Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: LXhwB+JdYG3pcqaJlzHTsI8sQbTN18bm91qXre92bvE=
Subject key identifier: CE:28:75:90:1D:DE:39:9F:01:13:5F:17:D1:39:76:8B:DB:63:8E:2E
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 0194C49A3A9E9A219AFE461FF0ECCB1AB75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 051F
Signing time: Sun 02 Feb 2025 03:00:29 +0000
Manifest this update: Sun 02 Feb 2025 03:00:29 +0000
Manifest next update: Mon 03 Feb 2025 03:00:29 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: Imvp5nsoaZDYCTF1jtuuz4ImzfIRg/zyTpe42e6rGH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:3a:9e:9a:21:9a:fe:46:1f:f0:ec:cb:1a:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Feb 2 03:00:29 2025 GMT
Not After : Feb 3 03:00:29 2025 GMT
Subject: CN=ce2875901dde399f01135f17d139768bdb638e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:dc:d2:fe:5d:d9:25:ee:b4:d8:2c:fb:c1:5c:
b7:c7:4b:94:af:da:2d:60:09:43:35:77:fc:0b:f7:
cc:86:05:7e:89:0f:55:81:bd:b4:f0:17:0f:7f:4f:
87:09:09:6c:ee:d0:f6:db:2e:21:55:b1:41:68:a0:
0c:c1:83:43:1c:df:7d:0a:b7:19:7d:d1:ba:5f:0f:
e6:5f:c9:67:9c:b2:4a:e0:3f:fe:fc:cd:1c:39:9f:
a4:fd:a5:86:dd:30:b9:af:54:e3:b6:47:26:47:1f:
b6:42:82:d5:03:b3:56:46:56:a5:67:ba:f2:39:b2:
6f:af:c6:ad:36:68:2d:3c:48:c2:d2:8b:3c:48:e1:
98:f2:44:10:ae:3c:cd:ed:98:7c:60:47:5a:bd:8e:
34:8b:fd:9a:c2:2e:47:f4:8c:c5:9b:74:8c:bc:64:
63:40:bb:25:c2:c4:ac:ee:6f:31:8c:6e:7d:27:65:
be:77:c4:5c:5f:ad:cf:6e:0f:ef:7b:58:29:ae:ff:
3d:c5:e1:6d:5e:fa:68:66:23:97:6e:a4:df:1c:58:
6d:30:f5:34:35:a2:90:5f:5d:92:bd:b2:e7:ef:11:
f2:cd:28:48:94:28:a6:e6:51:b6:d3:6d:47:dd:5e:
3d:a3:b8:76:a9:99:94:2a:c9:fe:77:16:ac:13:72:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:28:75:90:1D:DE:39:9F:01:13:5F:17:D1:39:76:8B:DB:63:8E:2E
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5e:b5:3c:0e:7e:bf:a4:1b:e9:f9:0f:03:0c:d8:2b:9b:b5:
88:94:ee:1d:e2:76:99:3a:ec:0b:1c:91:31:36:17:b5:b0:e3:
dd:66:b9:10:c3:3c:8f:55:e4:60:be:a8:29:37:0a:19:e8:77:
81:0c:88:81:14:58:b3:6a:19:17:c8:c5:bc:67:bd:77:3a:30:
56:04:01:fb:b2:8f:57:c7:55:8c:cf:ba:29:84:85:c6:4a:49:
61:ef:36:b2:13:08:6a:95:34:98:21:1e:82:ca:84:ff:04:4b:
95:a1:25:1b:10:f8:df:dc:90:27:47:62:c3:af:30:ca:ae:3b:
4d:4d:15:fc:bc:15:20:f5:97:ce:54:02:08:b9:88:69:04:2a:
b0:2d:32:f3:18:db:af:ed:83:fd:3a:81:48:4a:3d:89:15:b4:
14:f1:24:e1:08:83:6f:f2:c2:4a:60:dc:7f:28:5c:4a:de:e8:
ed:d6:30:b6:53:df:b7:6c:93:a1:04:2e:f0:ee:0d:e3:8a:b3:
a0:25:99:48:22:e8:94:c1:3c:4a:e6:71:23:5f:d1:95:0d:0e:
6f:ba:12:9f:6d:b2:e3:be:e4:a0:7c:9a:cb:b6:2a:c2:09:96:
aa:35:d9:aa:47:8d:4b:2c:ac:ed:4f:bc:03:de:de:aa:6b:27:
50:15:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:48 2025 by rpki-client