Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: SKpCfQhVNzVBHkdyKjouceukHbbTd5QwxC9ESZfAvKo=
Subject key identifier: CE:B8:47:7E:D6:A5:9F:BA:0E:1C:D4:D3:2E:06:40:5F:E7:F6:E8:AA
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 019510C6DFB9C04BC2BBB3ECF7BAAFA17B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 099F
Signing time: Sun 16 Feb 2025 22:00:23 +0000
Manifest this update: Sun 16 Feb 2025 22:00:23 +0000
Manifest next update: Mon 17 Feb 2025 22:00:23 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: 0TaagLAythjBcwZoaAFb3tIeXiSL+6p8vsE0dIK83wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:df:b9:c0:4b:c2:bb:b3:ec:f7:ba:af:a1:7b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Feb 16 22:00:23 2025 GMT
Not After : Feb 17 22:00:23 2025 GMT
Subject: CN=ceb8477ed6a59fba0e1cd4d32e06405fe7f6e8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:7d:6f:b5:9f:c6:be:0d:68:79:38:c2:a1:
a1:58:67:c6:ac:5b:7f:30:71:d2:f0:ee:5e:a2:7a:
91:3a:23:b6:2e:6c:b4:a9:77:ae:87:d9:a0:7c:86:
5e:e3:32:f5:00:47:77:24:fa:40:76:04:92:83:86:
4e:5b:49:db:d8:68:06:91:05:13:7a:e0:1c:84:55:
a4:41:7e:05:10:38:5f:c1:89:ce:26:83:47:ea:e0:
3d:61:9d:8d:61:c7:a4:62:a4:2b:80:d8:31:fb:a8:
21:4c:2f:d6:51:b1:ec:7a:94:3c:07:55:e2:5d:14:
1f:41:77:80:48:71:de:d0:4f:00:fa:29:6e:dd:d9:
66:d5:9d:9e:da:8d:92:6d:7c:59:21:8c:54:c9:7d:
9b:85:99:0c:ae:f7:73:51:37:32:6c:8a:09:e0:d2:
7e:a6:1b:e6:c4:6b:e3:b1:97:06:d5:33:e9:21:a5:
c8:f0:84:bb:1b:79:26:b8:3b:dc:1c:6c:67:99:49:
63:06:de:e0:94:bd:fa:42:68:8f:0b:1b:04:93:b5:
62:5b:00:5f:31:97:f7:43:0e:46:53:93:d0:07:63:
1f:be:55:4c:26:73:ba:02:a2:b5:01:14:9e:d3:8a:
86:b9:bb:32:ca:eb:c9:48:3c:71:10:59:f5:08:16:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:47:7E:D6:A5:9F:BA:0E:1C:D4:D3:2E:06:40:5F:E7:F6:E8:AA
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:29:63:bf:c7:89:4b:0f:9b:9a:35:8e:a0:e1:11:06:cc:a2:
4d:f8:11:60:ec:29:7b:28:e7:d9:f4:bd:8b:a8:34:2d:74:a9:
41:93:97:71:17:08:2e:9f:88:a2:cc:55:51:b7:d1:33:74:f2:
cb:e4:c8:88:71:22:3b:1f:2c:4e:c0:53:09:3a:99:4b:9c:27:
cc:55:19:b3:d4:cd:3a:b4:c0:c0:2a:78:e8:b3:96:45:0c:a6:
d9:97:dd:13:6f:df:b7:33:39:ac:9a:60:b9:32:bb:f7:81:d4:
84:2b:08:a0:8a:a1:02:d6:9d:3e:4e:c4:b4:23:58:47:29:cb:
5b:79:24:46:2f:42:77:ac:2d:30:b0:fa:19:36:ba:61:90:f7:
a3:26:15:b9:02:59:64:00:92:4f:6f:25:5e:3c:8e:7e:ce:a0:
25:2c:22:f4:44:bf:72:dc:9a:d3:ec:2b:a4:71:30:14:f7:c6:
df:3e:94:2b:d1:1a:00:e2:cf:e7:7e:f2:34:97:5a:fa:bf:02:
16:59:ab:36:93:8d:7a:35:13:35:db:32:8a:a1:a4:6e:3c:52:
09:ae:34:f8:fc:21:df:11:ef:2c:76:e4:87:94:c3:f0:4f:a2:
c5:ca:47:65:ea:dd:51:ea:7b:4a:60:c0:9e:8b:04:d1:1a:5f:
be:28:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:40 2025 by rpki-client