Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File: 6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier: KFJYE18MjFbAL4PYje+iaoEwkFqUkZfWaumBP55VgU4=
Subject key identifier: 03:FE:F6:CB:11:DD:7B:CF:65:D1:39:1A:9B:16:49:E3:C9:B6:8B:E7
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 0195108FBDC47C3A9EA87CF5702B6F4DBFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number: 13E8
Signing time: Sun 16 Feb 2025 21:00:10 +0000
Manifest this update: Sun 16 Feb 2025 21:00:10 +0000
Manifest next update: Mon 17 Feb 2025 21:00:10 +0000
Files and hashes: 1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: OSlTRPJkfXIQt5OUsNTGWPEmG+9hkL+NRyYCdKF8K8g=)
2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:8f:bd:c4:7c:3a:9e:a8:7c:f5:70:2b:6f:4d:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Feb 16 21:00:10 2025 GMT
Not After : Feb 17 21:00:10 2025 GMT
Subject: CN=03fef6cb11dd7bcf65d1391a9b1649e3c9b68be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:e9:6b:77:5e:b4:e6:f2:4f:cd:35:07:72:
b4:1d:38:fe:57:31:e2:cc:a4:8b:0c:c4:fd:4c:24:
86:6d:31:59:08:f1:38:a9:f5:d6:f2:f9:6a:ce:7e:
97:d1:ee:6c:a8:7b:03:6c:9a:44:a5:81:24:f8:e3:
83:92:1e:20:64:0f:f2:74:1f:a6:d5:c6:72:a5:2e:
97:09:f1:4c:f7:d6:52:33:fb:59:cb:94:6d:79:2e:
6b:01:6c:2b:17:9b:5c:b5:08:66:15:1b:15:8b:f3:
e4:24:1f:cc:7d:41:36:db:3c:23:68:71:94:47:9a:
0d:97:a4:d3:45:da:50:38:ec:7b:a8:56:40:79:71:
e7:fe:0d:e6:45:63:8d:36:97:48:72:d4:87:ba:84:
e6:39:89:31:07:8b:0c:cb:3d:61:97:82:e7:0b:73:
b5:dd:dc:93:fd:91:bc:8d:bd:21:15:7f:d0:db:83:
4f:3e:49:3d:e1:34:bf:5f:6c:e3:5b:59:70:0c:04:
01:22:e2:db:58:e7:5d:1b:00:29:1c:a6:db:a9:6e:
be:99:e4:52:16:b7:b9:bf:e8:09:99:31:5d:f9:bf:
bc:66:11:e7:85:05:20:52:29:30:90:51:08:e6:77:
c7:61:58:3b:b8:1b:d8:0c:d7:56:c7:3b:2d:45:3e:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:F6:CB:11:DD:7B:CF:65:D1:39:1A:9B:16:49:E3:C9:B6:8B:E7
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c6:ae:21:ba:d6:d8:75:83:e3:35:b8:8b:e7:d1:42:a7:ac:
84:7f:26:fa:8c:4a:aa:48:8e:b9:a9:f5:b6:89:7b:6b:01:73:
24:45:93:98:22:17:86:d6:ce:09:0e:61:e9:01:69:2f:de:3c:
78:2b:a4:fa:91:a2:b2:c4:39:f5:d4:c3:d1:3a:34:fa:f9:ff:
79:1a:d4:fc:32:55:39:0d:b0:47:ef:c2:87:62:45:6f:49:e5:
f3:9a:1b:90:8b:c8:36:dc:92:61:2c:6a:6e:d9:15:53:87:f8:
b2:73:d9:8e:d4:b8:c0:73:1b:94:a7:df:27:4b:82:68:dc:09:
6a:b6:1c:79:64:3c:dc:5d:13:1f:47:ba:08:c3:3c:3c:97:d5:
ea:9c:64:34:ef:61:b6:a9:b7:2c:ed:5e:7f:bb:99:1e:ce:fe:
5d:d7:23:99:cb:66:03:21:79:c5:2a:3e:3f:95:09:56:2f:d0:
47:fe:e6:3d:77:e3:33:b1:6c:c2:df:21:33:be:6f:9c:81:62:
14:a8:51:04:77:59:b7:6e:4e:ad:62:26:d0:a7:41:cf:a0:01:
79:03:14:23:9c:12:26:33:b3:b4:8e:d7:14:d2:42:03:fc:80:
89:35:31:2c:f5:6c:27:f6:18:e8:ae:79:18:3b:db:b7:7a:58:
92:c2:ea:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:08 2025 by rpki-client