Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: waN7kS3YZS3MNn74M9CDmBF08xlzWLPvkrcpgbrz+ms=
Subject key identifier: 23:69:CD:EC:A7:71:60:F4:6D:4F:13:58:ED:FB:3E:B2:4B:9E:E1:6F
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 0194BB290C3E1EADF88507F21DF86954C8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 01FA
Signing time: Fri 31 Jan 2025 07:00:16 +0000
Manifest this update: Fri 31 Jan 2025 07:00:16 +0000
Manifest next update: Sat 01 Feb 2025 07:00:16 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: nHKTJgH/OZH5xvoeb2SVCrXNiagrjGEYt6r5JyQpkEc=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:0c:3e:1e:ad:f8:85:07:f2:1d:f8:69:54:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Jan 31 07:00:16 2025 GMT
Not After : Feb 1 07:00:16 2025 GMT
Subject: CN=2369cdeca77160f46d4f1358edfb3eb24b9ee16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:cb:91:42:52:d2:22:73:62:4a:58:ab:4e:
a1:22:37:04:aa:43:ca:6a:d0:b9:53:e0:c5:68:7d:
10:da:e8:0d:fb:d3:f8:17:e4:b9:c1:07:6c:a2:f0:
c2:c3:8b:d3:df:77:be:d6:8e:0c:58:1b:79:bf:2a:
38:ce:1b:3a:21:85:05:8f:2f:ad:1a:1d:f3:3a:70:
31:e4:b5:0d:eb:ea:9f:ed:8b:2a:f8:2a:0d:ee:ac:
24:77:7e:47:c0:d8:11:25:2f:0d:52:14:1b:5f:b5:
da:e3:da:00:4c:cc:46:c5:15:73:e7:16:d5:82:6f:
8c:e8:75:a0:54:a9:a0:74:86:7d:72:42:b3:2a:44:
d4:ae:b6:06:81:d7:61:73:14:c0:fb:7c:58:e5:74:
d5:81:c1:ae:2d:c7:4d:38:b2:24:13:8a:58:5b:b5:
03:b9:51:68:37:1a:a9:ea:94:a0:9c:57:b2:9e:73:
cf:24:a4:a7:b5:8d:b0:d6:97:b0:26:df:65:ce:ef:
24:6b:28:69:05:ea:bd:95:ce:f6:c7:4b:5f:43:02:
f5:d6:e8:69:46:bd:63:d2:c8:13:3d:10:55:c7:e5:
c2:d2:10:cc:48:5e:8e:2f:5d:3c:78:0d:fe:c3:20:
33:f4:62:1c:9f:23:a4:cc:7e:e0:d7:25:ac:f4:c5:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:CD:EC:A7:71:60:F4:6D:4F:13:58:ED:FB:3E:B2:4B:9E:E1:6F
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1b:af:3b:9f:f3:26:4c:d2:77:db:c2:13:0d:96:5c:56:fc:
f5:ef:63:ba:e8:cb:21:37:c0:d1:66:13:3e:53:a3:72:e3:9e:
7b:4b:d0:64:99:6c:9f:d4:40:3d:90:88:6c:15:c8:a3:07:59:
fe:f0:ea:a1:0a:ba:47:bf:a6:33:03:b2:1d:52:a0:74:09:1f:
c8:7f:a6:e0:23:18:94:80:70:37:e9:e1:57:ca:96:2c:50:32:
fd:c7:54:0f:b6:fc:ee:b2:bf:7f:f9:c9:a7:7c:ff:b3:62:60:
76:ad:7d:ae:6e:a6:70:43:77:9d:ec:d9:c0:2d:1b:d5:0d:41:
2f:14:11:56:93:ab:3c:a0:ce:75:4e:6a:39:50:dc:73:d9:08:
bd:5f:e5:52:a4:42:d5:c9:af:23:77:d1:39:99:34:27:fc:dd:
cc:9e:4c:24:98:c4:e1:af:bb:56:12:34:59:35:15:70:27:2e:
d5:69:b9:2e:2c:de:12:38:1d:7c:64:7b:97:64:03:cf:ff:d8:
b4:ce:2f:02:b6:8b:13:6e:ff:38:c8:9b:d2:dc:94:4e:69:23:
98:99:86:f0:16:20:af:c2:73:c6:7f:a1:2f:31:b2:28:de:0b:
39:26:ed:b9:17:d2:5d:85:7c:72:63:67:c4:b2:e4:6c:cb:cb:
e4:bc:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:56 2025 by rpki-client on console-fra.rpki-client.org