Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File: awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier: jtd/P1Q25dEfzVJS9+M5+1+dmWreuyj7VeIsfx89xYE=
Subject key identifier: 37:A9:C4:4C:4E:DE:92:E9:17:9F:D9:53:CF:9F:10:96:56:6C:9A:2B
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial: 0194C35098F1A4D0608ECAB890B926CE81A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number: 142F
Signing time: Sat 01 Feb 2025 21:00:26 +0000
Manifest this update: Sat 01 Feb 2025 21:00:26 +0000
Manifest next update: Sun 02 Feb 2025 21:00:26 +0000
Files and hashes: 1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: zZdRlQGmZs0JJ2WTWgFLGSvzmIETfEhCz2gdGl8HuVc=)
2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:98:f1:a4:d0:60:8e:ca:b8:90:b9:26:ce:81:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
Validity
Not Before: Feb 1 21:00:26 2025 GMT
Not After : Feb 2 21:00:26 2025 GMT
Subject: CN=37a9c44c4ede92e9179fd953cf9f1096566c9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:b7:25:75:e3:0f:2c:21:69:53:39:cb:bc:
89:b7:07:9b:9c:9a:4d:ed:78:bf:af:cf:5d:14:e3:
bc:f2:a2:8c:84:f8:0c:1e:d8:55:87:cd:61:00:9a:
f5:82:2a:5d:09:65:90:c6:a2:42:6b:66:5a:ce:37:
de:fa:9c:9d:1b:bb:8b:1c:18:a7:fa:a7:1c:74:c7:
e4:39:ed:d9:db:ee:43:b7:81:43:f3:a1:29:15:bc:
c4:e2:e6:d7:83:83:ea:47:07:44:71:8f:48:48:91:
84:61:76:0c:a0:06:4a:3b:25:b6:fb:bb:cc:07:ff:
8f:21:a4:76:63:05:17:e3:3e:20:7b:11:ac:03:49:
eb:b9:9c:70:d2:64:02:5c:5a:93:3e:92:36:5f:95:
11:ca:31:44:86:06:92:21:e9:87:e8:ef:61:3e:65:
2b:96:88:2f:71:c1:e3:0f:57:0a:5a:78:28:8c:6a:
80:53:15:24:38:e2:a5:01:6a:76:04:52:72:9c:d7:
6b:c0:5c:05:02:4b:03:44:36:24:82:d6:51:65:82:
a9:6f:df:7c:ea:1b:a6:e5:6d:fb:7a:1b:52:02:07:
95:bb:1b:5d:c7:42:55:32:aa:54:c8:a2:30:16:a8:
62:f4:84:3b:2a:86:6c:29:9a:1b:f7:e2:5e:5b:38:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:C4:4C:4E:DE:92:E9:17:9F:D9:53:CF:9F:10:96:56:6C:9A:2B
X509v3 Authority Key Identifier:
keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:23:d8:62:e6:34:81:5c:3f:c5:af:8d:64:87:a9:ca:1c:12:
a4:76:c0:04:60:1a:49:c6:a8:a1:3d:52:85:92:44:a4:7f:3d:
a8:17:d6:70:f7:29:9a:76:06:8a:3d:73:dc:40:61:d5:8a:d6:
4f:65:f5:8a:b4:e3:28:0b:bc:bc:2f:7e:4f:c5:1a:fe:3d:da:
00:b5:ca:df:b6:46:f6:1a:6a:2e:a8:1c:6e:23:cf:46:49:61:
21:21:e1:46:d4:af:bd:f0:93:91:52:35:c0:2d:d7:e2:06:31:
94:cd:97:04:d6:ba:b8:44:15:25:c5:87:11:04:f0:78:a2:09:
e3:8e:e2:08:97:66:bb:50:73:2d:c4:31:f8:e7:90:a7:5b:a1:
6c:ba:43:75:71:82:3a:6c:91:1b:3d:95:9d:0b:8e:0c:f1:d3:
1d:cd:48:a7:21:dc:ee:82:7a:b9:3d:a3:9b:94:d4:a4:f7:ac:
4a:66:48:8d:a4:57:44:be:2f:97:eb:6d:b2:07:25:27:b5:ce:
13:6c:55:27:b1:45:38:4a:78:ca:cb:56:04:13:2a:62:ea:cb:
68:3a:a2:b2:82:aa:da:c6:d7:84:9e:30:40:b7:8a:a1:be:18:
95:d9:69:32:6d:74:73:85:a8:da:8b:28:3b:6e:32:7e:25:cc:
1d:f7:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:28 2025 by rpki-client