Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: DOrjGVMmePwAMyzCLlwCOhRB2wPMhemf0NQM6HJjLRg=
Subject key identifier: 62:61:CC:29:97:62:76:1C:2D:B7:AC:C9:C0:CD:71:86:CA:53:11:E8
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 0194BB28EC33C8286785500D2E2E503DE12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0AF8
Signing time: Fri 31 Jan 2025 07:00:08 +0000
Manifest this update: Fri 31 Jan 2025 07:00:08 +0000
Manifest next update: Sat 01 Feb 2025 07:00:08 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: eI+jdD7Hdpvv4QSa8j+VpQvIsD/HRZIwawmI8JObY6A=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:28:ec:33:c8:28:67:85:50:0d:2e:2e:50:3d:e1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Jan 31 07:00:08 2025 GMT
Not After : Feb 1 07:00:08 2025 GMT
Subject: CN=6261cc299762761c2db7acc9c0cd7186ca5311e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c3:3a:24:78:5b:78:0a:71:9b:72:9a:7d:59:
ed:c4:90:35:78:03:f3:70:0f:8f:cb:79:60:f8:61:
f4:dc:a1:04:a9:b4:60:8c:66:3c:79:a6:94:cc:0b:
d5:82:f2:f0:dd:88:26:ee:fd:bb:54:0f:83:35:70:
4f:83:0c:cb:48:2d:63:57:e4:2c:f7:55:83:48:32:
2f:05:c3:f3:7c:2b:82:fd:81:f3:46:cd:2e:ce:32:
14:20:f5:4f:d1:99:ca:cc:47:fb:e8:b1:e2:e0:08:
cc:cf:d1:01:a3:f3:72:3d:ba:ba:38:a3:09:22:46:
c7:99:27:8c:05:5c:3e:f2:00:1f:22:9c:f6:ce:82:
dc:98:70:06:5c:57:82:6d:8a:7a:56:6c:7b:bc:1f:
4c:fd:1d:ee:24:b7:ee:5f:6f:d9:32:8c:4f:d6:6f:
b3:02:94:3f:5c:61:d5:ed:25:f4:14:50:c4:04:7b:
88:09:6e:e7:93:ef:90:47:4f:b0:9c:97:64:19:39:
69:47:d5:aa:9b:78:a4:b8:11:f3:02:b7:dd:b0:ee:
08:f3:ae:90:5e:49:be:4e:1b:5a:62:eb:52:a6:55:
88:8b:d2:1c:77:fd:a2:26:93:ee:5c:8b:8e:1a:36:
b2:aa:7f:56:3d:90:b6:f9:5c:b4:64:8f:34:f4:21:
e6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:61:CC:29:97:62:76:1C:2D:B7:AC:C9:C0:CD:71:86:CA:53:11:E8
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2e:e1:ea:12:13:f1:40:a1:83:39:a5:34:3d:0f:82:4f:ea:
5c:28:d2:bd:61:b1:a0:81:ce:00:3f:21:32:0e:b8:0a:ac:28:
ff:19:76:f1:26:20:03:bc:ce:6a:f7:bd:18:f2:7a:43:eb:ec:
4c:8a:32:28:fe:d5:7c:46:02:57:20:13:c6:72:f9:f3:1c:29:
ea:58:8e:56:51:75:80:7f:d8:1c:21:be:59:f9:e9:92:e2:aa:
aa:37:21:3d:33:1e:b5:3a:a1:b7:dd:31:08:f2:10:b4:ea:30:
e4:04:2b:26:2e:ac:67:ca:d8:36:2f:20:d6:6b:4c:d4:9f:4c:
b6:c7:2f:9d:d3:e6:df:09:8d:9f:55:7f:e3:55:8b:19:93:c8:
25:30:52:b7:43:49:df:0d:02:a3:48:0f:ab:19:0f:7e:39:f5:
9a:b2:83:32:4e:e5:d2:4c:7a:92:75:23:d0:6b:bb:9f:c4:cb:
36:64:d8:58:d6:37:4e:ff:85:c9:fe:98:60:93:23:35:13:00:
24:08:d0:e5:28:9b:80:58:75:b2:73:e5:f3:bd:46:e0:c3:f1:
1f:c2:d0:02:7f:b0:3f:69:1a:e3:cb:ae:67:94:a6:75:f5:33:
2b:6e:eb:71:f2:37:07:b2:cf:d6:d6:df:b0:72:db:30:8e:84:
d5:0e:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:28 2025 by rpki-client on console-fra.rpki-client.org