Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: gLKBUOggNDwp/hheXLPlOeprO1mxuso3piuzdBPJDhU=
Subject key identifier: 98:66:19:86:05:7A:75:34:88:BB:2B:A2:5A:82:B8:33:3E:CA:8E:A4
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 0195127E3C986192ADC0FB7F1B7AC3E07CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 072E
Signing time: Mon 17 Feb 2025 06:00:17 +0000
Manifest this update: Mon 17 Feb 2025 06:00:17 +0000
Manifest next update: Tue 18 Feb 2025 06:00:17 +0000
Files and hashes: 1: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: IK5igorCnOSMkqsRRKr1QpioOMMMFiP2vCSIjn2NKac=)
2: NRrgDH4J4CXTAvPXD6_3d1A_AB8.roa (hash: gMJAwS5d7p1yd0nZvOPAx6H6bdi5jN4+vJLXsEcA8rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:3c:98:61:92:ad:c0:fb:7f:1b:7a:c3:e0:7c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Feb 17 06:00:17 2025 GMT
Not After : Feb 18 06:00:17 2025 GMT
Subject: CN=98661986057a753488bb2ba25a82b8333eca8ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:76:57:39:21:cd:3e:97:47:a7:38:bd:55:
39:98:05:2a:5e:fe:46:1b:42:ba:b3:f2:7b:86:d0:
8d:f9:ae:b4:af:5f:07:3a:bd:4c:4c:66:c2:b1:3b:
ec:29:d4:93:19:53:09:41:82:0f:2a:d9:a4:89:63:
7c:3f:c4:86:4e:04:39:8a:6d:af:89:cc:98:66:f8:
3a:a0:68:d9:49:34:b8:24:ed:b3:46:ff:c0:ca:a0:
32:7a:1a:b1:65:c3:f7:08:5b:35:0c:d6:9b:e1:23:
98:be:3e:75:87:3d:38:c5:12:9d:a9:b5:bb:75:c6:
dc:21:3e:a4:f4:a3:55:e0:5b:93:72:76:86:e6:a8:
17:a9:f3:38:0b:4f:bd:a7:dd:ff:16:6a:ff:34:84:
96:88:43:e5:a0:62:9f:db:1f:78:7b:08:2c:b7:ea:
77:80:1d:d6:10:71:df:1c:5d:ff:c3:1f:ea:b4:46:
e2:dd:76:4a:87:f3:9f:03:00:cb:35:9d:8b:45:af:
ed:f7:0e:1c:8c:50:17:a3:73:3b:a6:20:3c:3d:fa:
51:2f:d7:6b:a0:cc:15:ed:d8:59:0d:5b:b8:f8:91:
2e:c2:95:2f:b2:90:6b:9d:0b:09:89:03:82:8f:cc:
55:29:c2:42:32:38:53:b3:c8:c9:24:32:57:f8:df:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:19:86:05:7A:75:34:88:BB:2B:A2:5A:82:B8:33:3E:CA:8E:A4
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:a2:51:0e:54:8e:cb:c3:2a:79:30:f6:38:ad:55:b7:0b:
ff:21:96:81:39:a6:d8:a2:8f:db:3c:f8:0d:07:d3:bd:4f:72:
26:41:32:01:d4:97:9f:ab:07:ec:e1:8d:35:1f:39:05:98:35:
81:dc:a6:94:32:21:43:1f:09:0b:ab:87:42:55:4a:56:6c:d7:
7e:54:de:c5:4d:ad:5e:1f:81:d2:1e:67:b0:bc:fb:ce:f7:26:
64:83:5e:bf:3d:01:a1:fd:98:b3:14:ca:1c:8d:00:a7:f6:b1:
41:95:23:0d:a2:8b:06:e6:3b:37:5f:d9:cc:ca:25:cb:3e:61:
d2:fb:1e:2f:b3:7e:78:d4:fb:68:f0:a9:d5:ed:ff:65:02:15:
81:d6:68:78:cc:6c:76:fd:25:a9:56:0b:7f:18:c7:06:b3:a2:
37:ad:99:19:cb:e4:f2:32:e2:32:12:c1:65:f0:f2:71:8b:23:
ff:50:a1:8b:5e:9d:23:c1:84:1c:94:b3:91:94:29:84:9b:87:
91:3b:a1:62:02:bd:78:20:86:bf:29:d1:ec:49:1d:29:a3:23:
86:ec:ce:25:00:d8:6d:d3:a3:9d:1b:84:ca:1d:57:df:79:40:
1c:e9:53:87:54:40:80:15:84:01:76:d6:25:95:8b:7f:6b:b6:
5a:fa:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:03 2025 by rpki-client