Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: intZbBS/5oRXPnmd0+j2BT5P/Vd2uGEDpdzwct1u4mg=
Subject key identifier: 1A:7D:4A:C3:A8:E0:49:9F:44:B6:11:31:68:77:BC:CD:5F:05:25:F4
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 0195127E3A26380D5BD953A3AA62B5DBD249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 071E
Signing time: Mon 17 Feb 2025 06:00:17 +0000
Manifest this update: Mon 17 Feb 2025 06:00:17 +0000
Manifest next update: Tue 18 Feb 2025 06:00:17 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: FgRcPBHu9nz0Q8gXCd9Ojn1S3pHk2FBm/tEiehXRMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:3a:26:38:0d:5b:d9:53:a3:aa:62:b5:db:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Feb 17 06:00:17 2025 GMT
Not After : Feb 18 06:00:17 2025 GMT
Subject: CN=1a7d4ac3a8e0499f44b611316877bccd5f0525f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:ea:d9:dd:a1:29:e2:89:f8:e9:56:c7:a2:
ae:45:4b:b8:00:40:2a:61:cf:01:75:04:f8:29:00:
16:2d:28:1f:08:4e:9f:86:ca:65:2d:48:09:c1:41:
58:45:bf:46:e4:63:a7:e5:d3:74:2f:47:e7:a5:65:
a0:e3:9f:0d:ce:d1:59:70:b6:47:d2:34:ad:95:e0:
be:7b:65:ae:6b:16:de:28:bc:4b:90:11:0a:d5:cf:
1a:8f:26:13:ba:88:c7:51:6e:6f:ca:aa:41:8a:98:
49:0b:59:46:42:e8:a2:f0:76:d5:11:7b:7a:be:af:
0c:31:06:16:8f:cc:8e:67:50:cb:06:7f:a2:18:d9:
39:d2:e4:69:b8:49:99:2a:ee:8d:de:de:48:17:e8:
e4:ff:e0:83:a1:86:eb:b1:66:fb:df:90:b8:b9:49:
26:3b:5e:c0:6e:3c:b0:a6:32:7c:b8:e3:2f:41:c3:
ad:25:29:7b:98:4b:5f:6f:9f:2e:cd:9a:a8:74:3a:
c9:c9:7c:73:c1:ad:1f:ff:3b:20:51:cc:a3:6c:49:
e5:bf:c8:59:4c:01:09:95:79:a7:3e:f1:c3:c4:a5:
d3:20:50:54:5d:72:4a:1f:a4:f4:c6:ca:43:61:8d:
03:d0:23:33:2c:35:6a:73:8b:ce:4c:09:45:7d:67:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:4A:C3:A8:E0:49:9F:44:B6:11:31:68:77:BC:CD:5F:05:25:F4
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:2b:d6:05:b6:18:b8:5e:fa:dc:31:51:51:0b:ba:dd:c5:
5e:4c:01:ef:b9:22:f1:60:60:6d:07:2e:90:c5:06:e2:36:63:
94:29:f8:87:cc:5c:77:b0:96:9b:92:f7:6f:3d:fd:b5:25:11:
be:b9:e8:bf:c9:11:89:8d:ae:ce:7c:92:fc:28:38:2b:49:0d:
4a:15:93:3f:3f:6f:8a:83:e6:58:ed:d9:4a:40:70:6c:87:db:
f7:50:fc:20:f6:05:24:ab:21:79:26:52:6b:fe:fa:6c:4e:9c:
d3:9e:55:68:04:7d:7c:89:72:1e:d7:92:80:57:a2:e8:a3:86:
e3:7b:88:2e:0b:26:89:59:93:ad:56:a9:46:50:0d:d2:03:75:
14:ef:c5:5f:c5:8e:3c:7e:53:cd:c3:d3:6c:99:5d:63:5c:a5:
ca:de:74:b9:3b:16:20:a8:1d:26:06:9a:bc:42:fe:b0:06:fc:
96:40:96:c8:7b:e5:6b:b4:77:e6:51:68:24:d6:27:7e:47:da:
cb:b3:35:11:05:b0:eb:29:58:79:af:e9:1e:61:a5:2f:c8:f5:
a4:6d:ba:d8:70:aa:b8:7c:e8:42:ad:26:05:70:8d:fa:53:5e:
e3:09:1d:d5:a1:b8:96:84:96:0d:24:5d:ae:ce:6a:ac:40:43:
3d:c5:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:06 2025 by rpki-client