Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
File: a69yXnGSRAQZZKCTcOF_vvu7qvY.mft (raw, json)
Hash identifier: 7l/GHxK5pS532GfB7PGApIU9+rSAgczZWVRd13w33PU=
Subject key identifier: F9:85:7A:FF:90:58:95:38:8B:B8:C1:1D:99:DF:B0:12:58:F3:DF:1E
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 0194C3BEB3ED41C75BDCEEA87D05A4B92611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
Manifest number: B9
Signing time: Sat 01 Feb 2025 23:00:42 +0000
Manifest this update: Sat 01 Feb 2025 23:00:42 +0000
Manifest next update: Sun 02 Feb 2025 23:00:42 +0000
Files and hashes: 1: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (hash: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=)
2: a69yXnGSRAQZZKCTcOF_vvu7qvY.crl (hash: /ww7FRI6jRNI8K9iG9vKU5iZA2uiiD7tO8cGBKKdt+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:b3:ed:41:c7:5b:dc:ee:a8:7d:05:a4:b9:26:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Feb 1 23:00:42 2025 GMT
Not After : Feb 2 23:00:42 2025 GMT
Subject: CN=f9857aff905895388bb8c11d99dfb01258f3df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:28:77:3f:e3:ee:f1:2f:36:44:c4:42:33:
c1:2a:96:6b:49:67:9e:b0:3a:28:92:07:00:2f:ae:
6a:f0:96:08:e2:54:03:ef:2c:5c:3b:78:6e:b4:59:
5d:ae:3a:16:a1:b7:a8:f7:d0:bd:2b:4c:95:73:8d:
7f:b0:65:11:49:29:aa:bc:db:c3:59:39:61:40:e3:
db:f2:0d:93:70:58:06:e0:38:bc:29:e8:8e:f6:66:
d4:59:6e:fc:10:ae:2e:e9:34:30:07:8b:34:01:d7:
5b:87:0b:e1:20:36:1c:3c:ff:5e:ba:1a:64:77:44:
c4:1a:46:1a:1f:7d:14:1e:6c:a0:cb:6b:16:bf:7f:
18:c8:11:59:95:1e:e4:5a:a7:35:bf:57:15:e0:d3:
c9:83:94:d6:21:60:9b:84:87:2f:fc:ff:ad:15:02:
c2:2c:19:6b:53:fe:71:e1:29:87:17:24:61:04:04:
68:cd:f0:3a:a3:86:a0:0f:3f:fd:d1:27:87:e2:e7:
a6:bb:15:65:07:c1:36:67:e2:2c:be:13:bf:fc:56:
cb:70:95:58:5e:3d:f3:ec:c3:28:23:83:d4:cf:fb:
35:a9:85:5e:7b:39:d2:62:38:6e:64:a4:51:88:16:
5e:ff:47:82:46:ca:c3:0b:ed:47:63:c2:97:f2:68:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:7A:FF:90:58:95:38:8B:B8:C1:1D:99:DF:B0:12:58:F3:DF:1E
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:67:ed:23:ea:81:5f:02:36:e9:a7:51:4a:d4:3d:e7:c6:
ce:c9:51:0a:06:57:37:cf:31:08:b2:e2:eb:70:66:ee:53:f9:
6c:14:07:3a:de:de:8b:73:47:da:31:7b:91:31:6d:39:20:bf:
fb:dd:1d:56:cf:0d:bc:41:31:6b:a3:56:37:a2:29:00:7a:de:
5e:22:45:56:61:09:82:2d:56:4e:3f:26:06:df:4a:30:d2:16:
a8:10:06:ea:5e:46:98:f9:5f:8f:e9:cf:01:a4:cf:c1:38:b6:
fa:1d:af:64:10:ef:c8:43:4a:f4:bd:ee:60:3a:0c:e5:e8:7f:
62:5f:3a:f3:95:e2:38:72:07:44:87:42:f2:4b:11:5f:6d:68:
78:d4:bc:8e:50:d5:61:0e:2f:ff:de:ed:31:9b:54:5a:02:21:
1b:e8:a3:b8:e1:91:6e:c2:c0:07:72:f7:52:be:0c:f2:2b:6d:
fd:26:a6:15:85:e3:b1:02:f6:bd:35:0a:b0:9e:f5:de:90:51:
66:1a:6c:b2:cf:3a:dd:a1:ef:b8:28:7a:0d:2b:fa:d8:85:72:
a8:8f:19:32:46:a3:1d:6e:b8:e9:fd:a0:0b:62:8b:b9:1a:12:
bf:ce:80:7a:c0:f7:9b:29:93:52:8d:cd:1c:06:20:f6:99:19:
58:24:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:24 2025 by rpki-client