Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: zupFSQbYHaQkY9rjqrMvGuUZpiT/Zh2Lhwj8573Zc+A=
Subject key identifier: 39:9E:DC:9D:A8:CB:60:B0:C5:9F:F7:1F:D3:25:2F:DD:B7:49:B8:A5
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 0194BAF289CBE3A819EB33CEB9181CA77E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 06:00:44 +0000
Manifest this update: Fri 31 Jan 2025 06:00:44 +0000
Manifest next update: Sat 01 Feb 2025 06:00:44 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: 2HkRCQrR1nAV58sH9Xy+Ya8sEnjVndg0M0mng8DCqtE=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:89:cb:e3:a8:19:eb:33:ce:b9:18:1c:a7:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Jan 31 06:00:44 2025 GMT
Not After : Feb 1 06:00:44 2025 GMT
Subject: CN=399edc9da8cb60b0c59ff71fd3252fddb749b8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:ce:6e:48:53:f1:42:84:90:46:71:04:2b:
75:a6:32:d8:8c:9e:0a:d5:89:df:fb:15:3b:6a:53:
a4:00:1e:a8:fe:9d:c1:da:55:0d:12:5c:db:ff:c8:
7b:60:35:eb:1d:b3:cc:8a:bc:12:70:d4:0b:13:06:
eb:12:99:45:af:7b:74:53:51:85:c8:15:1c:05:14:
35:74:4c:07:f9:3d:9f:1b:dd:90:3f:61:8c:f6:ae:
13:5f:4e:38:7e:48:bd:68:9f:98:16:a1:8f:69:61:
09:82:09:c0:c1:ff:4a:ec:fa:f6:48:60:6e:0f:e8:
ca:49:96:0a:bd:2a:8c:ee:7d:6e:34:23:d0:28:92:
3f:bd:2f:60:b0:3b:a2:f2:29:4e:0d:0d:5a:0b:12:
31:73:09:50:59:d2:50:8b:d2:6a:6e:80:88:6c:44:
aa:d6:c5:0c:6d:4b:aa:bf:c0:ad:76:4b:e5:1f:94:
6c:6b:65:d8:bc:d2:2d:49:f2:a6:72:b9:5f:f9:ec:
15:58:41:73:53:68:2e:93:51:8f:3b:fa:42:c1:be:
36:9d:a6:e8:ee:e8:a7:b9:a5:4a:87:54:5d:13:be:
e6:0d:1e:06:60:c1:e0:cc:73:e2:91:7d:af:b0:ef:
11:9a:99:fa:22:a0:9e:9a:92:aa:c3:1b:af:be:36:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9E:DC:9D:A8:CB:60:B0:C5:9F:F7:1F:D3:25:2F:DD:B7:49:B8:A5
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f2:76:01:6a:42:d0:7f:ef:fe:6d:40:94:e2:31:9e:b4:01:
38:bb:e9:27:03:05:4e:95:44:59:22:a8:bb:23:0e:3f:c8:43:
79:e5:26:fc:bf:f6:00:80:c7:56:b3:b4:f5:4d:12:e6:51:77:
93:a3:f8:6d:b4:fb:48:50:47:9f:34:2a:e2:df:56:b6:85:1c:
24:ce:7e:49:14:69:77:d3:88:2f:a0:cd:35:d5:7b:f1:71:a7:
0a:51:29:bc:22:bd:a5:64:f0:01:25:79:64:7c:69:44:7b:3b:
03:3f:bd:e0:9a:17:ad:14:83:7e:48:31:41:ba:d2:d7:3e:89:
ca:c1:16:3b:91:06:db:6b:d5:79:c7:d4:c6:62:3d:1b:7b:bd:
69:e4:e8:0f:8e:07:2d:55:8a:81:5c:7f:0d:51:36:94:ec:4e:
25:8c:ca:f9:a8:38:f7:3e:35:41:3c:9c:28:97:3f:f8:4a:bd:
62:d6:6e:b2:2b:ca:d9:32:f7:6a:fd:36:09:da:cc:d2:d7:27:
cb:db:05:c1:ba:4e:a7:f9:07:e3:4b:22:db:7e:51:f8:b9:76:
47:ad:34:e8:ea:3e:d2:78:21:c3:2e:21:7f:ef:1e:ad:7a:ce:
af:11:fd:bb:ea:48:fe:7f:81:4c:93:ab:86:5a:e3:a0:e1:6c:
1c:39:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:55 2025 by rpki-client on console-fra.rpki-client.org