Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: RboG5ZMvGUpOqLG8Tixj2kJ4xQL2q8coWsF+D1lBMd8=
Subject key identifier: BC:33:6B:F1:23:F2:AA:24:83:97:EF:19:7B:0C:E8:F6:BF:AE:C4:9E
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019510C7A253909A1565AD1A125C4FE63431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0BC8
Signing time: Sun 16 Feb 2025 22:01:13 +0000
Manifest this update: Sun 16 Feb 2025 22:01:13 +0000
Manifest next update: Mon 17 Feb 2025 22:01:13 +0000
Files and hashes: 1: NReTA04T-77ajSQKWxM1eqqKR6E.roa (hash: R7bW888WzZHhXdeD1e6y9tpUbGADNmO2hfMW/oe0deE=)
2: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: wbQYbnlBl4tpuqys7SULC69avWWc6C6jpsZm0p9IhFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:a2:53:90:9a:15:65:ad:1a:12:5c:4f:e6:34:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Feb 16 22:01:13 2025 GMT
Not After : Feb 17 22:01:13 2025 GMT
Subject: CN=bc336bf123f2aa248397ef197b0ce8f6bfaec49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:61:b4:ab:db:65:08:4c:a9:aa:1e:ec:5f:
91:e7:dd:c9:58:6e:a4:b7:48:a4:98:5e:00:a3:6b:
1c:75:05:94:e9:1d:70:1c:d9:b8:4c:9a:8a:1f:8e:
02:48:38:80:b3:d6:f0:8c:28:ab:db:5a:0b:a3:82:
89:65:b5:0f:2a:a7:c2:df:08:33:35:e7:58:a0:09:
da:3f:d7:5d:a7:d1:63:ba:7e:95:e9:b3:e9:4f:4b:
6c:88:57:4b:bd:2a:eb:6b:55:ef:78:d7:7d:a0:d9:
04:de:7f:5a:bf:9c:00:2f:ce:96:d7:b1:56:82:14:
c0:3b:39:26:29:90:bb:56:19:a4:86:a3:c2:f4:2d:
b9:3d:de:67:a1:55:11:98:28:d3:99:fc:27:e2:7d:
1d:ee:f1:07:52:56:2a:fa:ed:14:df:c9:b2:eb:48:
eb:63:e8:54:43:48:dd:53:3f:07:8a:b1:86:39:49:
cc:78:17:64:0d:15:de:22:43:b9:f7:a1:a2:89:ff:
98:df:43:02:b4:b0:5f:84:70:5d:3b:62:58:6c:53:
86:d1:35:35:75:54:36:98:f5:43:f7:4a:c5:cb:19:
34:61:75:4a:56:0f:02:b6:72:8c:c7:68:94:7b:3d:
8c:95:a4:60:45:5f:99:ae:2c:a0:ad:6e:25:cc:96:
2f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:6B:F1:23:F2:AA:24:83:97:EF:19:7B:0C:E8:F6:BF:AE:C4:9E
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ce:4c:d9:ce:15:f4:25:75:42:c3:f0:69:cb:ba:fa:1a:5f:
a8:36:fa:a4:30:d9:74:5d:8c:fa:da:27:c4:1d:6f:5d:b1:e8:
69:88:86:74:9b:0f:5f:a6:ad:36:49:cc:81:4d:d5:d3:c8:59:
6e:3d:de:a0:03:78:33:14:85:b9:45:05:03:e1:29:71:29:d0:
4c:fc:27:2f:42:5f:d7:15:3e:47:73:9d:fe:d8:d9:03:58:27:
c2:01:71:13:cb:58:23:32:97:d8:2e:75:07:11:d3:51:02:58:
a6:89:70:a4:4b:f2:97:46:18:23:89:6f:e9:c0:ce:d9:e1:64:
81:2c:9b:c8:9c:57:70:33:3d:25:5e:c3:72:bb:49:7e:b0:b8:
b0:f5:8c:83:da:af:e7:91:74:09:07:4f:cd:35:5d:c1:ca:88:
3a:16:49:44:5b:e3:10:88:b1:89:aa:29:da:0a:d7:d2:44:74:
de:f7:d8:c2:f0:a2:c8:ba:39:20:d6:7f:c3:9f:1c:32:e1:4c:
2f:38:07:5a:e9:ab:d8:b4:3c:72:1a:95:4d:18:c7:92:0b:9f:
3f:f0:33:92:02:95:2e:ef:8f:58:5f:11:91:e3:34:90:6c:a7:
9a:ea:f8:66:8e:58:af:f9:3b:c2:05:5f:36:ce:26:d0:64:b3:
f2:c1:10:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:45 2025 by rpki-client