Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: 8uEoNMtisnMyUEJWZ8y+69rvUcaIsyb8VEKatn65010=
Subject key identifier: C6:FC:75:01:5C:B8:3F:E7:12:3B:9E:85:C7:F7:23:E0:F8:1F:F9:5A
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 01951134C3AA6A5ACBD954D884B1C597AAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 06B9
Signing time: Mon 17 Feb 2025 00:00:25 +0000
Manifest this update: Mon 17 Feb 2025 00:00:25 +0000
Manifest next update: Tue 18 Feb 2025 00:00:25 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: a7tggYNf45nxtFotVepAO39HaeAX+DmkjGiqvUg27BY=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:c3:aa:6a:5a:cb:d9:54:d8:84:b1:c5:97:aa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Feb 17 00:00:25 2025 GMT
Not After : Feb 18 00:00:25 2025 GMT
Subject: CN=c6fc75015cb83fe7123b9e85c7f723e0f81ff95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:52:14:5f:5f:cd:fa:96:db:8c:2d:3d:f5:
8d:4e:df:94:97:f7:e2:ad:f1:8e:f7:02:73:29:d9:
7f:77:07:61:4e:dd:76:1d:bc:53:5b:ac:44:9c:b9:
34:c6:fd:14:c5:9b:38:b3:5d:13:a1:60:00:82:be:
d0:b0:ec:26:bc:3f:9b:a7:d5:b3:45:04:36:9a:c5:
2e:89:11:8d:2e:03:02:bc:dd:87:d6:59:6c:61:04:
8c:ab:3a:dd:dc:d9:c7:c2:aa:db:12:2c:0c:f6:bd:
17:09:2b:85:f9:c8:0a:13:8e:20:bf:8f:92:06:6f:
73:21:8c:5d:85:c4:3f:a5:e6:ee:5c:ee:4e:fb:b2:
ac:7e:22:10:c1:c6:79:57:1b:12:32:a3:0f:bc:05:
18:fb:94:9d:10:ba:d0:00:f8:93:4b:84:50:ea:a0:
96:b9:6c:22:21:e5:be:e4:86:7f:17:50:76:67:9a:
c0:8c:3c:43:2d:88:1f:be:81:34:9c:96:98:3c:79:
ba:47:08:e2:d4:09:9c:9b:c2:fc:23:a8:6d:7f:9b:
dc:01:40:bf:e7:ab:68:cc:8b:c3:01:d5:20:25:bf:
e8:1b:19:d9:66:95:6c:c4:09:a6:49:27:8a:b7:f8:
3f:b4:88:df:aa:86:dc:6c:c9:a4:7d:8c:0e:03:53:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:75:01:5C:B8:3F:E7:12:3B:9E:85:C7:F7:23:E0:F8:1F:F9:5A
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ec:d5:bd:3e:a6:25:92:58:d2:de:66:ae:65:55:71:38:61:
35:3e:60:75:45:33:eb:db:71:f4:36:a8:89:20:78:29:21:c1:
1f:a6:4e:9b:23:78:2f:0a:6e:22:dc:70:2d:19:c1:79:f2:9a:
47:f9:18:9b:76:c0:58:89:e8:61:28:1b:87:06:a1:d6:f1:03:
1c:6e:c5:d3:eb:9e:fe:64:c8:9d:2b:e2:5e:97:82:38:37:6e:
27:f8:70:4a:73:39:93:b7:23:66:ae:8d:c4:7f:ac:b3:24:fb:
7f:bf:51:53:db:e1:cb:ac:4f:51:70:d2:60:bb:c1:ee:08:20:
94:ea:10:da:ab:e3:01:87:1f:c8:59:fa:1e:71:41:cd:0f:fd:
60:9f:7c:8d:a2:ee:7b:76:16:60:4e:f1:66:c9:28:eb:0a:52:
32:96:bd:bb:2c:ae:a6:9f:bf:4d:43:13:ff:42:d2:04:d0:f7:
2c:5a:89:a3:4d:b8:86:a7:02:a6:b6:f2:a3:43:c5:ef:09:d7:
4c:ed:97:21:b5:b6:a7:ce:70:6b:98:8b:70:10:8d:44:90:c6:
e6:3c:34:cf:c6:25:db:d7:6e:fc:7c:a4:62:d2:26:dc:b1:aa:
3c:1b:db:9a:8d:28:6d:ef:a6:ac:2e:35:9b:6b:73:2c:8b:12:
ba:07:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:14 2025 by rpki-client