Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
File: a8Ef6I7on9gaZn_z3QAj73dGlzY.mft (raw, json)
Hash identifier: eiW+y0J7iwBE8tFLRTRb7Wmye0zRGl7fiz2bPLuC9EE=
Subject key identifier: AC:18:61:33:2E:F1:D5:C8:AA:2D:B3:BF:4F:C1:C5:18:21:B0:72:E4
Authority key identifier: 6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
Certificate issuer: /CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Certificate serial: 0194C3F5FEFE37FA960FAB05119B9AAECE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
Manifest number: 06AA
Signing time: Sun 02 Feb 2025 00:01:06 +0000
Manifest this update: Sun 02 Feb 2025 00:01:06 +0000
Manifest next update: Mon 03 Feb 2025 00:01:06 +0000
Files and hashes: 1: a8Ef6I7on9gaZn_z3QAj73dGlzY.crl (hash: OsHRzOc67kH0WnH7a1PWsY+mQEoilNNoazOHzDSo3Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:fe:fe:37:fa:96:0f:ab:05:11:9b:9a:ae:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc11fe88ee89fd81a667ff3dd0023ef77469736
Validity
Not Before: Feb 2 00:01:06 2025 GMT
Not After : Feb 3 00:01:06 2025 GMT
Subject: CN=ac1861332ef1d5c8aa2db3bf4fc1c51821b072e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:19:0f:d5:43:39:5e:96:62:e0:b9:ff:a6:
2b:69:82:d7:4a:1e:f7:11:0b:d5:1f:4b:69:19:31:
b0:ac:ed:c8:c4:a5:ff:ad:40:9d:22:a8:7b:0a:75:
b9:57:17:34:1c:91:94:e6:03:fa:db:ae:a7:a0:2f:
65:07:99:5f:71:8d:a4:90:8e:00:4a:fe:a6:7c:3c:
56:d6:f2:eb:70:74:cb:1e:1b:bd:9a:e0:2f:83:bf:
95:8b:87:3c:a1:36:d0:9f:db:d8:d0:42:e0:bc:e3:
ba:de:6f:32:dd:20:61:14:7b:bf:dd:5a:45:54:1f:
a6:d9:8b:41:d5:38:94:8c:d5:96:1c:8c:2b:f1:f3:
ae:3c:a0:74:93:76:b3:54:6e:db:25:98:33:eb:34:
68:de:0a:2d:f8:a0:99:81:8c:cd:fe:5b:0e:1c:4d:
fb:01:94:19:b2:b5:ef:be:fe:12:5f:e9:b9:13:7c:
d6:5a:6a:9e:a5:ff:62:99:3a:2c:3e:7f:19:28:cf:
23:02:02:eb:b2:94:e8:30:de:e8:ce:3f:1c:47:57:
46:d6:8b:0b:0b:29:79:6e:de:d9:c4:d9:3f:ab:3c:
22:5f:f6:48:8d:f3:6c:36:e1:b7:53:d8:1a:04:4b:
da:81:b5:c9:f9:e0:b3:b8:fe:5b:e7:e7:25:d3:41:
a9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:61:33:2E:F1:D5:C8:AA:2D:B3:BF:4F:C1:C5:18:21:B0:72:E4
X509v3 Authority Key Identifier:
keyid:6B:C1:1F:E8:8E:E8:9F:D8:1A:66:7F:F3:DD:00:23:EF:77:46:97:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Ef6I7on9gaZn_z3QAj73dGlzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c0cce-0752-4e5a-ad5a-2d402d55ad5a/1/a8Ef6I7on9gaZn_z3QAj73dGlzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:78:55:a5:d8:b4:78:4b:1d:a5:87:4d:5d:9f:95:5a:e2:05:
a3:54:8b:60:5a:a9:9c:54:df:9c:b3:0d:03:f7:14:82:f2:07:
c9:99:09:32:ff:d1:ef:2f:dc:f2:eb:65:1d:e8:b9:14:c8:97:
8a:0e:fe:40:93:75:31:3e:17:f1:51:e1:1c:96:70:ed:81:0f:
c7:4d:0c:85:2a:ca:d4:6c:e0:b1:72:d2:e6:14:5a:0d:37:48:
10:19:2f:82:cb:e0:a3:65:57:e6:80:0a:3d:a0:38:da:32:64:
1d:7a:ed:89:15:d9:b3:81:b9:bc:59:f4:fe:a7:9c:b9:c7:fd:
1b:a1:d9:61:b9:dd:97:2f:c1:c9:4d:9a:c1:d0:ee:e2:63:39:
01:8a:3b:0c:16:ea:da:e2:45:78:c2:33:04:ec:20:6b:9a:44:
6c:17:03:b7:36:6b:e2:e4:0d:6b:b2:b6:1a:22:49:61:ac:55:
f9:39:b0:38:aa:94:59:42:46:ae:6c:95:77:a5:49:0f:ab:4a:
1c:96:11:3d:21:5a:2d:b0:74:77:ac:fb:1e:13:c9:4d:f1:f2:
35:2b:24:05:dc:df:60:eb:e4:6d:0c:89:5e:4a:24:78:65:ef:
4c:33:84:46:0a:35:44:be:fd:30:94:50:61:5e:8b:05:2c:32:
a2:eb:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:19 2025 by rpki-client