Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
File: 6R7yKtqhbVPc9jfFafQTHyYhW5E.mft (raw, json)
Hash identifier: 9jNqN4WCW5OSO9Rt8TrvfTDNifcGITRbaNi/ISxub24=
Subject key identifier: 25:CF:4C:8A:16:61:F3:6C:94:7F:BD:18:AE:F0:95:D1:AF:B4:95:6A
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 0194BB5FE19E16BE3208DBB145C3E54D12DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
Manifest number: 025D
Signing time: Fri 31 Jan 2025 08:00:10 +0000
Manifest this update: Fri 31 Jan 2025 08:00:10 +0000
Manifest next update: Sat 01 Feb 2025 08:00:10 +0000
Files and hashes: 1: 6R7yKtqhbVPc9jfFafQTHyYhW5E.crl (hash: 5QvAr+zuk5qMjNXUcvlQxJoBd6gKwmnVSXb3MwzwY48=)
2: WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa (hash: p1IXSS0dQT7jQoZ+bhqnxR0GfdNISbb4bIxh4ZncPMk=)
3: Y6vFdVo-GjJoXddCRXOoOuYWqlY.roa (hash: T5QXavJvixaaOxN73mucpK9ZuvAfRwDkBmPlpJOxvtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:e1:9e:16:be:32:08:db:b1:45:c3:e5:4d:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jan 31 08:00:10 2025 GMT
Not After : Feb 1 08:00:10 2025 GMT
Subject: CN=25cf4c8a1661f36c947fbd18aef095d1afb4956a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:02:b6:b3:82:30:15:56:b3:38:61:39:af:
f0:dd:35:b3:01:fc:7a:9b:31:75:ba:74:37:ec:a2:
e1:1a:f2:e9:49:aa:5a:3d:d9:c1:5d:da:da:88:ac:
29:d1:21:c6:53:25:eb:63:1d:2f:71:3d:ba:e7:f4:
da:74:e0:1a:45:0f:7b:05:60:03:a3:48:1a:f7:eb:
b9:ba:16:43:28:68:d5:4f:5a:ca:2e:fb:cb:20:c0:
c2:f2:fd:c4:e4:76:bb:0d:74:48:80:8f:f4:40:1c:
26:db:01:b8:69:8b:9b:eb:6f:ea:4e:23:d5:b5:8f:
3e:99:f3:e9:b6:94:64:e1:09:3b:cc:bc:63:45:4f:
8e:1f:09:d7:17:47:24:e0:78:67:94:05:41:cc:41:
a6:32:a3:1d:76:97:53:99:b8:43:4b:3c:09:63:3e:
fa:0a:62:de:01:04:6e:6f:61:08:cb:71:17:b9:15:
c2:dc:66:d1:74:a2:07:35:13:ab:6f:c3:b9:17:52:
99:3c:1d:93:82:2d:84:74:82:1a:d2:96:93:1b:c7:
9a:4e:1d:ac:b5:80:44:aa:7a:57:0d:84:b8:ab:38:
73:ba:22:01:b6:14:e3:68:cc:93:cc:c6:d1:56:82:
aa:e3:49:d6:3c:b9:92:9f:07:67:8a:8b:a1:43:ce:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:4C:8A:16:61:F3:6C:94:7F:BD:18:AE:F0:95:D1:AF:B4:95:6A
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:5f:68:d0:07:a2:eb:b4:57:9b:1e:40:e7:2a:47:18:99:
dd:14:51:7e:6a:53:b4:b7:68:86:56:b2:99:6d:ff:f7:8f:e0:
31:59:29:0b:58:57:cc:fb:bd:38:cc:4d:18:41:15:91:31:32:
5c:35:bd:aa:24:b8:43:e4:e5:28:cd:ad:02:0f:0a:d5:68:51:
80:40:13:7e:2d:45:39:24:90:02:46:d3:64:ee:a8:03:b9:5a:
04:5f:27:f1:be:70:75:a1:6f:8f:c7:32:ec:77:a9:0d:e4:3b:
93:89:a0:f4:9b:5c:3f:c5:38:08:e5:b4:78:0e:45:e3:b6:87:
89:1b:a7:b1:5b:07:54:e0:73:ce:53:99:cf:03:82:fe:68:b5:
06:0e:d8:90:a6:3e:2a:62:79:2e:0b:b6:90:15:2d:ce:4c:05:
10:ba:52:28:28:ac:b1:d0:be:4c:d2:da:43:99:dc:fa:55:04:
61:bc:cd:cf:86:bf:44:e3:dc:4e:bd:15:1b:b2:4c:f9:a9:6f:
11:45:54:d6:ad:f2:a1:90:31:df:5f:fa:53:82:82:5e:47:c4:
61:8d:7b:4f:af:35:c8:c1:f3:3c:0b:2a:5a:2b:0c:f8:63:43:
9e:6a:e2:f9:ee:6f:0b:e1:50:99:63:f0:37:ad:08:3a:65:63:
ac:57:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:49 2025 by rpki-client on console-fra.rpki-client.org