Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: Ddtuc0vXFBapOZTkY3lNjdPE6czW/uQDxem18Q/df40=
Subject key identifier: 0B:95:BC:BC:0B:75:30:4D:8E:63:EC:13:56:01:53:2F:BA:15:94:1C
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 019511A2C05C13D481E9A5CD8901F6B84A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0BB7
Signing time: Mon 17 Feb 2025 02:00:33 +0000
Manifest this update: Mon 17 Feb 2025 02:00:33 +0000
Manifest next update: Tue 18 Feb 2025 02:00:33 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: da3AU+f6CqzcCBA1gGjAIRMwfrx3x10NUsXLGX+y5ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:c0:5c:13:d4:81:e9:a5:cd:89:01:f6:b8:4a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Feb 17 02:00:33 2025 GMT
Not After : Feb 18 02:00:33 2025 GMT
Subject: CN=0b95bcbc0b75304d8e63ec135601532fba15941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:99:44:0e:69:4c:85:9a:b2:bf:a4:d5:22:
c3:4c:c8:d1:c8:16:e3:1f:8b:0e:57:fa:e6:ba:47:
28:f7:ba:b2:82:7e:13:13:a5:70:79:d9:4c:20:dc:
51:f0:a3:01:51:61:d7:9a:81:9c:36:fa:84:b6:49:
6a:fb:f3:4a:c8:4e:fc:4e:8c:ae:f6:92:b3:82:a6:
2d:63:df:97:68:be:03:89:35:eb:f4:60:cb:f1:7f:
0b:ee:75:ee:ba:c3:1a:f6:78:0f:a6:38:25:0e:01:
c8:b3:78:41:92:1d:21:8b:05:70:50:bb:ff:34:2f:
52:70:f6:2b:94:fb:ee:a2:fe:b7:ef:52:9c:c3:8c:
bf:56:72:15:62:72:f7:ae:d9:50:e1:ae:bb:16:cb:
33:3a:3b:4a:ae:78:ef:a2:1a:30:64:32:68:fb:9c:
c5:56:94:88:61:55:56:17:de:55:5d:ef:06:93:c4:
79:60:46:f8:1a:37:42:63:3d:c3:9f:a3:e0:6d:9d:
a2:97:e3:02:2c:24:71:76:70:3d:8f:07:2f:2c:a0:
06:e5:56:62:8a:29:88:bc:01:80:5e:43:e7:4e:b9:
31:e4:50:df:09:84:1f:42:f1:74:f7:50:82:a5:6f:
c3:71:e5:05:c5:e9:59:90:5c:3d:2c:8a:c7:bb:4a:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:BC:BC:0B:75:30:4D:8E:63:EC:13:56:01:53:2F:BA:15:94:1C
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:e0:bd:2a:5f:fa:16:15:38:d3:bf:3b:a9:75:46:ff:f1:
98:5e:c9:df:dc:3f:cc:b9:48:b0:51:9f:f5:a9:cd:5d:58:89:
5a:8e:24:8b:d3:14:29:8f:0e:42:fa:1e:66:dc:66:9f:82:1e:
87:ba:0b:e2:c9:2f:1c:59:e6:cf:33:89:5a:c5:9f:c3:5c:3b:
ee:86:19:9e:3a:dd:c3:d4:ca:0b:cf:b5:ce:2b:04:d3:ec:e8:
0a:1c:5e:0d:80:a9:5c:48:c5:97:6c:5d:e8:92:65:f2:11:6d:
2d:fa:7e:d5:bc:21:4a:c5:e6:9f:c9:26:51:25:15:76:ef:d4:
80:51:7b:6b:b6:d5:ca:65:ec:e6:5c:11:3f:0f:30:3f:90:0e:
89:f1:23:d0:9f:ac:7e:5e:11:18:b6:96:7c:15:97:93:50:1c:
39:52:c4:34:23:10:f4:b2:7f:7e:eb:31:e2:86:68:8f:90:cf:
b2:4a:d5:e6:cd:57:86:a7:df:4a:a6:19:56:12:05:b1:66:f0:
aa:09:9a:b7:c7:1e:69:65:4a:2c:55:db:52:14:2f:b3:bf:ba:
45:df:6e:ff:42:48:0a:34:16:63:07:34:7e:71:8e:a0:98:24:
44:b1:0b:f8:57:fc:67:30:a7:13:f1:6c:97:82:ee:a1:5b:cd:
7a:12:94:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURosBcE9SB6aXNiQH2uEo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZlZDdhNDcxZDdhYzM4NWUzYjkzNjVhNGU5NjAxMmEw
MWMwOTUwHhcNMjUwMjE3MDIwMDMzWhcNMjUwMjE4MDIwMDMzWjAzMTEwLwYDVQQD
EygwYjk1YmNiYzBiNzUzMDRkOGU2M2VjMTM1NjAxNTMyZmJhMTU5NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiyZRA5pTIWasr+k1SLDTMjRyBbj
H4sOV/rmukco97qygn4TE6VwedlMINxR8KMBUWHXmoGcNvqEtklq+/NKyE78Toyu
9pKzgqYtY9+XaL4DiTXr9GDL8X8L7nXuusMa9ngPpjglDgHIs3hBkh0hiwVwULv/
NC9ScPYrlPvuov6371Kcw4y/VnIVYnL3rtlQ4a67FsszOjtKrnjvohowZDJo+5zF
VpSIYVVWF95VXe8Gk8R5YEb4GjdCYz3Dn6PgbZ2il+MCLCRxdnA9jwcvLKAG5VZi
iimIvAGAXkPnTrkx5FDfCYQfQvF091CCpW/DceUFxelZkFw9LIrHu0rfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuVvLwLdTBNjmPsE1YBUy+6FZQcMB8GA1UdIwQY
MBaAFLCv7XpHHXrDheO5NlpOlgEqAcCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMt
MzA0YTU0ZThjMjY0LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZjY2MTMtZTc5OC00N2Y0LWIzMTMtMzA0YTU0ZThjMjY0
LzEvc0tfdGVrY2Rlc09GNDdrMldrNldBU29Cd0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnzgvSpf
+hYVONO/O6l1Rv/xmF7J39w/zLlIsFGf9anNXViJWo4ki9MUKY8OQvoeZtxmn4Ie
h7oL4skvHFnmzzOJWsWfw1w77oYZnjrdw9TKC8+1zisE0+zoChxeDYCpXEjFl2xd
6JJl8hFtLfp+1bwhSsXmn8kmUSUVdu/UgFF7a7bVymXs5lwRPw8wP5AOifEj0J+s
fl4RGLaWfBWXk1AcOVLENCMQ9LJ/fusx4oZoj5DPskrV5s1XhqffSqYZVhIFsWbw
qgmat8ceaWVKLFXbUhQvs7+6Rd9u/0JICjQWYwc0fnGOoJgkRLEL+Ff8ZzCnE/Fs
l4LuoVvNehKUTg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:34 2025 by rpki-client