Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: pTCwvxm7sVmHGxOWYeIVewCkuZ1K30cC/c8UXEE8oUY=
Subject key identifier: 81:13:A5:EE:32:D2:3A:98:80:56:04:24:76:15:87:B7:DC:84:78:92
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0195116BBDE4D4073DC48EECE1EB21965A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 01:00:28 +0000
Manifest this update: Mon 17 Feb 2025 01:00:28 +0000
Manifest next update: Tue 18 Feb 2025 01:00:28 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: tkVi/PVdGdlQAVRiBmOccuhgbLDREItHrUr4co8uiiI=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6b:bd:e4:d4:07:3d:c4:8e:ec:e1:eb:21:96:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Feb 17 01:00:28 2025 GMT
Not After : Feb 18 01:00:28 2025 GMT
Subject: CN=8113a5ee32d23a9880560424761587b7dc847892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:fd:b8:7a:83:21:dd:05:1d:25:40:1a:02:
64:93:02:c7:3f:61:e8:78:56:60:7e:26:83:92:d2:
ac:eb:85:40:92:0c:03:02:2d:08:71:2e:fc:8e:c6:
88:16:14:9d:84:14:50:0a:4e:ab:63:45:08:59:83:
a7:d3:a1:61:25:97:34:05:31:d5:68:d0:5a:ce:83:
6b:8f:de:a3:59:10:86:29:8c:bc:0b:e8:16:05:3e:
85:0c:b6:13:6d:d3:b9:9a:33:43:37:f3:a1:35:8c:
d6:f3:2e:55:7d:20:bf:2a:28:00:38:22:cf:17:8f:
2b:d7:1a:61:d1:90:8e:cb:51:b0:cf:25:cc:79:cc:
31:29:18:ae:30:b2:50:eb:2e:5e:bc:0e:26:a3:6b:
c6:52:f0:20:a6:bb:c7:a5:8e:b4:2a:b8:d5:0a:a3:
eb:25:d5:a1:92:64:ed:e8:15:4c:33:ec:e7:4c:61:
62:2b:18:01:d1:b7:32:68:7a:d5:95:93:77:44:16:
d8:40:dd:3a:86:03:b1:77:06:e1:83:53:c4:f3:19:
33:3a:fc:a5:2a:86:e6:88:b5:25:b8:3f:be:bb:27:
41:ac:a9:bd:b4:9f:9a:c6:81:42:c9:c0:d3:fd:ee:
ff:9d:53:4f:77:84:f9:87:e7:92:e1:d4:3b:22:ea:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:A5:EE:32:D2:3A:98:80:56:04:24:76:15:87:B7:DC:84:78:92
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:65:24:df:ae:ac:37:1e:b4:c8:de:10:4e:42:cb:70:56:7d:
8d:62:bf:4f:30:08:61:e7:3a:41:89:5d:67:d7:90:95:1a:f9:
97:cf:1a:50:f0:ea:42:d7:88:94:26:cc:1a:8b:28:2f:3e:7d:
85:2e:31:67:d5:90:8c:de:78:96:61:e9:9c:87:2d:ee:45:66:
d2:bc:57:ea:9e:0b:ef:6f:87:a7:df:36:45:f6:b3:d0:38:57:
bb:c8:57:70:54:fc:08:e8:e4:fc:8a:ae:cc:5d:0e:f6:92:3c:
4e:5d:b4:8a:a6:52:77:de:0d:a7:d5:c3:b8:1f:e0:d5:c4:06:
25:1e:08:b3:03:93:c6:7e:70:9a:2e:cb:16:21:eb:22:46:bd:
df:d5:0f:0c:e0:8e:d7:07:e6:00:d3:4b:11:55:9d:a8:85:8e:
36:49:5c:dd:91:63:45:25:0d:20:45:1b:c9:c3:e5:d0:3e:4d:
b5:27:c1:33:dc:41:84:d8:88:63:48:e4:e9:56:04:54:b6:f1:
7a:b4:af:01:ac:64:73:61:2c:a1:58:d3:5b:4f:ac:ab:7d:13:
1b:e2:35:ed:33:0a:35:d8:50:e8:da:ab:ba:dd:39:88:71:42:
8e:aa:17:a2:9d:e2:c1:3d:74:2f:f2:b1:33:0c:5a:02:ac:82:
96:9a:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:16 2025 by rpki-client