Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
File: aescHUkwv7_iXqfwpF19C2Eef2I.mft (raw, json)
Hash identifier: h+TVXuKbNmq+MJr9YyHhF0Y23FBOZ5EZPmW5jM2num8=
Subject key identifier: C8:F6:73:6F:28:F6:BF:EA:8B:CA:13:CC:9F:25:E9:B7:7B:28:2F:BE
Authority key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
Certificate issuer: /CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Certificate serial: 0194C507E769BD259D6F161667387C9FE2A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
Manifest number: 09
Signing time: Sun 02 Feb 2025 05:00:16 +0000
Manifest this update: Sun 02 Feb 2025 05:00:16 +0000
Manifest next update: Mon 03 Feb 2025 05:00:16 +0000
Files and hashes: 1: _EbNwpReLUVNd1YP_0CwE7ZjiIE.roa (hash: h2xnKbmoWDr+VElZXTIO8MYVw2Dx5IJspYhOYFMtbaw=)
2: aescHUkwv7_iXqfwpF19C2Eef2I.crl (hash: G/gVSE2apqnCm9ql5DXn76JuCDAaHCBwYL9R2n8opW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:e7:69:bd:25:9d:6f:16:16:67:38:7c:9f:e2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62
Validity
Not Before: Feb 2 05:00:16 2025 GMT
Not After : Feb 3 05:00:16 2025 GMT
Subject: CN=c8f6736f28f6bfea8bca13cc9f25e9b77b282fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:cd:5b:2f:2f:5b:27:d4:9f:7c:03:d1:07:
d5:1a:5e:8b:e8:00:5f:4b:4d:f8:ab:d8:66:51:17:
bb:cc:7b:1e:8b:b7:73:a9:a6:fe:86:01:3d:e3:6b:
f0:9e:eb:c9:32:e9:ac:0b:c5:b9:76:e6:55:39:7d:
d6:90:b7:78:f0:0e:d1:b3:9f:7c:6e:c6:24:a8:73:
1f:80:1a:95:1b:2e:44:c7:67:99:7f:c9:e7:72:26:
cc:a2:a5:ea:b8:df:f6:1d:21:0d:9a:3e:0a:2d:6c:
99:c8:94:f5:46:40:c4:12:99:c5:d8:c3:2b:73:1d:
f5:50:51:8b:c9:2b:d6:0e:6e:1c:2f:e8:45:49:c4:
9e:b6:c5:bb:25:e4:fd:b1:4d:9a:97:70:f7:e0:1c:
66:38:cb:fe:c9:14:6c:af:d2:08:ee:e7:de:2f:a3:
34:08:81:1f:b5:d3:a7:3e:60:dc:2c:4f:66:51:c1:
e5:a8:2e:a8:20:7b:eb:ff:11:e3:bd:ae:f0:62:b3:
06:4b:0c:67:84:cd:a7:59:e9:74:0a:27:b0:0e:0a:
d5:3d:23:f4:55:d5:82:03:cf:d6:c3:19:c9:6b:55:
19:87:e7:f4:11:ab:16:63:0b:57:71:5e:09:24:66:
43:cf:ea:4c:70:b7:8a:f2:5b:66:10:21:c8:cf:57:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:73:6F:28:F6:BF:EA:8B:CA:13:CC:9F:25:E9:B7:7B:28:2F:BE
X509v3 Authority Key Identifier:
keyid:69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:51:82:41:8c:63:6d:a7:c7:f7:8b:ea:b7:c3:c1:34:b8:
48:04:87:83:d4:1a:b7:53:27:c2:b2:fb:2e:cb:95:a0:66:68:
1f:32:b5:93:2d:87:53:11:ba:6e:75:de:e3:5c:7d:c1:76:39:
dc:1e:a3:98:6c:5f:d3:97:5f:42:9b:c0:40:0e:aa:49:cc:65:
35:95:09:1c:b4:8f:86:b4:81:c8:27:08:26:33:38:52:51:02:
0d:0d:d4:0d:72:f9:16:cf:2e:31:f6:b6:e6:99:6c:56:12:17:
a8:43:cd:4c:60:7f:52:13:c9:1c:81:b4:35:a4:e4:78:12:36:
ca:96:64:11:0a:a1:3d:1e:da:60:3a:f2:d7:55:cb:27:37:e0:
b5:6d:95:d9:04:d7:d8:27:26:02:aa:35:bb:f0:fa:8b:42:91:
b1:62:81:8c:1e:f1:26:4e:57:e7:6b:c6:2f:02:9a:8b:96:c2:
eb:69:f5:95:53:c4:da:d1:18:fd:10:65:81:b3:eb:66:a5:96:
37:2d:09:5a:9d:33:97:1a:85:8a:a6:66:51:a9:22:56:b2:50:
d5:d2:91:51:99:dc:99:47:10:70:79:1a:e6:0d:45:22:d1:e2:
0a:97:36:09:e2:50:3b:01:57:48:c1:e2:da:0c:00:ba:e0:40:
d9:db:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:48 2025 by rpki-client