Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: z+9LR04SGam00cIHbyxFxcEy/QiKZFKnUx3KGUkXac0=
Subject key identifier: CA:14:12:85:A7:E5:90:B6:FB:EC:25:E4:F3:0A:A1:B7:9A:18:BC:12
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 0195108FA0CFA5289E6A2FDEDD010B6B37E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 21:00:02 +0000
Manifest this update: Sun 16 Feb 2025 21:00:02 +0000
Manifest next update: Mon 17 Feb 2025 21:00:02 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: C7DaJMgXFUNcjqQDP5U6ME0mJY9ntYf/yaKOu2AVLsQ=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:a0:cf:a5:28:9e:6a:2f:de:dd:01:0b:6b:37:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Feb 16 21:00:02 2025 GMT
Not After : Feb 17 21:00:02 2025 GMT
Subject: CN=ca141285a7e590b6fbec25e4f30aa1b79a18bc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:f0:9e:ec:15:16:8f:04:f8:9d:3c:f6:1e:
c2:87:23:e3:fa:1c:e1:d5:04:a0:30:64:9e:83:ca:
65:2d:b5:99:35:f3:fd:c9:31:7a:6b:3b:a3:26:55:
35:db:06:50:f1:05:2c:14:3b:04:66:72:a8:9b:39:
fe:28:c7:8a:45:9f:8f:b0:2b:2d:27:75:6d:9b:20:
c8:7b:32:a3:15:d1:81:24:4f:6c:e2:c7:0a:4b:54:
6b:7a:f8:f1:60:e7:4b:59:40:4a:1c:0f:48:a3:7f:
3a:64:14:0b:9c:fb:4d:21:1e:f5:d4:b1:33:e0:6e:
b3:c3:c4:c5:85:f1:eb:ec:4c:c8:48:e4:3d:8d:66:
0c:5b:2d:54:40:77:a3:e6:36:40:65:ef:e9:b0:5d:
62:a1:76:e2:83:15:9c:17:17:c5:ae:1f:1a:5c:52:
b8:eb:12:b8:60:70:e9:ff:cc:33:aa:3d:90:ba:f6:
55:80:be:ff:2e:a3:68:01:da:d1:26:10:6b:5d:6a:
24:78:1e:02:0b:78:a6:f2:6b:92:83:f8:84:f8:c5:
a0:a7:35:c0:f3:20:65:83:e8:6c:c6:d9:86:85:6d:
e0:cb:5e:71:59:b7:8f:2c:84:3d:63:bb:71:54:c1:
be:c3:5c:18:9a:77:0e:8e:51:ee:51:be:d9:f1:3f:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:12:85:A7:E5:90:B6:FB:EC:25:E4:F3:0A:A1:B7:9A:18:BC:12
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:71:f4:f2:e4:35:b3:24:29:75:da:ca:a1:37:5d:ba:9b:e0:
2b:ef:18:6c:01:b3:dc:9b:3f:83:f6:5f:3b:bd:df:76:36:57:
41:99:54:33:eb:96:08:35:20:d1:8d:b5:66:9b:38:d7:a9:4c:
a5:45:df:e7:49:dc:02:9e:4b:9f:a0:66:bf:e4:d5:52:6c:17:
bb:4c:55:fc:ef:92:03:bd:71:7d:19:0e:38:bb:4a:5b:47:69:
f7:df:d0:74:53:68:8c:4a:33:25:f0:33:f3:a7:d4:3e:15:68:
6a:40:07:27:55:be:cf:37:16:1e:ac:d9:ae:02:5f:cc:35:fd:
18:a9:68:75:a9:1a:12:0e:cf:3c:10:5c:e2:73:82:9e:8d:3a:
5a:3f:99:cb:bb:ea:90:60:08:98:d4:75:a7:5b:dc:83:02:9a:
f8:3d:8b:4b:ae:9b:c5:e6:a9:d3:08:39:e5:22:08:ae:72:80:
43:0e:3b:62:21:cb:08:25:51:ef:dc:6a:71:38:c3:86:c3:61:
f5:ee:5f:a8:4c:4d:94:0c:0d:e8:a1:e0:3f:e0:80:24:c3:34:
d2:c3:b2:06:68:12:cc:0a:94:0e:58:21:01:c8:b5:33:9c:3c:
0e:5f:d4:f2:de:82:f7:4b:20:f9:e7:20:b8:7d:a8:6a:e0:7f:
3e:a5:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:53 2025 by rpki-client