Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
File: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft (raw, json)
Hash identifier: iMptn3wiIio/ijJWjKBbpInM7osJG22udJRgfvAFFF8=
Subject key identifier: 9E:27:91:A2:17:84:8C:70:15:3E:EC:15:89:13:9D:00:0A:09:E5:4E
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 0194C4636CF29B686151374BBBB0E7CC8D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
Manifest number: 08A3
Signing time: Sun 02 Feb 2025 02:00:37 +0000
Manifest this update: Sun 02 Feb 2025 02:00:37 +0000
Manifest next update: Mon 03 Feb 2025 02:00:37 +0000
Files and hashes: 1: M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl (hash: qKOaZmv4w2XxRpkE9QlCV36PlyFthzERCnAhUG88e/s=)
2: _khA_VnUk6WIR9HzLzBYy21gjiY.roa (hash: zYMvT2aBQ62Uw/oOkoXmLb0oW9+P5GMgEJxD27Pzif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:6c:f2:9b:68:61:51:37:4b:bb:b0:e7:cc:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Feb 2 02:00:37 2025 GMT
Not After : Feb 3 02:00:37 2025 GMT
Subject: CN=9e2791a217848c70153eec1589139d000a09e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:5d:48:0d:4b:67:cb:31:dc:ed:fa:11:83:
c2:ef:db:eb:f3:5e:3d:e9:f8:00:bf:13:59:88:4f:
0a:c5:d0:ae:39:ea:0a:21:e8:d1:a4:25:92:ba:e7:
07:5c:d7:b0:8e:6e:c3:e6:c7:66:00:1d:58:10:01:
b2:23:ce:a1:d6:a0:56:32:bd:9a:fc:2c:ac:38:7b:
70:a0:d8:66:0f:08:0e:b0:9b:3a:b1:df:2d:2d:9d:
f3:1c:b0:da:25:88:1c:ea:de:00:b8:5c:03:ef:86:
25:aa:73:a3:01:90:82:7f:d0:2b:cd:4f:7c:c5:8a:
3a:86:c3:af:6a:9e:3a:f2:45:cc:7d:c9:cd:90:f0:
c3:8c:db:52:c0:c4:b9:80:19:e9:61:3c:e9:a7:62:
ed:51:fd:27:b3:8b:0e:36:be:91:cb:ee:ef:fb:c3:
dc:0f:92:07:aa:4a:d9:92:b8:db:2a:a8:a9:c0:ca:
74:4b:39:56:4f:44:5a:dd:89:6c:86:1b:72:09:5b:
98:ea:3a:2e:83:44:bd:fa:f8:04:17:f1:b2:67:d5:
15:e9:5e:7d:6a:00:82:26:5c:38:c9:36:6b:14:0f:
aa:01:9e:12:12:b9:05:87:7e:42:99:2f:da:51:67:
b4:a5:70:2d:32:db:4c:2a:a8:54:2e:ef:12:9d:24:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:27:91:A2:17:84:8C:70:15:3E:EC:15:89:13:9D:00:0A:09:E5:4E
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8b:f4:6e:78:fd:03:ce:1c:d5:e2:7d:05:dc:7a:84:33:c5:
3d:ce:23:4f:b7:9a:b3:81:71:f8:d1:2e:69:55:a8:c4:59:15:
08:4e:5e:be:9a:d4:c1:bd:e2:0b:c9:0c:ea:54:2e:cc:7a:4f:
4f:72:95:2b:df:fe:be:3c:9c:b4:90:64:06:c3:47:59:f5:b9:
c4:21:9a:82:7c:95:b7:8e:c1:01:34:c5:99:96:2b:6f:65:c0:
69:1e:ec:c7:87:1a:fc:b4:05:ed:5c:55:0e:94:9a:33:b4:4b:
ea:89:0c:99:b0:9b:ac:24:2b:33:9a:e8:80:69:4d:ff:4f:93:
43:2c:9a:7c:29:0d:27:34:78:ae:35:dc:c1:66:d0:73:35:c5:
94:b4:b5:9e:5f:94:e7:33:ed:df:b5:fa:ef:de:a1:85:c2:1a:
48:43:0c:45:05:16:42:03:b6:8e:4a:7d:89:15:05:08:b6:81:
f0:83:20:48:a9:13:d1:cd:64:5b:7d:03:33:67:e8:ad:9b:3d:
97:93:37:35:ba:96:f3:6a:f6:3d:9a:51:70:7a:73:9b:d0:ab:
a5:ce:3d:6d:5b:76:f2:e5:c5:b5:99:20:16:22:11:78:b8:dc:
a9:d3:72:4a:aa:99:0c:f0:1c:a3:61:e5:f9:68:ce:33:6e:e9:
12:b7:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:48 2025 by rpki-client