Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier: lxE9Xu/OBMZNbExhlf8YkAO4M2SZ+kkm0bJBxB3w4wg=
Subject key identifier: A4:48:F7:8A:B6:6E:91:56:B6:3B:D5:C3:CA:55:9F:F2:57:FF:8C:0E
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 0194C49A6ECFBDC9ED7E99ABA92D4B79573B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number: 0285
Signing time: Sun 02 Feb 2025 03:00:42 +0000
Manifest this update: Sun 02 Feb 2025 03:00:42 +0000
Manifest next update: Mon 03 Feb 2025 03:00:42 +0000
Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: ezfuLqLKJqrLvFtYMAv6ZYcXhajlYE9+L5mEdbH9LuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6e:cf:bd:c9:ed:7e:99:ab:a9:2d:4b:79:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Feb 2 03:00:42 2025 GMT
Not After : Feb 3 03:00:42 2025 GMT
Subject: CN=a448f78ab66e9156b63bd5c3ca559ff257ff8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:9c:69:40:28:47:50:0f:72:21:e3:56:90:
25:7b:25:ee:cb:e6:a4:0b:ca:97:11:bf:a8:22:03:
51:a0:54:14:60:4a:cd:da:b5:43:a2:91:d5:2c:6f:
48:86:45:c9:7e:02:94:ca:8b:54:f8:53:8b:81:e1:
6f:8f:6f:a9:ff:93:ef:4d:25:43:c0:12:28:77:8b:
78:3a:37:8e:54:c2:62:45:44:64:67:8e:79:4c:a9:
53:a9:61:ce:1e:d7:2f:9c:f0:f3:dc:6c:16:3c:e4:
91:ec:5d:73:17:fb:48:55:f1:83:d1:8b:5a:cf:b5:
f2:24:75:90:70:91:aa:90:a0:26:e2:0c:bb:f4:85:
57:25:9a:a9:1a:c2:dd:b7:c3:ce:a1:de:22:7c:06:
7a:2f:be:4e:53:c8:be:0f:7e:83:96:a0:11:ef:e9:
4a:16:10:21:97:01:ab:64:de:15:b3:95:c3:30:61:
bf:d0:ee:9d:fb:13:7d:ca:8a:b6:b3:4c:91:cf:b9:
98:0e:23:2a:dc:0b:99:8d:4b:b2:59:04:02:7c:bd:
10:a3:11:de:30:83:5f:97:ad:36:f8:19:55:f1:c6:
68:b0:d8:97:8d:28:65:bb:1f:eb:dd:21:e9:f2:14:
9e:6d:01:5a:49:cf:08:53:15:1a:f8:1e:7c:48:d0:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:F7:8A:B6:6E:91:56:B6:3B:D5:C3:CA:55:9F:F2:57:FF:8C:0E
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:c4:d4:e2:99:99:b6:ef:90:9b:fe:db:93:00:61:aa:58:
95:d6:60:16:dc:1e:ac:bc:fc:b2:11:89:e9:be:a5:93:79:41:
b4:67:4d:b2:ad:6e:42:23:57:a1:8d:ee:4b:d9:80:ac:d9:bd:
63:25:3e:ac:c6:4c:2e:09:c7:e7:82:55:36:bc:c7:8b:73:14:
8f:72:36:1d:16:0c:f3:5c:ed:b2:65:1f:00:a1:77:53:b7:2e:
32:e4:22:69:fb:5f:80:b7:0b:6a:7c:10:53:45:7a:40:1a:d8:
0c:8c:55:33:d4:ca:58:69:32:27:3f:98:c5:4c:50:d8:40:32:
74:21:e1:f5:28:c2:d8:c7:b2:3a:7f:65:e3:89:bf:13:bd:24:
1c:6a:97:33:11:5f:91:2e:99:30:d1:15:e1:0a:3b:21:33:be:
67:9a:7c:cb:67:bc:a8:15:e2:36:ad:db:00:88:c0:a4:9a:52:
52:98:9f:61:cc:2c:fa:89:81:52:19:7a:87:da:0d:ef:88:b3:
7b:98:dc:5a:7d:aa:4c:89:e5:c2:cb:2d:09:12:f3:98:0a:9c:
80:a0:1b:ad:87:e9:ea:c6:38:21:94:37:ba:2f:04:36:49:50:
f5:8a:ff:fb:3c:99:84:d7:0d:e3:0b:f9:f8:a0:91:3a:80:55:
70:74:be:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:05 2025 by rpki-client