbCgwMJ1njW3XD7v/OUDm84HRa2KrxFRk=
Subject key identifier: AF:C4:5C:90:7B:0A:1C:70:1C:59:55:19:28:71:8D:07:CF:38:6A:8E
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 0194C3879B3687C5D1D9F36BC1FF6FBD5BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0B01
Signing time: Sat 01 Feb 2025 22:00:31 +0000
Manifest this update: Sat 01 Feb 2025 22:00:31 +0000
Manifest next update: Sun 02 Feb 2025 22:00:31 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: nfoP/E2aIVEiTle8MQ4qDv9iyphQmLIaMzkm6HJmA7U=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:9b:36:87:c5:d1:d9:f3:6b:c1:ff:6f:bd:5b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Feb 1 22:00:31 2025 GMT
Not After : Feb 2 22:00:31 2025 GMT
Subject: CN=afc45c907b0a1c701c59551928718d07cf386a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:06:7e:8a:62:7c:39:7f:8c:04:e7:0c:a4:
d0:9f:c4:8b:a2:62:37:5e:99:7b:4d:79:13:3c:fd:
73:a7:d6:68:27:8f:91:20:43:b5:41:95:cb:84:4d:
3e:3d:9e:c1:98:b5:0a:33:83:cb:4c:ac:7e:a8:12:
f1:e1:8d:ad:0c:13:75:3c:67:85:53:f4:e0:24:0a:
a1:ef:88:d4:04:56:d9:6e:81:46:ee:fa:54:20:1d:
38:09:04:33:1f:a6:04:4c:51:c3:82:2b:af:6c:7f:
3d:36:d8:9d:65:c6:41:cf:ce:f8:37:7f:2c:c2:d3:
04:ec:c0:29:6c:e6:62:f4:9f:ae:ab:e0:82:7b:7f:
b5:a7:df:9e:05:ed:96:6f:1c:f0:1a:50:7b:fd:b7:
f3:98:01:e9:49:31:03:c8:53:db:ec:6f:31:b1:84:
c5:76:e0:f5:66:81:69:6e:f6:97:9d:5a:00:78:7e:
f4:05:b1:4c:b0:a6:45:26:92:60:e3:2a:84:d2:b3:
a8:a3:55:86:c3:26:7f:14:77:b0:9e:08:63:83:ed:
7a:01:ca:c8:c3:95:30:2f:8b:b2:5f:7e:bf:a6:e9:
ee:7d:d9:38:74:05:33:21:6d:be:c0:dd:55:fd:ed:
b8:07:36:f1:6e:91:ef:a1:6c:54:99:7a:9a:b2:36:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:5C:90:7B:0A:1C:70:1C:59:55:19:28:71:8D:07:CF:38:6A:8E
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c6:34:7c:71:a4:6f:59:0d:dc:59:0d:7c:0b:d4:a2:78:2c:
72:c5:c8:72:31:bd:fa:a8:34:1f:8f:04:20:2f:17:39:67:f5:
1c:19:1d:1d:53:48:35:80:c2:a7:53:66:fc:40:9a:73:4d:7a:
89:84:61:ae:85:2c:c8:47:98:ed:2c:b4:7d:49:62:5d:c7:a4:
a6:74:ad:d3:e4:fa:1e:8b:83:d9:16:a3:bb:d0:37:59:38:bc:
f9:c4:c5:c3:08:66:83:40:ec:41:94:d4:0b:b7:df:eb:d1:37:
2a:cf:ee:ba:e4:67:99:88:21:83:e1:db:e6:7d:60:b5:2e:f9:
a9:57:7a:d4:a8:0f:9b:19:8e:e1:80:08:2a:84:5f:cd:03:16:
04:f3:93:56:fb:94:fb:81:34:24:cb:b6:7a:b1:73:f9:cb:cb:
68:97:07:00:06:05:10:42:f6:52:09:1c:52:ad:ca:4f:07:30:
52:2f:73:0f:02:eb:a6:d9:48:72:79:7e:15:30:64:6d:57:7c:
97:ec:00:ff:ec:e3:ad:48:98:3a:0e:be:ec:64:b0:85:c6:0f:
3e:90:98:41:7e:8e:40:e6:41:dd:9e:ce:ce:66:b5:d0:a8:69:
0e:1f:6a:9d:b7:30:6b:30:81:59:35:cb:e2:d7:99:ba:77:fa:
82:6b:1e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:15 2025 by rpki-client