Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
File: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft (raw, json)
Hash identifier: 2o7b6D8YJjjxqUOiUEloDVyrIoLWAWXbYpoWFGKR62w=
Subject key identifier: 13:7E:C9:29:28:5F:77:95:50:D7:D6:1D:46:F4:7D:BD:19:6C:9A:DC
Authority key identifier: E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
Certificate issuer: /CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Certificate serial: 019510C6DAA2E7D8BDC604074B5E7FDDE420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
Manifest number: 0EC2
Signing time: Sun 16 Feb 2025 22:00:22 +0000
Manifest this update: Sun 16 Feb 2025 22:00:22 +0000
Manifest next update: Mon 17 Feb 2025 22:00:22 +0000
Files and hashes: 1: 6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl (hash: ZO0lPYpCMVlixFlpwYO7BmS6YvOgbVb0QCpql4xtEdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:da:a2:e7:d8:bd:c6:04:07:4b:5e:7f:dd:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cbc3331aecc9574e758e1c83d92d92191bd5b1
Validity
Not Before: Feb 16 22:00:22 2025 GMT
Not After : Feb 17 22:00:22 2025 GMT
Subject: CN=137ec929285f779550d7d61d46f47dbd196c9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:15:39:6b:4d:ea:db:dc:13:20:5b:1f:50:
ae:64:92:12:92:49:f6:67:2b:77:9f:9d:bb:69:c9:
ff:82:8d:cf:84:2f:42:56:27:37:1b:ae:63:ac:d4:
12:95:01:3a:02:eb:92:8a:ba:1e:62:04:14:be:20:
e8:4b:88:fb:29:7e:b8:42:c6:1b:ed:7d:d3:a9:0b:
aa:93:7d:a3:47:0c:6b:d6:7b:3a:69:36:c9:59:73:
69:d6:41:04:ba:4d:c0:11:9f:a2:12:13:eb:98:0e:
71:e1:83:fd:a0:d0:25:92:c2:f4:41:75:af:af:02:
55:50:fb:fc:38:48:b7:a0:8d:11:0e:db:16:6d:d3:
df:40:da:cc:dc:33:93:68:a7:55:27:95:5d:4a:5c:
99:94:0d:e4:90:aa:f9:4a:28:24:04:e1:cd:b3:ae:
36:0d:30:f5:ef:c2:b7:58:5d:72:5b:2d:16:00:53:
b0:9d:d3:3b:6e:7b:07:79:3c:0b:78:b6:a5:20:70:
77:fc:df:c4:63:91:26:ef:eb:d0:9d:73:e6:d9:12:
26:0d:6e:83:40:c6:64:ea:cf:3f:69:dd:7d:ae:d6:
5c:34:f8:d0:97:86:8a:08:bd:e1:ad:d2:4c:f8:ad:
58:ed:29:af:a3:5d:bf:7c:e8:a7:3e:69:6f:1c:20:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7E:C9:29:28:5F:77:95:50:D7:D6:1D:46:F4:7D:BD:19:6C:9A:DC
X509v3 Authority Key Identifier:
keyid:E9:CB:C3:33:1A:EC:C9:57:4E:75:8E:1C:83:D9:2D:92:19:1B:D5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cvDMxrsyVdOdY4cg9ktkhkb1bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/083f01-71fc-43ad-81ab-7aff5c4307f0/1/6cvDMxrsyVdOdY4cg9ktkhkb1bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:31:11:81:a3:03:1d:e8:c0:65:4a:46:9e:0d:bc:77:d9:58:
c0:62:c0:af:ee:d7:48:65:c4:54:e5:a2:00:63:ce:6a:3b:f9:
c3:04:91:ae:ba:75:cc:b3:2e:ff:81:e6:d1:c9:38:cc:4f:d2:
16:b4:af:55:a0:ec:00:5f:3c:74:c2:b6:32:5a:ae:e4:d4:8e:
41:a0:fa:6a:9b:8c:41:e9:73:e4:02:e9:bb:b6:5f:0e:71:74:
55:f9:33:5e:2b:aa:fd:9d:fd:a7:cb:c4:ad:64:25:1b:f6:4b:
4e:3a:c8:d0:d8:7f:b7:0d:0a:6f:d4:29:76:39:cc:95:fa:4f:
b2:a0:63:e8:9d:3f:52:c0:b7:e5:12:0c:e6:f0:35:9b:e2:c8:
35:3e:7f:75:a3:28:fb:1a:ae:2f:15:9a:c9:96:78:e9:46:55:
55:09:03:2f:31:39:77:fb:60:07:24:33:3f:79:18:52:a0:34:
b9:a2:5a:d1:95:27:b7:81:29:8f:31:73:29:bf:0a:c8:eb:aa:
b7:a2:36:3e:0d:b7:02:03:b4:44:cc:80:44:ad:47:2d:3c:d2:
62:c0:13:fe:7b:2e:49:09:68:de:65:5e:4c:dc:47:08:7a:34:
04:d3:f5:4e:81:9e:36:42:3c:9d:a3:4d:85:22:98:41:df:6b:
67:91:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:03 2025 by rpki-client