Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File: 6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier: bILBsyuMMyxNvzNgxulLWYQIymrpJQwvAfBw/diZ05U=
Subject key identifier: 5B:36:DF:0A:A7:89:98:B1:68:BB:70:B8:5D:9D:3A:71:A8:EE:79:6F
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer: /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial: 019511D9A227914E3920AB1B69C315DED411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:30 +0000
Manifest this update: Mon 17 Feb 2025 03:00:30 +0000
Manifest next update: Tue 18 Feb 2025 03:00:30 +0000
Files and hashes: 1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: ZeRAuzvipoRYUR257IQoSXyICCuJCF+D6DIeL6BAHyk=)
2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a2:27:91:4e:39:20:ab:1b:69:c3:15:de:d4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Validity
Not Before: Feb 17 03:00:30 2025 GMT
Not After : Feb 18 03:00:30 2025 GMT
Subject: CN=5b36df0aa78998b168bb70b85d9d3a71a8ee796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:c1:68:37:af:a1:1e:bf:81:f8:b1:d9:da:
dd:5e:62:77:7c:8d:22:5f:6c:9b:cf:80:b2:19:ca:
72:22:1b:d7:fa:db:82:c4:c9:18:e3:2a:0d:cb:c9:
93:67:6b:bc:42:9a:3c:51:f3:ee:62:25:ad:c6:09:
38:99:14:41:83:c0:1e:ea:28:0b:6b:70:23:69:13:
ca:dc:2b:5d:9b:25:93:a9:ca:69:20:ed:a3:da:e7:
14:48:b0:07:18:ff:8c:e0:82:77:e1:85:ac:bc:98:
c2:2d:9e:20:a5:d1:ac:8f:ee:02:9f:34:7d:b5:af:
67:74:57:91:b7:d4:fd:ee:a8:96:bb:f1:f8:b7:14:
0a:eb:85:c8:fe:9a:87:55:b2:64:f1:16:33:46:bf:
30:73:5d:52:68:d1:f5:35:c9:f6:95:44:aa:d1:4d:
01:16:83:ce:26:be:98:2d:41:dc:3f:49:b7:95:c9:
fe:78:58:84:54:48:88:7c:10:a4:06:06:d3:60:73:
e3:1c:5e:25:9c:f6:67:f6:e1:78:14:4e:e3:48:07:
87:ad:72:45:fd:6b:5b:80:c0:26:02:2e:ac:b7:d5:
aa:d4:e9:ea:2a:42:7a:52:ab:c6:1f:9d:03:b8:e3:
55:b7:a2:2c:c0:55:6c:eb:d8:60:17:dd:ce:92:5c:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:DF:0A:A7:89:98:B1:68:BB:70:B8:5D:9D:3A:71:A8:EE:79:6F
X509v3 Authority Key Identifier:
keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:52:5e:87:36:eb:5d:46:39:d1:1f:c8:f2:f0:19:4f:18:c1:
53:f7:27:0e:eb:2f:84:5f:bb:b7:f0:57:06:c9:10:45:b4:4f:
11:3a:c3:9f:69:f3:b0:df:31:3e:00:7b:23:16:b7:2b:04:fa:
13:d4:58:7a:55:0b:50:3b:57:4b:7f:03:ef:9e:3b:94:79:f3:
ef:0c:8a:ec:db:98:92:be:c8:34:95:60:ca:b9:6c:20:e3:30:
20:2a:7c:ac:d8:79:ce:9c:5d:b4:f7:53:63:6c:7b:30:f1:c5:
2d:15:b9:73:4a:ed:92:51:88:81:05:77:aa:b8:f8:bb:dc:91:
28:fb:1a:27:28:a7:5f:0e:71:f3:34:57:00:c4:51:3b:fc:ba:
66:49:c5:8d:d8:30:45:17:ff:8a:d8:22:47:16:95:a8:7a:df:
58:ce:32:fa:73:34:69:e9:c0:99:15:46:5e:20:21:58:d9:9d:
d8:08:b5:f2:e2:76:b2:83:8d:34:72:84:e2:3a:d9:30:9c:52:
45:6b:c8:66:14:ed:50:74:7b:9c:4f:0f:64:40:a4:e6:52:25:
e7:fa:11:1f:53:36:63:11:45:9b:40:e4:af:a5:82:b3:56:40:
f2:06:16:8c:2b:91:b2:b2:dc:1d:f1:f7:11:0c:6c:4c:e6:82:
6a:e3:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:20 2025 by rpki-client