
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: oGm3YjoerYUikY/59Y+sw6BWCZLnHtEWQKMVJYPY17Y=
Subject key identifier: 6D:6B:A4:01:A9:03:EC:0A:B3:AD:6C:CA:A9:52:7F:AC:98:51:12:BB
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 0194BB297CF22A9184531DE6455EB888820F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 07:00:45 +0000
Manifest this update: Fri 31 Jan 2025 07:00:45 +0000
Manifest next update: Sat 01 Feb 2025 07:00:45 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: rSntRsJSbcnc64q6UtDs6YiFPUOnBTXFmfQE7xgIUXA=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:7c:f2:2a:91:84:53:1d:e6:45:5e:b8:88:82:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Jan 31 07:00:45 2025 GMT
Not After : Feb 1 07:00:45 2025 GMT
Subject: CN=6d6ba401a903ec0ab3ad6ccaa9527fac985112bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:f4:8d:73:5e:64:88:07:50:ea:87:85:0f:
7a:5a:80:4b:88:3b:e1:bf:6c:60:90:3c:8f:eb:f3:
2f:d0:eb:68:eb:6e:9e:49:bb:3c:bf:9a:a7:80:61:
2b:af:f8:c8:f7:b2:96:ce:9b:27:57:ce:cc:4c:6a:
ab:3a:9c:42:e4:32:0a:18:52:f9:81:3f:e9:96:3e:
49:13:e7:ec:f9:48:ef:f2:13:ab:17:b9:4c:b6:05:
5e:a2:0c:c8:ab:e2:bf:c4:3f:fe:85:81:e0:b5:cd:
7c:13:c9:01:7c:bc:12:49:eb:04:05:23:32:59:59:
8f:ba:41:ce:d1:38:df:55:8c:bf:29:0a:54:bd:e8:
ab:70:df:9c:75:53:e0:d5:dc:d1:1f:4e:43:be:51:
2b:f7:7f:67:74:bc:c3:0b:56:28:21:af:35:d7:2e:
c1:9c:bf:70:27:31:24:d3:aa:21:79:66:9d:b7:69:
5d:c1:5f:36:ad:94:38:57:e5:68:54:d4:ff:8f:48:
7a:9d:2b:46:01:a1:99:fe:ce:a9:7f:e3:10:25:d3:
76:3e:86:c2:b4:ba:0c:f9:a3:8e:a7:e7:7e:26:89:
45:b4:6c:48:5f:32:f0:20:fe:e2:60:f6:b3:c9:9f:
b7:2a:a2:6d:ee:3a:ea:31:0b:bb:ad:dc:c6:3f:99:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6B:A4:01:A9:03:EC:0A:B3:AD:6C:CA:A9:52:7F:AC:98:51:12:BB
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:82:8e:03:7c:9f:62:61:42:66:f8:5f:00:03:9b:77:b4:
09:99:57:14:4f:f2:c2:bf:08:f2:06:2a:57:66:ff:63:25:d8:
82:2f:08:55:85:e0:f2:8f:93:73:e7:44:25:7e:8c:2c:ee:a4:
92:00:64:25:6e:54:c2:88:45:ff:08:cc:cb:16:6a:48:1d:9a:
5a:be:4b:f6:92:e9:ff:93:a1:3f:59:e3:07:7a:a9:c3:b2:36:
33:28:38:9f:11:43:88:fd:33:1a:bc:71:de:6a:76:b0:88:b2:
93:31:38:93:04:e4:aa:ab:cf:6a:9f:86:8c:d4:26:f3:94:3b:
1e:89:28:71:e7:61:58:82:68:21:c7:f7:f2:2d:3f:64:fe:85:
18:be:64:fb:51:d7:e2:5f:4f:95:16:9a:20:a7:18:60:d6:f5:
fa:75:f9:8a:1a:3a:d9:97:71:c2:e5:64:f7:df:36:7e:cc:7a:
6c:88:e2:d3:42:be:0f:94:d9:55:8d:21:ac:e4:3a:e2:d0:be:
44:0d:55:c3:bd:ad:d3:ca:55:79:99:9b:d0:69:15:69:6e:0b:
83:e8:af:13:1c:f4:2f:4a:fc:d0:bd:df:bf:88:60:af:d2:c6:
b8:4b:9d:bb:a5:da:9d:ce:d1:e0:26:0c:72:4e:d0:5e:bf:e9:
6a:90:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:33 2025 by rpki-client on console-fra.rpki-client.org