Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
File: COdUw6PbLtFKpsBqmdeXKRcCABw.mft (raw, json)
Hash identifier: u2VelMlZ5XETQWFnhs2peU6thg3fUbT/il2fHLJP9Lw=
Subject key identifier: 6B:F2:06:99:5B:6C:C8:9F:EB:E9:D4:9C:52:F9:01:A8:42:B9:4E:9A
Authority key identifier: 08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
Certificate issuer: /CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Certificate serial: 0194C462F5863C5F00BF62753A97B92CF67F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
Manifest number: 4D
Signing time: Sun 02 Feb 2025 02:00:07 +0000
Manifest this update: Sun 02 Feb 2025 02:00:07 +0000
Manifest next update: Mon 03 Feb 2025 02:00:07 +0000
Files and hashes: 1: COdUw6PbLtFKpsBqmdeXKRcCABw.crl (hash: s8sRiUZJ3n79drTTeXckDeLaRSStxSHHl4Y/M0GZCL0=)
2: xBEy6xBfQ6xkWNnMM3b-8Ps1FR0.roa (hash: Ym4zKNNqMflGb0dAEycHEmUQAQN+DoJITr/UvN/UU8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:62:f5:86:3c:5f:00:bf:62:75:3a:97:b9:2c:f6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e754c3a3db2ed14aa6c06a99d797291702001c
Validity
Not Before: Feb 2 02:00:07 2025 GMT
Not After : Feb 3 02:00:07 2025 GMT
Subject: CN=6bf206995b6cc89febe9d49c52f901a842b94e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:52:79:2b:60:37:68:6c:7b:9a:b6:e9:0e:
c1:30:b5:ba:38:13:ef:ba:78:d3:f6:af:c8:34:81:
b5:69:80:f3:74:0f:96:1e:85:ba:ea:af:61:2f:a6:
4a:b9:c9:c5:3d:20:6d:a7:a1:1f:ef:1c:7b:fb:2d:
f2:02:fb:f6:9e:06:c0:5b:84:a6:f8:59:6e:60:33:
ec:d9:7b:50:a9:ec:ab:f0:bd:b8:b1:43:47:3f:78:
6c:a1:38:94:3c:68:bc:b3:3f:39:7a:7c:cf:ff:43:
7f:6d:41:de:f0:39:77:ee:94:69:72:af:c5:8d:3e:
e3:10:23:0d:6c:a2:b1:37:cb:3f:fe:fb:1f:cd:71:
78:bd:da:9b:4b:97:67:29:5b:43:35:1a:01:01:19:
ac:cc:ee:0f:9b:1d:1b:59:54:a7:b0:0c:63:bf:f6:
0e:84:9e:6d:cd:ee:c9:85:e1:ea:71:2e:f6:40:10:
82:14:ed:e4:73:b4:0d:e9:58:27:c7:3f:89:26:eb:
e1:b7:73:3b:75:d6:83:56:c1:0d:70:4a:4a:d6:1e:
5e:c6:c6:50:a8:d4:5b:5d:bc:7f:d5:a0:6e:c8:c7:
9e:49:5d:ab:76:45:7e:aa:f3:82:df:da:4a:0a:a4:
d6:ca:99:d1:fe:d8:a1:c2:1c:55:cb:a4:7b:76:c0:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F2:06:99:5B:6C:C8:9F:EB:E9:D4:9C:52:F9:01:A8:42:B9:4E:9A
X509v3 Authority Key Identifier:
keyid:08:E7:54:C3:A3:DB:2E:D1:4A:A6:C0:6A:99:D7:97:29:17:02:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COdUw6PbLtFKpsBqmdeXKRcCABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/016efc-9255-4cab-bf9a-8edc52dc60cf/1/COdUw6PbLtFKpsBqmdeXKRcCABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:06:d7:dd:23:8c:73:b9:2c:dc:05:b2:7d:55:c7:78:80:
f1:cc:0d:31:8d:ee:05:1d:24:4a:e7:06:28:5e:e4:07:87:08:
e0:09:ec:2d:33:43:90:d5:53:19:cb:70:80:3c:8d:2e:91:62:
7f:5f:61:40:9e:88:ed:b2:01:ba:3a:43:0d:07:b1:d2:f7:76:
77:70:ef:02:e3:a4:d7:de:f4:98:ca:01:da:be:4a:0f:f8:98:
20:89:e3:e3:e2:52:24:e1:4e:f4:13:f9:9a:30:33:77:a9:99:
81:1d:4e:94:69:3e:40:7e:74:cc:c1:b6:54:b5:51:ab:4b:59:
61:75:3d:0a:f3:4a:c8:bb:7f:42:1b:62:60:cb:f7:d2:8b:96:
7a:bd:03:c0:86:8f:3c:25:53:00:f4:9a:ae:d1:f1:57:c5:3a:
10:ad:04:40:1c:68:4c:67:58:80:64:db:4e:06:46:85:d0:4b:
36:60:31:05:66:47:7a:f4:84:48:9e:b9:f9:6c:9d:3f:5d:8c:
de:00:e7:d0:68:b3:83:d2:40:2b:4e:ce:76:da:76:21:fa:11:
28:f6:65:07:27:0a:4c:e8:3f:c0:da:c8:60:87:cd:88:80:0e:
b9:3d:4f:cc:3e:29:4d:b6:86:1c:97:78:be:2c:cf:43:07:5d:
27:8e:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:11 2025 by rpki-client