Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: f9znUQDMWHr356rzoFnR0btJtZNyCvPJBDwgp0Qd8gw=
Subject key identifier: C2:2B:69:91:61:88:52:BE:E4:92:E0:2A:B5:3E:48:B0:B0:0B:C0:0C
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0194BAF232AC887CF172AF3380D84CDDABBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 07A8
Signing time: Fri 31 Jan 2025 06:00:22 +0000
Manifest this update: Fri 31 Jan 2025 06:00:22 +0000
Manifest next update: Sat 01 Feb 2025 06:00:22 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: NNuw0piOK+W9OFLN+qsX/4ppLC5f5n3o2PjhS000iws=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:32:ac:88:7c:f1:72:af:33:80:d8:4c:dd:ab:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jan 31 06:00:22 2025 GMT
Not After : Feb 1 06:00:22 2025 GMT
Subject: CN=c22b6991618852bee492e02ab53e48b0b00bc00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:7b:a3:4d:cb:47:3e:04:5d:07:9d:38:7e:
a1:a3:b9:33:ff:54:74:ff:04:41:0e:53:2b:9f:8f:
b8:97:da:39:0d:5c:f5:d5:c4:93:21:5d:cc:22:25:
b9:74:18:36:8f:8d:b9:ec:5d:d1:8b:a9:28:d0:6b:
dd:49:cb:61:a8:4a:38:3f:e7:a6:c9:8c:4e:27:6b:
f6:d3:18:b6:7f:25:f9:28:5a:45:17:04:ee:78:f0:
d0:d4:8e:3a:29:9e:e5:77:47:3f:4c:62:b5:40:6e:
d7:a4:cd:99:5d:2c:96:b6:84:de:c3:33:54:8b:de:
1a:35:f5:67:ac:90:4b:d6:00:bf:e4:58:80:91:d4:
8c:3f:64:d8:76:17:a2:b9:37:94:69:c5:56:37:5b:
9f:b9:57:38:e5:0e:d0:04:9b:2b:5a:c9:a9:9f:35:
1d:ee:3e:81:68:0e:34:18:00:07:8c:b4:ee:c0:3c:
19:3d:d5:e5:46:cc:ee:31:8c:34:6f:50:2c:9b:58:
bc:08:bb:e0:89:1e:ee:e2:0c:cd:97:ed:8e:90:e1:
8a:1c:2e:63:96:62:1c:b9:3d:f7:68:b5:6b:7a:fd:
70:a2:86:f1:c5:ce:bd:31:5e:cc:46:56:44:67:1f:
65:be:c5:9a:d4:30:97:10:d2:4c:29:cd:17:67:f8:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:69:91:61:88:52:BE:E4:92:E0:2A:B5:3E:48:B0:B0:0B:C0:0C
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:e6:35:c8:bc:e3:e1:bd:44:a2:2c:39:02:d3:55:dd:8a:
4b:6f:0f:b7:aa:6f:b8:f4:2e:fd:3d:00:ca:dc:c2:4e:47:3f:
76:34:b3:36:bd:4c:84:76:80:95:1d:43:f3:4a:d8:21:b6:64:
f8:ec:d3:89:6a:f6:e1:f1:44:44:33:77:27:d2:cf:f0:a2:31:
4f:84:e5:6e:a1:6f:9f:3a:ce:2c:17:34:2c:18:a3:e2:85:27:
b1:aa:f5:7c:53:67:3d:24:97:56:10:b8:4c:4d:3a:01:fc:13:
9f:b0:22:f5:94:25:be:e3:87:4a:da:65:87:6e:93:d2:60:bc:
dd:d6:41:0b:93:2f:8f:2f:45:60:4b:98:d0:a5:00:aa:63:d5:
d1:37:e7:b3:d1:49:8c:eb:62:79:04:32:f6:ff:59:cc:15:1f:
76:25:b8:ca:f3:70:63:5f:67:37:82:e5:a1:f5:8e:d7:26:40:
1a:23:7b:86:9b:17:c2:8a:b7:a1:56:c4:96:8d:42:59:5a:11:
30:8b:be:e0:dd:c1:29:d1:f9:6a:25:11:6b:ac:10:56:43:51:
61:fa:6a:0d:e2:ae:06:f9:21:e7:a1:03:22:32:98:02:b9:92:
8a:4f:ce:f0:9e:24:ed:00:43:17:de:d2:e5:79:c4:f4:00:1d:
a1:44:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:46 2025 by rpki-client on console-fra.rpki-client.org