Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
File: mpdRVlcXWpRsyNthlsobIVTjgRQ.mft (raw, json)
Hash identifier: 9RgWXyzrE1K2B8BuLDVBksSfaQmVfmrWwZ0RyjrglUw=
Subject key identifier: 6A:8C:B3:93:19:D2:AC:43:ED:EE:D3:FD:07:3C:61:B3:E4:D9:4C:1C
Authority key identifier: 9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
Certificate issuer: /CN=9a97515657175a946cc8db6196ca1b2154e38114
Certificate serial: 0194C4D13866A6B5CC35AD2A9DE7647B29A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
Manifest number: 035C
Signing time: Sun 02 Feb 2025 04:00:33 +0000
Manifest this update: Sun 02 Feb 2025 04:00:33 +0000
Manifest next update: Mon 03 Feb 2025 04:00:33 +0000
Files and hashes: 1: WPYKhYBx_0YjrlD531nkz5OoDB8.roa (hash: 8lq77z4120Ei3YTGCXsXJwbPy3DaoXpzADVeOT5P0UM=)
2: mpdRVlcXWpRsyNthlsobIVTjgRQ.crl (hash: RcG2B9xnJUIaFySNItxNSSii13r2SK5A4qtvHIs1aL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:38:66:a6:b5:cc:35:ad:2a:9d:e7:64:7b:29:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a97515657175a946cc8db6196ca1b2154e38114
Validity
Not Before: Feb 2 04:00:33 2025 GMT
Not After : Feb 3 04:00:33 2025 GMT
Subject: CN=6a8cb39319d2ac43edeed3fd073c61b3e4d94c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:69:5f:3a:d9:d1:9d:a3:50:81:dd:c4:53:
89:d0:f4:93:37:b5:69:d7:f1:29:7e:f2:be:a6:01:
e0:7f:29:ba:48:0f:5b:07:8e:76:37:9b:d8:8a:aa:
d6:ff:5e:44:28:eb:23:07:d6:5f:8e:8c:13:e8:18:
6e:f9:76:6a:42:06:6f:c9:30:4b:31:54:15:8a:c3:
12:af:d7:91:45:55:c1:ff:06:52:f1:01:59:d2:ed:
2c:43:52:c9:07:fa:5a:91:12:1c:72:aa:f7:5f:28:
c4:40:f6:0e:a1:1e:2c:b8:49:82:03:cb:59:67:e2:
69:1f:32:11:f2:ac:7a:31:50:0a:ff:f0:c1:c7:2e:
31:73:bf:eb:a3:b1:3e:a5:92:e4:bc:35:17:e7:46:
06:df:8b:c2:fd:4a:52:e3:0d:51:d2:e6:64:e5:35:
c9:46:1d:17:5a:13:d1:0f:8a:f3:34:b0:82:55:24:
31:51:2a:4b:b5:4c:f6:e8:32:ee:a1:a1:b1:c3:8f:
44:f1:bf:14:79:f2:1a:e6:27:26:32:a2:1b:ce:6a:
40:31:21:da:d4:2e:aa:a0:24:6d:67:cd:f1:9f:eb:
55:19:b5:cd:e0:b5:08:96:f9:c0:2b:7a:64:4d:92:
7d:37:2c:06:5d:36:88:b1:f0:0a:73:60:52:9d:ec:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:B3:93:19:D2:AC:43:ED:EE:D3:FD:07:3C:61:B3:E4:D9:4C:1C
X509v3 Authority Key Identifier:
keyid:9A:97:51:56:57:17:5A:94:6C:C8:DB:61:96:CA:1B:21:54:E3:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpdRVlcXWpRsyNthlsobIVTjgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b09f74-179b-4ed2-acf8-56e6e2dc8885/1/mpdRVlcXWpRsyNthlsobIVTjgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ca:70:49:37:6a:ed:4c:d0:09:a8:49:40:66:6d:9b:c5:8f:
38:b3:d5:71:99:00:75:57:bf:18:48:9e:83:b1:a3:a5:75:c1:
4e:c4:0f:1b:47:63:88:70:a5:b7:d7:35:74:7e:19:79:d0:02:
ea:65:94:72:8d:34:f0:c8:c5:9a:b1:b0:67:4c:91:1e:b4:0e:
99:15:f1:db:b6:ba:f9:99:43:8e:7e:b2:bc:3a:69:cb:fc:cf:
6a:79:cb:5b:5c:8c:b2:32:48:2a:97:94:69:f9:23:83:df:18:
61:80:2b:64:0b:72:b9:9f:90:71:c5:3d:f2:65:94:3d:14:37:
53:2d:ca:5f:0e:a5:b7:09:39:1d:b0:0a:58:6c:99:99:09:77:
7e:d6:34:65:93:9a:da:ae:4d:30:88:44:19:4a:39:9f:94:87:
e5:2b:c8:72:19:14:36:5f:f8:94:22:c4:10:e8:dc:0b:86:f0:
b7:5a:4a:47:0a:4a:9f:ff:25:35:d2:3a:c5:5b:cf:a9:b0:c1:
7c:e2:a6:14:a5:9f:2b:99:ad:11:7d:c1:ce:9b:86:f2:2e:9f:
e8:0e:34:f2:7e:c4:01:96:96:0f:96:3b:d7:69:a0:6b:04:ac:
e1:c3:83:d3:12:8d:c9:c4:ef:7b:20:22:96:7b:3a:d3:46:bc:
f9:0d:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:48 2025 by rpki-client