Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: iY2bI4VPzlO9DbOPGvVNfruqUKATrMMze5nVHxv4GXI=
Subject key identifier: E2:AA:78:CD:27:53:75:CC:5B:85:EC:07:CB:0B:FE:1F:81:E1:F7:C0
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 0194C42CA18E4CD8F6EBA42719002D9215B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 1430
Signing time: Sun 02 Feb 2025 01:00:46 +0000
Manifest this update: Sun 02 Feb 2025 01:00:46 +0000
Manifest next update: Mon 03 Feb 2025 01:00:46 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: o5ZeDJwwYgW0/NtQel9ii/9g0i/McpMOJbT+0ndBbq4=)
2: o_9E0nw7QGxoWCZk4QqgNmZyf9E.roa (hash: 1PmMo5WtlImsrpdUj9rWhTyVCZubOTGK5D/YW7g4Mss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:a1:8e:4c:d8:f6:eb:a4:27:19:00:2d:92:15:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Feb 2 01:00:46 2025 GMT
Not After : Feb 3 01:00:46 2025 GMT
Subject: CN=e2aa78cd275375cc5b85ec07cb0bfe1f81e1f7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:f9:9a:94:c6:ed:18:4e:cb:c7:b3:bb:3b:
0c:84:73:da:f3:8c:64:80:85:d9:93:a4:60:f4:51:
6d:11:36:f4:d8:4b:4a:13:4c:ca:ed:25:ac:6b:21:
e7:2b:84:d1:26:07:38:59:47:62:59:47:e1:c3:b3:
f6:e0:41:74:62:8b:02:f5:1e:ce:cb:b1:ce:65:f9:
23:96:ad:39:81:63:de:4b:40:7a:c4:38:10:a6:12:
0d:51:54:70:c9:da:8e:ec:5d:99:1c:7a:cf:af:c4:
a4:70:21:56:4d:88:6d:7c:39:b7:1f:9d:0c:a0:48:
f7:1d:78:0a:7f:75:78:fa:96:b4:9b:61:e2:ce:0c:
b5:0c:b5:c5:03:a3:58:ad:3e:f7:e1:aa:0d:d0:df:
5e:f8:28:2b:37:22:66:e2:bc:ca:9f:1d:1a:3c:99:
c5:f2:66:f5:80:d8:ce:15:a5:66:0b:02:ba:7f:a1:
bc:6d:75:d3:fe:64:0d:a3:57:e1:24:3c:8f:e4:de:
ae:49:05:63:99:09:f8:cf:6d:9c:e0:88:03:6f:ba:
27:ae:75:74:b6:9a:3b:55:16:39:9d:1b:37:4d:9d:
e3:c2:e9:6a:ad:1e:78:c0:10:31:28:3b:97:49:9b:
d1:a8:d2:72:39:28:08:0a:97:74:2a:fa:83:15:31:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:78:CD:27:53:75:CC:5B:85:EC:07:CB:0B:FE:1F:81:E1:F7:C0
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6f:78:cf:7c:ea:42:d2:e4:e5:92:4e:6a:a9:96:9e:53:eb:
7a:7a:82:58:4d:b9:21:8b:02:6b:0f:e7:f9:68:e9:ee:7c:c2:
7a:25:0b:1e:96:2b:a5:b0:94:c3:81:21:27:d3:78:73:a5:40:
06:51:0c:79:11:f2:b3:b8:b3:cc:67:cb:44:fe:7a:62:f0:c2:
cf:24:34:a8:17:39:5e:ab:3d:7e:0f:46:ed:b6:61:3d:e5:92:
91:8a:34:ee:d2:ac:08:dd:f4:e0:86:c8:14:99:6a:a9:36:ab:
5c:42:b7:de:26:d2:32:d1:bb:3e:2e:d0:49:e0:70:8a:d7:4c:
c0:f3:51:fd:d5:48:08:77:46:7c:8c:6b:98:a8:aa:e1:4a:de:
f0:6f:1f:fd:ce:ea:53:70:12:07:c2:49:fd:c1:7d:6b:42:a4:
92:4e:7a:56:80:9d:9d:42:eb:b1:72:ec:65:de:b3:d9:2b:1d:
87:dc:31:89:8c:e3:68:a5:df:eb:39:e0:59:5e:23:17:b1:bb:
48:bd:96:05:a6:f1:8b:ac:dd:70:08:a7:55:f8:34:a9:cf:63:
da:0c:72:d2:6c:ef:3a:54:fc:d6:c2:36:d9:a4:79:53:1d:b5:
a1:5a:2e:14:41:03:49:54:d3:a7:a3:67:c3:3d:3a:60:40:89:
0c:ef:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:02 2025 by rpki-client