Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: EKT4fDMSuwlwg+1+axiyP3sSvoGQi6igPzn75W8elo4=
Subject key identifier: 2C:AA:C9:C4:27:10:33:B7:2F:5B:9D:1B:0F:78:69:68:4D:1E:7C:6B
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 0194C38829BB4E36E002655BA647F3CFCEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0B0F
Signing time: Sat 01 Feb 2025 22:01:08 +0000
Manifest this update: Sat 01 Feb 2025 22:01:08 +0000
Manifest next update: Sun 02 Feb 2025 22:01:08 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: bKWvCHfjgniJedZsSespLZ10ieMD1emRb9KBfvg1wl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:29:bb:4e:36:e0:02:65:5b:a6:47:f3:cf:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Feb 1 22:01:08 2025 GMT
Not After : Feb 2 22:01:08 2025 GMT
Subject: CN=2caac9c4271033b72f5b9d1b0f7869684d1e7c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:7f:b0:bc:de:54:32:ac:99:a0:4f:19:c1:
61:bf:86:5c:be:de:ba:01:ce:44:e5:c5:a7:a4:3c:
04:a8:48:ed:27:ae:ce:b8:fc:94:56:2a:96:5e:f4:
69:4c:2b:6e:9e:1e:bf:01:a2:52:d7:7d:29:3e:a7:
59:da:2f:10:28:70:3f:ec:7d:31:6a:7a:0b:2b:54:
8e:0b:77:7d:13:02:cd:de:ac:b5:0b:dd:f3:68:23:
56:6f:84:7c:1d:80:16:09:17:78:9f:9e:60:b2:d5:
b8:f0:3e:54:bb:9f:b3:8a:32:2c:59:b1:5b:58:9f:
87:7e:7d:88:77:b2:1c:ba:64:09:5f:c4:44:75:3d:
64:46:08:bb:1e:33:ca:dd:18:9d:a0:ec:68:7c:9a:
8a:52:14:ce:ba:2a:5c:f8:72:ac:48:2e:59:9b:8f:
17:d3:2f:32:2d:07:24:77:fc:19:d6:cd:fb:91:76:
d2:24:5d:43:f5:e8:85:a2:4c:aa:65:b6:8c:43:89:
75:42:f5:ed:31:28:5f:07:1c:fd:08:71:29:27:86:
ac:de:d1:52:1b:fe:cd:7e:29:97:23:58:4e:6b:5e:
fc:be:f3:c6:60:42:c8:dd:91:26:b7:d2:ce:e5:f0:
cf:31:44:af:7b:ba:75:33:79:7e:a3:df:b7:d0:57:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:C9:C4:27:10:33:B7:2F:5B:9D:1B:0F:78:69:68:4D:1E:7C:6B
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8d:84:f8:77:b0:e1:48:7f:2e:de:94:6f:84:22:09:83:45:
15:6e:49:6b:6d:29:6b:29:54:b7:d2:d7:8d:29:a0:dc:04:72:
50:34:86:61:68:ef:81:a4:68:31:48:28:2c:22:e5:ed:93:db:
fd:dc:91:82:26:58:bd:f6:57:9a:59:09:64:bb:6c:7c:c6:b9:
db:fb:2f:58:c2:c1:41:f6:af:30:8f:9d:72:8b:47:f6:71:32:
40:4e:d9:29:c6:c2:c0:86:af:13:ee:54:d3:62:09:d5:3b:d4:
a9:33:ed:5d:aa:20:c0:38:ac:41:35:08:aa:f0:a8:0b:54:f7:
15:67:f2:8e:a9:1d:ca:c7:e1:91:4c:ad:34:3e:1c:5f:21:2f:
db:52:23:23:7b:1e:e9:2a:8d:57:ef:b9:95:5b:3e:e4:8b:ff:
a3:82:7f:0b:79:b2:eb:5a:b7:87:27:5e:94:1f:1a:e8:10:19:
38:9c:65:b2:b8:9e:1e:c5:b4:03:5e:20:68:65:7a:82:6b:5c:
5f:b5:34:83:9b:b3:98:ac:17:53:42:c5:c1:01:7b:8d:33:11:
07:58:61:67:1f:12:1d:ba:df:ad:f1:e2:cd:09:f7:61:96:34:
d6:4c:ae:da:76:42:6d:58:b1:a5:7e:5f:11:9a:77:b7:03:6e:
93:ed:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:44:56 2025 by rpki-client