Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: Z8dQS6cEeHr7BpvMswdRbhYVmxDtmNii+IhFrhNSkqY=
Subject key identifier: D1:9D:C0:31:BD:23:50:00:8A:53:97:43:48:A5:F6:7E:28:FF:28:F6
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 0195113557B8D52B43211ED146B726BBF116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 0CCB
Signing time: Mon 17 Feb 2025 00:01:03 +0000
Manifest this update: Mon 17 Feb 2025 00:01:03 +0000
Manifest next update: Tue 18 Feb 2025 00:01:03 +0000
Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: 5e+RO8u1RJhOdV6qHAomw/rMIvZgdNM0Ed/lXbvQ23U=)
2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:57:b8:d5:2b:43:21:1e:d1:46:b7:26:bb:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Feb 17 00:01:03 2025 GMT
Not After : Feb 18 00:01:03 2025 GMT
Subject: CN=d19dc031bd2350008a53974348a5f67e28ff28f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:b7:39:eb:94:4f:51:e9:8f:a5:3e:9f:bd:
e9:3f:20:f5:14:50:2f:b7:93:2d:b9:68:aa:44:8d:
88:18:da:2c:23:f8:7e:5f:95:83:98:54:93:39:51:
f4:a3:b9:c8:09:b4:36:2a:fd:b7:56:16:64:9d:8d:
96:46:51:c6:ff:87:48:32:d5:12:a2:72:16:a8:7c:
d2:6a:89:c9:ed:54:a6:60:1c:63:a7:1d:b5:a4:96:
64:82:d1:d9:a9:43:cd:b0:80:2e:ca:c7:c4:7a:64:
23:c7:32:1b:58:c7:0b:a4:56:0c:3c:4e:f0:20:27:
b8:06:2e:74:44:79:db:55:86:45:da:18:70:9a:d0:
9c:4e:c0:40:e0:91:23:b9:08:e2:6e:6a:6f:b3:c1:
59:87:11:a0:e3:be:0d:b9:1c:de:71:25:61:f2:78:
82:88:4a:a4:10:81:ae:6b:81:98:8b:f5:ca:ef:8a:
32:21:2c:25:62:43:dc:a8:73:fe:8f:32:bc:93:5e:
5c:3d:b7:12:74:70:73:3c:1c:f9:1e:bd:40:ce:dc:
fb:7b:b8:fe:4a:7e:37:1d:94:b0:7d:71:6f:56:70:
fd:20:27:d4:ab:8b:44:85:f9:bf:20:cf:c5:5b:ea:
87:4b:52:e3:48:cb:5c:b4:bc:b7:92:31:1d:e7:c1:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:C0:31:BD:23:50:00:8A:53:97:43:48:A5:F6:7E:28:FF:28:F6
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bc:a6:99:a6:1d:2d:28:c5:70:aa:f7:94:4f:26:aa:9b:4c:
c9:53:44:59:b8:d8:4a:87:6d:ca:79:30:2d:78:1d:f7:8f:c9:
60:41:d2:fb:df:50:8b:ab:f2:e2:53:bf:d9:b8:c2:f6:e1:fc:
f1:a8:6e:6b:7e:9e:65:8f:de:9a:20:29:e9:0b:23:b9:19:15:
f4:63:8e:fa:ac:35:76:51:1f:d4:61:8a:5e:d4:36:12:f0:18:
f7:ad:64:b4:b2:62:54:6e:90:70:ff:f8:17:24:a5:0e:8c:83:
21:6a:0c:75:33:28:12:d8:bb:6b:aa:99:93:b2:d3:b3:69:c2:
6d:40:b9:34:dc:75:f7:b9:b4:39:70:6e:c2:b6:f7:8d:b9:2c:
b0:c8:c4:b7:93:07:b0:30:9c:67:6f:9c:9d:23:2a:77:be:72:
65:71:a1:95:0a:36:5f:b6:67:de:a1:e2:0b:ec:d0:59:0c:e3:
bb:59:1d:cc:08:ba:13:db:62:97:39:38:58:75:d3:5e:d1:e3:
06:7f:1c:3d:56:4a:04:24:e8:69:23:3d:f6:34:71:e9:ee:82:
0d:0e:5a:50:bc:6c:14:c7:5c:c2:27:39:a9:a0:7a:3d:b0:97:
a3:6e:e7:8b:68:b1:af:5e:a6:29:70:3c:db:af:be:90:c5:8b:
ef:ae:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:44 2025 by rpki-client