Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: 7y1rbJznqe+cirDfJPQ2ml5t4mfzdP3mlhbzvUHj1W0=
Subject key identifier: 17:68:22:D6:68:89:67:47:51:48:B3:0C:5C:9D:03:06:67:40:7E:D1
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 0194BAF2410B60655AC4392BBA6CD7D4FE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 01CD
Signing time: Fri 31 Jan 2025 06:00:25 +0000
Manifest this update: Fri 31 Jan 2025 06:00:25 +0000
Manifest next update: Sat 01 Feb 2025 06:00:25 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: gItA4903ZwkihYqtB15oZXsk6tDDwow8gQA+k+mqLZg=)
2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:41:0b:60:65:5a:c4:39:2b:ba:6c:d7:d4:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Jan 31 06:00:25 2025 GMT
Not After : Feb 1 06:00:25 2025 GMT
Subject: CN=176822d6688967475148b30c5c9d030667407ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:3e:a8:00:c1:38:fb:ce:3f:52:b8:0d:44:
ee:7f:f0:61:0d:31:ac:9c:68:e0:ea:c6:07:5d:f2:
ce:83:4e:d2:97:85:05:00:25:55:92:a6:0e:7a:84:
03:b9:96:0b:cd:87:9c:52:39:db:72:67:a5:9f:4e:
f0:75:1b:a2:e2:f9:fe:ba:29:30:79:b1:75:90:35:
11:c4:37:f5:b0:af:9c:f4:8c:96:ca:ac:04:df:c1:
4f:87:64:da:68:90:0b:8c:d8:d6:4d:20:35:74:17:
f9:00:0b:30:8e:11:f2:ef:ec:f7:02:c1:8f:81:70:
a4:71:96:1b:da:2c:ca:e1:6d:5a:85:3a:93:4e:f1:
d9:c0:f0:4d:a3:19:e2:71:c4:87:5d:f7:d0:b0:2f:
84:89:77:f4:2f:90:2f:ed:fc:6f:bd:ec:19:28:4f:
29:3a:8c:c9:a4:2a:3a:f0:83:fe:cb:d0:e9:2e:97:
a8:91:bc:67:bc:60:96:5a:9f:40:19:ab:28:ac:83:
88:19:03:88:90:95:11:cf:54:81:3d:19:48:c9:ce:
27:b2:c4:f1:fe:0f:db:64:2f:72:5e:5c:32:3e:de:
f0:ad:97:c0:05:a4:31:ab:80:5f:d2:51:9c:97:e9:
86:47:84:fc:d6:d2:c2:15:56:6e:d8:7c:50:95:71:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:22:D6:68:89:67:47:51:48:B3:0C:5C:9D:03:06:67:40:7E:D1
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:4d:46:f7:dd:46:ef:f0:b3:57:b0:bd:3d:76:07:5f:71:
77:f0:82:8b:66:98:f8:c7:12:a0:36:95:fa:02:ad:0c:37:96:
36:8f:d8:93:d6:57:b4:15:08:d1:d1:af:b9:28:0a:22:e1:2c:
26:18:00:52:d0:15:22:8e:fa:81:93:1f:a6:3f:51:bd:67:90:
eb:85:fb:3c:45:5f:df:85:af:74:62:46:31:d9:23:17:61:b0:
a7:bd:51:af:17:c0:66:83:10:ef:21:84:65:7c:9b:a9:4b:5b:
af:59:4f:5c:79:07:a4:6e:46:ce:93:ff:32:40:51:bd:1a:7f:
fa:cc:12:84:d7:45:e3:02:ba:ba:02:47:28:7d:ca:54:06:fb:
ec:98:41:92:1d:86:fa:7d:f3:db:4f:d0:b5:50:cc:0b:04:0a:
59:2c:ef:6d:55:26:57:ad:67:4e:b1:48:c9:b9:a2:89:77:00:
7a:70:4a:b8:84:61:10:42:cc:8a:ab:d5:70:56:fd:b2:bb:3d:
a8:40:4d:a9:b8:d2:c1:e3:0c:72:c0:fd:53:42:69:2c:df:ec:
72:96:f7:d6:63:af:83:b9:07:fd:95:ca:a4:50:d2:10:13:55:
8a:ba:00:e7:08:80:86:53:95:96:da:f9:53:8f:63:a5:32:5a:
1f:bb:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:20 2025 by rpki-client on console-fra.rpki-client.org