Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier: 8RzpOvgY608Q6MZrss6KA2oa/NAF+6haZ0vB2kCOeww=
Subject key identifier: 6E:34:10:B6:A0:8D:0D:06:E1:CF:B3:26:67:51:A3:87:9E:AD:A7:A9
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 0195124734D09BA4F28D0895E48FA00C6ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number: 03F2
Signing time: Mon 17 Feb 2025 05:00:11 +0000
Manifest this update: Mon 17 Feb 2025 05:00:11 +0000
Manifest next update: Tue 18 Feb 2025 05:00:11 +0000
Files and hashes: 1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: 9VWheIgfcNFe09FpNl86WBvhpzyZfnkZhdcvH9IKAk0=)
2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:34:d0:9b:a4:f2:8d:08:95:e4:8f:a0:0c:6a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Feb 17 05:00:11 2025 GMT
Not After : Feb 18 05:00:11 2025 GMT
Subject: CN=6e3410b6a08d0d06e1cfb3266751a3879eada7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:ee:79:32:07:e2:70:d4:21:a0:a6:d0:ce:
fa:00:ca:32:fb:a3:88:c6:e1:bc:a4:90:7c:9a:3b:
5e:f9:2c:7f:3f:dc:4a:51:2c:e9:9b:fb:af:fd:f6:
c7:a1:0e:48:81:a1:66:13:38:d6:7b:1b:ee:5d:65:
0f:dd:f4:d5:15:ef:14:04:d1:3b:27:4c:59:d1:0c:
23:06:05:71:b7:3c:68:f5:17:1e:d2:9c:61:68:c9:
a4:3d:dd:4f:73:6a:bf:02:ff:61:45:ab:b9:d9:c7:
c2:45:39:4e:20:8c:58:cb:20:d4:5b:ab:bd:bc:ef:
89:6f:92:4a:f4:fa:b7:1c:44:87:aa:de:8e:f9:d3:
db:f9:6f:23:0f:cc:46:a4:6c:fe:c3:98:c7:a0:7c:
70:07:a3:22:41:ff:22:f0:23:f0:71:68:73:a2:a3:
2c:1d:be:f1:2b:cb:68:a7:01:d5:53:ba:b9:85:35:
7b:0f:d6:8f:47:d8:a2:56:d1:69:39:04:5e:c2:cd:
a4:ac:76:40:f2:78:95:be:79:7c:ec:a2:aa:6e:76:
46:11:45:9e:06:48:71:4f:2a:65:68:60:27:ff:7d:
71:df:cc:e7:81:19:09:9b:18:1d:71:ff:c2:d5:06:
18:81:df:a7:5f:72:a9:fd:6c:3c:8e:0c:23:0e:72:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:10:B6:A0:8D:0D:06:E1:CF:B3:26:67:51:A3:87:9E:AD:A7:A9
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3a:1a:9b:46:be:2f:29:7a:be:69:07:55:24:5d:f0:b9:6f:
ba:76:ac:8e:96:85:b9:0e:76:bc:f6:7e:eb:4a:1f:28:f8:31:
96:88:58:db:57:b3:5d:2a:5c:4c:3b:36:18:91:f7:4a:cb:32:
62:ea:93:bd:7c:93:d4:b3:b4:83:7f:e6:40:d2:fe:43:45:dd:
96:c2:48:e5:ce:c2:88:7a:09:1a:05:17:78:9e:77:35:42:ec:
70:de:bd:6a:d1:f9:27:b2:6e:63:99:45:ab:ac:06:81:66:f9:
da:3a:80:46:b6:87:b1:ec:40:4d:35:22:63:b4:da:3c:73:2d:
f0:8d:7a:34:8a:5e:3b:1d:9e:c2:88:7a:f1:da:b9:cf:39:b2:
29:35:6a:ad:47:c1:2e:d7:74:c1:c6:04:a4:01:a7:b5:37:d1:
3d:d0:d9:5b:1a:c1:90:c0:fa:95:99:da:06:f1:8e:57:12:5d:
80:d2:6a:cf:99:82:55:7b:11:f0:1c:87:97:9b:a9:f5:26:2d:
c5:c0:1f:98:42:e5:6d:95:86:8f:f2:b0:7a:4f:0a:5c:2f:b5:
fb:fc:0d:a6:6d:6e:2a:61:62:ce:60:64:36:55:c9:df:ca:9c:
3b:5e:2c:02:72:02:b8:a1:2b:8f:1b:67:2e:dc:d1:f4:28:c9:
80:3e:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:03 2025 by rpki-client