Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
File: 6CBqoyUuPqjWhOrseimTUTtdIwc.mft (raw, json)
Hash identifier: GTOsP+e/BRj34R1g5tJakZpGZLONTkQgdk4gL1A6Mls=
Subject key identifier: 15:C9:04:FD:A0:C4:D3:03:B9:F7:F7:A7:87:C2:B0:8B:80:18:89:AD
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 0194BB2984B4518F09990E791DED25FB7EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
Manifest number: 0FAB
Signing time: Fri 31 Jan 2025 07:00:47 +0000
Manifest this update: Fri 31 Jan 2025 07:00:47 +0000
Manifest next update: Sat 01 Feb 2025 07:00:47 +0000
Files and hashes: 1: 6CBqoyUuPqjWhOrseimTUTtdIwc.crl (hash: pcCsPneYdOuNo/IDYmE3Ja+1V162hH4oWb/lLtK8gZQ=)
2: M-_cdcLtCwgztUAvo6U6xc0Pw7c.roa (hash: QqjONmK2RzxQWqZOMsrEEr0jP5v8oGa9bpmq/G1FKtE=)
3: fgObtEnjhGSc2Dbcv69KzOyhLQg.roa (hash: +AsZFMBywBZBAtd5zEwLILx86Sgs0i4z2/GivURPyZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:84:b4:51:8f:09:99:0e:79:1d:ed:25:fb:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 31 07:00:47 2025 GMT
Not After : Feb 1 07:00:47 2025 GMT
Subject: CN=15c904fda0c4d303b9f7f7a787c2b08b801889ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:32:eb:44:32:f5:ed:40:b0:ab:56:7d:04:
0f:f6:81:ad:9b:58:10:f6:f4:b6:e1:af:2b:db:e1:
10:e3:86:c5:9a:23:9b:1b:b4:44:15:49:ee:05:7c:
85:2e:98:54:ba:a6:11:9e:97:e8:a2:75:e2:00:27:
19:a7:ac:76:3a:cf:83:84:98:b3:58:9b:9b:98:79:
2d:1a:da:2f:3f:a2:58:1d:a6:f0:25:b6:e3:7d:37:
12:68:87:f4:e7:d5:19:a3:8d:93:b8:f6:27:ac:b6:
32:46:e9:4b:6c:99:4c:23:1d:80:08:00:c8:62:91:
c7:8f:a8:e0:3f:33:0b:dd:96:88:17:14:db:1f:28:
61:6a:95:08:ef:cb:fc:e6:04:f4:10:b4:36:5e:12:
39:1d:7a:be:f5:86:0d:35:35:61:14:f3:d8:0b:5c:
55:9e:90:03:0f:28:2c:96:f8:d6:0f:04:17:a5:3e:
9f:1d:be:f8:ab:39:73:5c:34:87:10:63:59:e3:49:
c9:c4:59:31:34:97:b5:65:c2:6c:c7:2d:de:a1:63:
d8:37:f7:e8:8c:75:52:71:d0:e1:62:9f:0e:a7:63:
e3:0f:56:d8:30:63:43:83:98:32:a5:e9:7a:e1:f8:
8c:ad:12:41:e9:53:8b:23:97:b7:70:68:51:1a:15:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:04:FD:A0:C4:D3:03:B9:F7:F7:A7:87:C2:B0:8B:80:18:89:AD
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:28:51:20:6a:b5:8e:41:89:65:3f:b0:c2:82:88:b9:40:
31:64:f4:a4:fb:5c:86:eb:f2:fd:9a:00:cd:8c:24:1a:a3:04:
2c:56:4f:4f:2f:2f:fe:15:6a:58:1f:ad:57:63:ac:89:70:f6:
eb:41:bf:72:ae:c5:1a:ef:d3:30:83:3c:db:fb:5d:d2:14:42:
31:b9:db:ec:e9:92:fc:ba:61:71:9f:32:0d:2c:2d:c2:c5:b8:
49:7f:ba:cb:d0:23:8f:7b:94:86:8b:80:60:a5:a5:e4:db:da:
e2:49:30:bb:95:0c:9a:e3:94:f0:2e:55:2c:41:6d:c7:c3:68:
44:ba:04:8d:5a:9f:0b:98:4d:f9:4b:56:79:17:16:f6:00:88:
76:b2:29:69:76:34:ae:1e:6b:43:ea:b5:fd:b0:8c:28:49:6c:
f5:cb:92:37:30:dd:a1:f2:db:ba:32:d5:64:ef:cc:0c:3f:06:
eb:5b:e9:58:c7:fc:81:fe:9f:1d:c1:5a:73:3e:5d:3f:1b:6d:
ef:67:ac:0d:e2:4b:d3:5b:b1:6e:ae:aa:d2:5f:89:fe:5f:81:
77:33:cd:de:0f:f5:fa:34:8d:80:59:b8:57:5e:e8:cc:4f:06:
d0:cc:85:7f:62:f1:7d:a5:7c:76:39:c1:68:4e:db:d8:8c:67:
6a:b9:9e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:59 2025 by rpki-client on console-fra.rpki-client.org