Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: MaJLZkEO/l54MiO4nOOgrq1yVXxACDRgd864rdfEcZA=
Subject key identifier: 29:AF:D0:99:37:8A:9B:DE:F1:69:45:43:32:8E:C2:61:DA:FE:27:9F
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 01958EBD2D9452366D4EB211D325C2CB5F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 09F0
Signing time: Thu 13 Mar 2025 09:01:57 +0000
Manifest this update: Thu 13 Mar 2025 09:01:57 +0000
Manifest next update: Fri 14 Mar 2025 09:01:57 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: bouZ4ZBXkX/OP9rc4r8pW2nVDSAA6NVERhVG1UZVKUE=)
2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:2d:94:52:36:6d:4e:b2:11:d3:25:c2:cb:5f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Mar 13 09:01:57 2025 GMT
Not After : Mar 14 09:01:57 2025 GMT
Subject: CN=29afd099378a9bdef1694543328ec261dafe279f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:06:ab:55:b3:72:de:81:e9:70:2c:84:0c:e7:
62:4d:0d:8a:78:ac:08:d2:85:ef:0b:03:66:89:2d:
b6:2c:cb:5f:54:95:a5:5d:86:5f:38:46:3c:f9:b0:
f4:a8:2d:73:57:1d:1c:d2:8b:eb:2e:30:db:30:28:
49:70:e8:19:b6:3f:2d:d1:e0:7f:48:5f:ab:ec:cc:
d1:67:a6:13:cf:f0:52:48:c3:15:4e:1a:71:ba:88:
fc:a4:67:5a:a9:79:30:5a:28:cc:64:3d:77:9a:b4:
6a:33:87:8e:d2:d7:16:2f:05:b4:7b:42:82:3d:93:
ef:88:d3:6f:dc:48:d4:2d:7b:9a:e9:2b:02:4e:52:
12:65:19:4c:94:cd:9c:9e:d5:61:f9:df:c0:93:e8:
49:22:97:4c:2e:ff:e9:97:bd:af:14:34:b2:08:f3:
d8:66:aa:4e:f3:86:74:ed:d9:78:c6:ae:36:e5:6c:
2a:7d:8a:ad:f8:1e:b5:42:1a:57:51:08:17:8f:7b:
0b:72:89:6f:a6:27:c8:e9:b1:6a:b9:04:42:b9:89:
0f:4e:91:03:0b:ed:87:be:16:c1:9a:66:0b:1f:59:
f7:74:3a:7f:d9:57:42:94:9e:5c:95:3d:59:c1:85:
42:da:f4:60:29:a7:e7:aa:4b:e9:45:e5:04:ae:00:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:D0:99:37:8A:9B:DE:F1:69:45:43:32:8E:C2:61:DA:FE:27:9F
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:ec:97:f3:58:df:e0:6a:49:76:3f:ea:fb:37:ff:00:a0:
c0:9a:d3:56:46:dd:07:8b:46:c2:3c:98:2d:c4:fb:9e:69:c2:
09:b4:6e:ab:0b:cd:47:01:83:2a:d1:c6:b6:de:68:52:60:1b:
51:13:18:c4:57:5d:62:df:b9:c9:e2:f1:b4:5b:58:50:c7:1b:
c8:44:c2:b4:bc:c6:f8:87:90:9a:3a:44:e3:be:5a:f3:f7:c4:
47:b9:67:49:34:4a:49:1d:d4:f4:57:4f:c0:65:62:79:c9:b2:
28:40:d5:9c:42:08:7e:fe:eb:2e:c3:e0:8c:d7:38:0e:69:8f:
3f:4e:88:28:7b:23:38:ea:8f:29:78:3f:2e:07:25:82:80:3e:
04:6e:aa:7e:77:b2:d8:0c:b0:12:83:7d:8b:e9:db:16:61:e8:
a9:c4:d1:65:9b:bd:2a:ba:11:73:b3:57:7d:4b:19:a1:ec:47:
ee:cf:59:9a:54:d1:7d:a3:f8:5e:28:0e:91:49:52:81:6c:cc:
7c:2f:74:8b:11:21:4e:49:60:91:8a:b8:5e:72:7d:bd:b9:7d:
f2:1c:db:a2:d7:51:be:7a:c1:bf:8d:bc:2e:97:58:0a:6e:e1:
83:cd:6d:8e:12:1a:8c:66:9d:50:26:88:d9:62:2c:07:a8:73:
8c:59:11:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:05 2025 by rpki-client