Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json)
Hash identifier: uiA6QJXN+00EwomMVR7cl4E4gTyPWk+DBLh5VOV1yBA=
Subject key identifier: 82:10:A6:88:2E:EC:95:98:54:0A:29:F8:CF:A4:E7:94:E8:E7:B2:64
Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Certificate serial: 0195127E3040C5FDCDCF79A900CB7ED89490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 06:00:14 +0000
Manifest this update: Mon 17 Feb 2025 06:00:14 +0000
Manifest next update: Tue 18 Feb 2025 06:00:14 +0000
Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: E0rqvUGA9XmH4oT0dczKZd92ht0zLf42Z7F9vh+hbRM=)
2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:30:40:c5:fd:cd:cf:79:a9:00:cb:7e:d8:94:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180
Validity
Not Before: Feb 17 06:00:14 2025 GMT
Not After : Feb 18 06:00:14 2025 GMT
Subject: CN=8210a6882eec9598540a29f8cfa4e794e8e7b264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:86:4c:4f:4f:7d:a6:82:9f:5f:4c:0c:4f:
76:78:8f:76:e1:33:92:c2:a2:28:af:19:5b:10:1a:
f7:06:6e:fe:bd:ae:ba:8b:a2:4e:0b:d3:f4:0e:4d:
f0:f8:82:b7:7b:44:d2:97:ab:0b:12:48:88:6e:87:
4d:25:06:46:80:ff:af:ab:94:4e:72:46:24:40:d1:
f4:93:c3:29:be:2a:19:6e:d1:13:2f:12:70:ea:ca:
a0:c0:d9:03:e3:bf:c2:04:4a:8e:34:73:88:d3:f1:
19:54:77:ca:cf:55:f8:4f:8c:9b:3b:24:35:51:20:
a8:64:d8:31:ee:b1:b6:47:20:fb:c9:02:c2:29:73:
39:8b:36:88:1d:12:38:34:fb:d4:ac:ea:28:7b:a3:
48:7a:47:09:94:00:8d:7c:e4:8d:d0:8a:c0:6d:d2:
a6:b8:8f:c9:b5:13:1d:9b:fe:0e:c7:fe:b5:d4:91:
c8:0e:9a:e9:2e:18:4c:39:82:e9:0d:3f:8a:4f:64:
77:66:ed:40:1f:d4:cf:87:fa:3f:10:f1:6b:45:37:
65:65:16:eb:31:23:c1:03:f1:08:ec:a0:6c:85:eb:
41:73:fd:d0:83:08:1b:55:8d:b4:7a:46:b2:6f:91:
e9:1e:03:b2:2b:da:2b:7f:99:77:6a:88:dc:19:d8:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:A6:88:2E:EC:95:98:54:0A:29:F8:CF:A4:E7:94:E8:E7:B2:64
X509v3 Authority Key Identifier:
keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1e:11:fb:6e:36:5f:6e:cc:24:ad:00:5d:6c:7e:4c:9a:65:
3a:4c:87:f9:e4:a2:2e:de:fa:fa:ef:71:e9:2c:9e:1b:f9:1f:
ae:fa:64:60:ae:52:17:75:4d:87:01:d5:f1:d7:d1:38:4b:3a:
45:b5:be:b1:01:1d:29:cb:5d:2b:7d:0d:10:ff:79:e3:04:dd:
60:1d:31:08:4f:92:e3:42:52:00:d7:09:07:54:60:97:0c:c3:
fb:5d:74:d4:26:54:d4:b5:51:25:57:cb:45:85:65:10:50:b0:
ee:85:9c:24:27:54:bb:88:93:7c:71:30:ad:9f:7c:75:73:d0:
e3:26:56:3e:24:9b:53:56:94:a5:17:93:c4:fb:d8:b5:a5:4d:
c2:ff:ee:fd:f3:7c:cf:23:09:a6:09:fc:0d:05:a0:b4:49:74:
9c:65:72:fe:a3:4b:dd:42:8e:37:cb:06:f8:e6:20:2c:ff:33:
62:8d:3d:01:f0:5d:96:ea:dd:bf:d3:80:76:de:bb:a9:35:12:
43:4e:58:59:c3:59:2b:c9:7a:1c:9f:e0:df:1e:51:3d:43:42:
2b:2f:7b:fe:70:8e:26:6e:72:6b:98:f5:5a:95:a6:07:81:f7:
e6:09:6c:4f:de:27:32:76:b1:a0:32:83:07:33:8b:6a:b8:17:
0a:5b:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:22 2025 by rpki-client