Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File: st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier: JDnOUd6WmRdQfy08VVNBVcSYwotvr4faQW5gJ+HFTIk=
Subject key identifier: CA:2B:30:B0:13:07:23:C9:10:8A:A7:0C:5B:2C:15:94:A8:BC:FC:EE
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer: /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial: 0194C3BE9E161B538272211FA0CB971D9842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number: 0394
Signing time: Sat 01 Feb 2025 23:00:36 +0000
Manifest this update: Sat 01 Feb 2025 23:00:36 +0000
Manifest next update: Sun 02 Feb 2025 23:00:36 +0000
Files and hashes: 1: TSugCU0pqUpliat_toqMDIoNIEc.roa (hash: wndd5eFIU8yCHwaZ5EgfwtAvzQXellC4WrfhfkeDZ9U=)
2: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: DVxV2UdJB6rvcrIPeWHnSKWldi3wJToJz9pHLEmI4rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:9e:16:1b:53:82:72:21:1f:a0:cb:97:1d:98:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Validity
Not Before: Feb 1 23:00:36 2025 GMT
Not After : Feb 2 23:00:36 2025 GMT
Subject: CN=ca2b30b0130723c9108aa70c5b2c1594a8bcfcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:8b:ba:fc:1a:16:7d:98:06:68:e9:23:d7:
76:41:3f:81:cf:56:1e:78:94:a2:94:02:ba:69:7b:
b0:38:a5:00:90:13:e9:71:6e:13:de:4a:a8:35:2f:
bc:d6:be:bb:93:63:d4:ba:b8:63:59:e6:a9:61:86:
71:07:3f:44:b1:bb:e8:f7:ec:1e:86:db:c7:54:06:
96:a2:f2:8d:6d:0f:90:36:9e:4f:c6:2e:32:56:ce:
42:6f:85:92:63:97:04:03:e3:40:61:07:08:35:9a:
38:7d:a5:7f:96:08:5e:d3:c4:9a:c5:57:33:33:ac:
56:e3:d6:37:85:d2:46:11:2d:23:4e:6b:64:19:92:
da:85:ad:69:28:50:19:d7:de:cd:61:fc:28:37:78:
02:ea:e7:7a:2c:ee:1c:69:bf:8c:57:15:68:01:2f:
34:f0:3f:3c:b6:7e:a3:be:7e:31:aa:c9:84:c5:48:
7a:fc:85:65:af:4a:ad:d1:ec:45:e4:40:c5:f9:bb:
10:9e:d1:d1:3b:e6:7c:9f:1c:77:dd:e8:e3:11:94:
50:8b:cf:59:9b:62:4e:ac:92:72:90:87:06:b6:23:
42:05:a8:94:6d:ac:c3:a7:22:6e:af:36:ba:12:65:
85:56:e9:2b:fe:40:5c:f8:cd:07:ae:31:11:a3:25:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:30:B0:13:07:23:C9:10:8A:A7:0C:5B:2C:15:94:A8:BC:FC:EE
X509v3 Authority Key Identifier:
keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:f0:ca:02:44:cd:b1:e5:3e:0f:b6:24:e1:32:2c:f7:c0:
64:8a:8b:47:e8:58:80:6c:3c:8d:da:92:18:46:a7:cf:f5:0e:
67:e9:95:06:e9:70:f5:63:70:f4:8b:85:97:74:25:86:a4:0d:
3f:c9:4c:6a:7f:4a:32:88:94:ea:55:a7:d5:51:ac:19:cc:d1:
0a:b6:2f:f1:60:bb:79:02:4c:80:39:f5:21:cb:35:fa:15:cd:
06:b7:5d:b4:55:11:41:bb:9a:78:87:48:1a:75:8b:34:6b:36:
df:2d:f5:fb:2d:ae:0a:44:bf:68:6a:ba:67:e2:87:0c:2a:08:
87:d4:6a:30:9e:a9:22:45:a7:cd:40:64:ea:38:36:6f:f9:63:
57:3d:c9:71:dd:b4:e0:7d:5b:01:9a:cf:03:79:7d:08:51:ed:
e7:11:01:4a:48:c2:ac:8a:71:df:9a:e5:ae:cf:23:59:e9:53:
0d:7d:95:b8:c2:61:b2:eb:94:d2:4f:69:f1:45:f5:90:17:9b:
d8:34:44:0f:4d:73:1d:f7:c1:82:d2:66:c0:06:ee:07:1a:29:
12:d6:46:7b:5e:6b:46:a4:54:3d:6c:22:0c:f3:50:c3:77:16:
ba:e6:a5:49:8c:e9:80:fc:0b:d6:5b:57:66:f1:63:11:d0:d1:
37:76:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:34 2025 by rpki-client