Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: IcLU9gxfwX4AiWlWHnF7zMatRCTq5aWwaeo9TJC2Ues=
Subject key identifier: B4:BC:A2:F3:CD:7B:8C:2A:BD:10:6F:8F:9D:6C:CA:85:43:A3:2D:87
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 019511D9AA5CDCB8C25773B39EBD4268D2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 01FA
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: Zk5q3vT0pxjtHM8zQ29V29J4BTyLrqyj+vPd6DVuOAM=)
2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:aa:5c:dc:b8:c2:57:73:b3:9e:bd:42:68:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=b4bca2f3cd7b8c2abd106f8f9d6cca8543a32d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:44:df:e9:ab:5c:89:e3:2a:32:5d:78:b8:
5c:99:23:df:e3:42:22:a1:f3:85:e7:a9:b3:93:ea:
46:50:42:9d:2e:90:cf:62:95:8f:08:0b:f8:8d:e8:
21:fa:16:1d:dd:a1:ff:0a:e9:4e:4f:fe:e5:ff:1d:
55:f0:14:8d:0a:ec:66:94:c5:f9:62:a6:88:c9:22:
22:42:c0:5d:e3:4f:b0:43:61:62:6e:87:ad:83:5f:
1f:51:a9:4d:26:64:ad:a0:00:8f:31:15:c6:42:37:
6c:e4:2a:ee:f9:b0:68:c0:9d:9f:06:49:a5:9d:47:
6c:80:c2:58:07:e9:72:0b:19:70:da:68:34:f8:8c:
4b:42:e9:1e:13:c5:af:01:f8:61:a2:12:4b:10:94:
05:4a:6b:b4:0e:e1:1f:93:10:59:44:b6:f4:ef:7c:
27:61:4a:c4:83:44:d5:f6:4b:c2:9e:e3:62:36:b0:
37:2f:ca:ab:08:e1:3c:59:0a:8e:35:48:d3:31:5f:
54:a2:68:b3:c0:49:70:4d:c9:44:04:37:7a:4f:76:
ad:c3:a3:73:fc:02:00:33:2c:4d:6f:5f:00:af:7e:
42:ef:ce:41:62:33:2d:30:90:6e:32:da:cd:d3:d7:
34:af:5e:58:a8:ac:6e:8c:41:25:a5:31:a3:ec:2b:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:A2:F3:CD:7B:8C:2A:BD:10:6F:8F:9D:6C:CA:85:43:A3:2D:87
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9b:ea:59:30:94:4e:46:d2:36:6b:3e:40:f9:ab:cc:4d:62:
ab:e8:ca:46:01:52:43:2b:8c:b5:63:d1:40:4c:e5:40:7d:b6:
ec:06:5d:6d:96:72:3b:cd:07:c9:27:b6:ca:c3:c6:d1:88:9c:
08:57:a2:2a:b3:c4:4a:5d:32:c0:50:a2:93:de:1b:e3:f1:cd:
dd:0a:b8:a0:88:5d:66:99:f6:12:26:6b:f2:40:6b:d1:9f:88:
0c:9c:42:8b:42:e3:41:93:7d:3f:00:66:28:24:c8:9a:7a:9c:
c2:fe:61:1e:3b:d0:c3:73:b2:4a:3c:48:f6:7b:bd:18:68:5e:
f8:67:25:73:0d:62:f9:a9:03:71:c7:43:d3:00:ae:21:e4:f5:
42:45:fb:86:bf:35:9d:69:a0:d8:f5:01:d3:63:d5:8c:ad:cb:
35:c0:72:bf:6f:ab:18:e1:f2:b4:58:c7:88:86:38:b9:1b:60:
2e:59:c7:79:39:c7:b6:d8:e0:ee:06:32:f2:b7:d6:85:d4:08:
f7:74:21:3d:9e:70:10:61:3b:83:e9:95:0f:da:7f:0d:31:32:
aa:fc:4f:d2:88:19:81:e1:80:cc:47:b0:d4:12:4a:6f:5d:2e:
0d:11:6a:46:35:da:00:85:d2:b0:27:a0:cc:1a:03:2f:3b:46:
71:ec:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:53 2025 by rpki-client