Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File: 6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier: 33TQfoV2vDnIpsFI0E9LdD6kQ6xWBA8chGkt2zeIURw=
Subject key identifier: FD:AA:24:0C:C0:B9:D1:F9:11:24:3D:ED:E8:DD:CF:13:C7:6C:5C:B4
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 0194BABB2F424FED58ABD8193A2DA92F72A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number: 06A5
Signing time: Fri 31 Jan 2025 05:00:16 +0000
Manifest this update: Fri 31 Jan 2025 05:00:16 +0000
Manifest next update: Sat 01 Feb 2025 05:00:16 +0000
Files and hashes: 1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: IZg0ksogcVVtO+bDOLUH5fSyikcJoxFpIZfbMVXWYn0=)
3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:2f:42:4f:ed:58:ab:d8:19:3a:2d:a9:2f:72:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: Jan 31 05:00:16 2025 GMT
Not After : Feb 1 05:00:16 2025 GMT
Subject: CN=fdaa240cc0b9d1f911243dede8ddcf13c76c5cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:a4:b3:96:c0:89:cf:04:42:34:58:e0:e3:
4f:15:4b:8c:7f:54:db:df:61:28:25:15:36:9c:ed:
c0:05:b1:e0:ad:ce:2e:09:45:f0:1d:c9:c5:59:e5:
de:c5:00:44:fd:5e:32:54:c2:23:32:02:5c:c7:b0:
f9:6b:43:35:89:5f:76:fa:31:7b:64:1a:c8:74:83:
cf:0c:66:44:e9:32:6b:89:00:18:a4:e1:91:0d:19:
9f:2b:11:64:84:aa:35:bf:91:9b:f5:26:92:1b:4b:
13:d6:63:55:22:a2:40:b9:43:bd:dc:c6:03:e0:28:
8f:53:c0:f9:49:32:c1:7f:69:f3:cd:aa:f1:80:17:
f3:15:fe:49:81:c5:3f:da:14:24:72:3c:94:29:ef:
50:3e:1d:5f:7c:d2:78:9b:d6:ab:b3:89:a9:ea:ab:
f3:34:bd:e1:6d:9a:f5:d4:9b:b8:dd:73:9a:29:2b:
34:b4:34:dd:71:82:75:4b:b4:61:73:e6:76:22:0d:
72:a3:0f:0f:a0:7a:62:d8:c9:8a:09:9c:17:07:0a:
00:98:1d:f9:0f:ab:9c:01:36:79:94:8f:a5:52:0d:
c9:49:8b:51:b4:73:7e:43:63:1a:c0:11:70:56:0d:
dc:58:68:a2:8c:ab:e6:78:2a:52:2f:55:79:65:8f:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:24:0C:C0:B9:D1:F9:11:24:3D:ED:E8:DD:CF:13:C7:6C:5C:B4
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:39:69:64:79:be:ed:04:d7:b8:72:d2:f7:d7:b0:de:e3:
24:21:4a:ff:cc:da:cc:77:ce:e7:f2:fc:1b:09:37:dc:15:b5:
80:88:a6:6e:b9:41:7f:cf:da:53:82:b0:0a:eb:4f:c0:07:45:
c5:d5:fd:18:bb:37:e3:fe:ef:4b:23:1b:24:d0:9c:3f:d6:57:
a9:d5:3f:42:c2:01:76:49:0c:fa:e2:35:d7:42:f8:26:8f:72:
f5:58:49:96:bc:3b:f8:31:6b:90:3b:b9:f2:11:87:e5:e4:2c:
85:70:cf:e4:fd:e1:8a:36:52:6e:0b:ea:1e:d7:b3:c1:4f:4f:
2d:dd:cd:db:49:38:f6:d0:15:cc:c6:e3:ce:de:74:e8:63:db:
03:66:cf:74:c5:f5:1d:d0:fe:dd:7b:5e:a0:ee:f4:ec:3e:37:
bd:da:bb:25:40:ef:04:4e:ce:ff:96:fa:3c:74:d4:14:0c:99:
99:3f:99:cf:f2:6f:30:06:66:0a:5d:9f:ab:09:b8:ed:8b:ab:
5a:de:81:7e:bc:80:4f:ca:49:8b:f7:24:6a:a9:9d:50:2c:f3:
61:da:f4:b3:ee:dd:89:57:fc:5e:ed:39:f2:61:ae:2f:f4:23:
6d:07:0d:2d:bb:e2:53:e0:e5:b0:c7:9f:bd:cc:14:4c:fd:5a:
6d:bc:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:19 2025 by rpki-client on console-fra.rpki-client.org