Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: yM5PVytHOtz5hvlcFA3C27WXlbgD3VVcK1FqLJMTC2E=
Subject key identifier: 22:DA:C5:98:3A:64:00:CE:4F:0C:AD:40:2A:C7:6F:53:02:AC:0C:92
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0194C463C58127EF6EAAFDC6812DF773C829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 04A1
Signing time: Sun 02 Feb 2025 02:01:00 +0000
Manifest this update: Sun 02 Feb 2025 02:01:00 +0000
Manifest next update: Mon 03 Feb 2025 02:01:00 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: AoF/gEQjwvXSeX41YkTvU2hbfxtOMuxYDkzgvLkO1WI=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:c5:81:27:ef:6e:aa:fd:c6:81:2d:f7:73:c8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Feb 2 02:01:00 2025 GMT
Not After : Feb 3 02:01:00 2025 GMT
Subject: CN=22dac5983a6400ce4f0cad402ac76f5302ac0c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cf:e1:98:28:87:e3:9a:9e:7b:58:e3:6e:59:
2f:69:7e:ac:2e:fd:ed:96:b0:3b:2f:bc:69:1e:2f:
18:f7:ee:78:97:14:45:30:75:bd:e2:10:16:b5:5b:
7a:6a:bd:fb:69:a4:27:55:80:c2:7b:32:af:f9:c8:
f2:fa:5c:b6:01:1e:3a:25:28:af:e7:a8:11:a1:c3:
b9:25:86:3e:1b:87:b5:69:8e:c0:2c:42:73:65:4c:
95:f4:3f:e4:db:ad:24:e0:66:2c:6e:9c:0e:ff:f7:
80:c8:05:7d:57:f0:c7:41:b1:dc:d4:fc:e3:c6:25:
22:5d:2d:d7:13:da:5d:15:d0:04:cf:9f:30:e3:2e:
7d:9a:ff:ee:eb:d1:33:4d:08:dd:94:13:b1:f2:e7:
b7:49:e5:f7:e0:ee:c6:87:15:cf:57:69:19:f8:b6:
40:97:8f:93:f5:5d:84:cd:94:a7:70:fc:9b:ac:52:
85:8b:55:6f:72:66:b5:7f:85:bf:91:b9:c6:31:95:
fb:bd:2e:dd:57:24:f8:9d:1c:7e:29:fd:a7:50:01:
b0:3e:f3:c1:c5:6e:5a:df:b3:74:0d:c6:16:52:ca:
bf:4a:1c:75:49:75:aa:4d:3c:0d:3e:8b:50:e2:b3:
09:95:3e:96:22:2a:cf:ff:df:3f:31:75:24:6d:ce:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DA:C5:98:3A:64:00:CE:4F:0C:AD:40:2A:C7:6F:53:02:AC:0C:92
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:aa:2d:72:dd:a3:e3:a3:0d:fd:15:cd:85:49:90:26:3a:5e:
62:d3:c2:5f:0c:91:ce:d1:3b:c6:e1:51:47:c4:17:00:e3:7b:
d6:b3:df:dc:af:f1:52:3c:32:e9:c2:7f:fa:11:47:5a:09:16:
44:53:3d:99:99:ac:4a:a9:c8:0e:6c:32:e4:96:65:61:06:35:
04:3c:8f:9b:31:ce:7a:c6:37:63:a2:91:ec:0b:73:59:f0:b2:
2c:9c:29:a5:22:26:ec:7d:06:11:e4:7a:a0:c1:de:48:4c:d9:
42:83:c8:d2:0b:f7:c5:af:4f:66:ec:ef:f7:c2:5e:98:06:b4:
1e:a1:ec:ec:c8:60:42:69:9f:2c:4b:c8:44:97:14:0c:68:85:
0c:51:47:59:18:2d:ca:29:44:e6:ff:a5:a5:75:50:97:4c:a4:
91:70:c3:e1:00:36:90:7e:31:98:6f:a6:83:1e:a6:64:5c:ce:
ff:72:02:93:b2:37:cd:0e:81:74:dc:a3:05:67:5f:66:7e:b6:
de:41:bb:2b:b4:bd:56:55:fc:e7:12:eb:b7:50:f2:fb:2b:3d:
da:6b:75:7a:61:2a:f5:b3:1c:8a:e2:a0:27:2c:3f:66:2a:fd:
ac:e0:6c:ae:5c:22:d8:c6:ac:e3:1e:f8:f8:4c:56:96:75:30:
cb:c7:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:23 2025 by rpki-client