Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
File: am_dL9Qvq_hycglSRo0pY0xoydw.mft (raw, json)
Hash identifier: qv5KCuEC097oJO84QeLV0nFHNGgBU43gXS9hsAaDrpA=
Subject key identifier: AE:63:42:FC:6C:87:8A:F6:6F:3E:C6:D1:DC:FD:19:64:4C:45:AA:7E
Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Certificate serial: 0194C387C271FD5EB757B3566CA22DA694BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
Manifest number: 0791
Signing time: Sat 01 Feb 2025 22:00:41 +0000
Manifest this update: Sat 01 Feb 2025 22:00:41 +0000
Manifest next update: Sun 02 Feb 2025 22:00:41 +0000
Files and hashes: 1: QZxCWcbwldfBbje2z7CU-dKZ2OQ.roa (hash: z3N51ZQ5F8Gr4zs53/jXBVGssP0tmVUaOonBzkRtl38=)
2: _od80ObLqomwGF2QQRW4qwheTZ4.roa (hash: CaYsbUoRWbmVInyGmVu/D6GkTzKF8+37wy3InRczmKA=)
3: am_dL9Qvq_hycglSRo0pY0xoydw.crl (hash: hmgUqnbhuz6og/sSUXPKbvTelTElNApNN9Wq9RcxGCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:c2:71:fd:5e:b7:57:b3:56:6c:a2:2d:a6:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc
Validity
Not Before: Feb 1 22:00:41 2025 GMT
Not After : Feb 2 22:00:41 2025 GMT
Subject: CN=ae6342fc6c878af66f3ec6d1dcfd19644c45aa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:37:97:7d:01:ad:45:e4:04:f7:e4:90:5c:
5e:aa:64:7e:8a:8b:d5:cb:5c:1a:41:e7:e2:a7:bc:
c5:a2:f8:c9:cb:a2:d6:6e:be:d2:a1:dc:71:41:36:
1a:8e:20:c0:4c:92:72:19:d7:53:08:f1:05:a3:29:
6c:36:3a:22:93:97:33:ae:0d:d6:8b:c5:99:86:09:
53:8b:3f:d1:ef:90:9e:71:7b:96:52:8d:4d:b4:a8:
95:11:11:dc:4b:b5:56:50:36:b0:66:7d:fb:8d:f0:
7b:ea:f3:07:b1:70:e6:62:b2:ee:1e:90:a8:2e:af:
18:66:35:36:36:92:f0:00:7c:42:fa:80:cb:f1:b4:
93:a3:c1:d8:d5:a2:9c:de:a6:21:3a:94:36:b9:ab:
a7:27:66:46:7d:34:9d:a9:83:e5:e9:68:74:91:ad:
f0:3f:a4:3f:32:56:2a:c7:4b:5b:24:de:d6:9b:ed:
73:1b:b5:19:10:e2:35:b5:26:74:be:86:55:50:ab:
4b:71:1c:a0:43:88:c5:cb:5b:91:b1:09:8d:66:28:
fd:bc:68:d0:93:7f:ae:71:8b:b7:5e:5f:2a:ac:14:
e5:ca:16:dd:40:cb:d8:e8:8b:a6:2b:de:aa:7c:92:
82:d9:9a:dd:b5:0c:eb:51:fc:1d:bb:e9:f3:79:25:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:42:FC:6C:87:8A:F6:6F:3E:C6:D1:DC:FD:19:64:4C:45:AA:7E
X509v3 Authority Key Identifier:
keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:6f:7b:e0:68:e3:d9:4a:ab:e1:00:5e:1c:ba:f6:06:91:
6b:34:64:28:e7:4e:15:b9:ac:c3:a6:af:41:ed:c7:14:70:52:
0a:e1:72:51:3e:ae:00:4a:31:71:1f:08:3d:03:0b:f9:c0:c3:
26:a2:52:4b:23:cd:5d:fd:5d:b6:80:e2:c0:ca:81:91:75:4b:
29:ff:55:69:b9:18:8b:d6:b2:57:de:b4:0e:89:46:8b:b9:c4:
b1:bf:29:69:cd:c9:ab:48:dd:b9:59:3b:29:d7:31:c7:f7:ba:
d7:72:b5:01:28:4a:11:fd:a2:00:d5:41:85:a6:ba:84:1c:34:
c2:fb:b1:2f:72:09:07:15:a4:3a:23:ad:6b:9a:f8:4f:41:1b:
a1:c6:cd:f9:c4:eb:cc:aa:71:23:43:ad:b1:43:0d:24:0d:9f:
7f:97:2c:b8:2c:35:07:31:c8:fa:d3:f1:2e:95:b8:35:17:e9:
9a:5c:5e:ee:2e:48:73:60:22:dd:e0:98:75:ff:b1:70:17:77:
27:1e:6f:b8:28:a4:80:50:75:89:6f:23:16:4c:aa:ac:b7:49:
7d:53:db:74:98:13:00:99:04:c5:ec:b6:cd:ea:d7:06:ac:28:
aa:51:a2:39:b9:ea:20:3f:8e:5a:3a:d6:e2:02:eb:30:25:be:
1b:89:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:58 2025 by rpki-client