Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: yMTU5zvGXr4DW+XU/X3fsgCe/eEMfmJ/PhMhhb+S5C4=
Subject key identifier: D9:6D:0A:55:C1:70:AA:C2:DA:47:8A:32:8B:59:25:0D:5D:FE:56:DF
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019511A27EFED404BD8051EEB09A83669056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 04CD
Signing time: Mon 17 Feb 2025 02:00:16 +0000
Manifest this update: Mon 17 Feb 2025 02:00:16 +0000
Manifest next update: Tue 18 Feb 2025 02:00:16 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: jF6/IKBY9r4QSzvArepfO0SVpoRiLpugWa93zWK94/E=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:7e:fe:d4:04:bd:80:51:ee:b0:9a:83:66:90:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Feb 17 02:00:16 2025 GMT
Not After : Feb 18 02:00:16 2025 GMT
Subject: CN=d96d0a55c170aac2da478a328b59250d5dfe56df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:d6:e3:fa:1d:94:0c:d8:e7:3f:46:92:f2:
65:4c:75:02:15:47:dc:14:76:89:01:3f:b9:a4:e5:
eb:90:f3:6d:73:06:48:5f:39:24:a8:a1:c0:5c:93:
f6:0f:62:a9:ab:c6:48:60:0e:7b:1d:ff:1e:87:db:
36:70:2e:0e:e2:e2:ed:ae:37:c2:1d:e2:3d:9a:20:
a0:06:6e:d7:ca:12:90:af:6d:b5:9f:ba:b2:09:83:
62:ab:88:43:c1:a5:21:ea:05:d7:a1:b2:07:d1:41:
4b:af:0b:0f:ea:36:4b:f9:58:99:26:b2:8a:11:63:
88:56:8c:a2:88:3a:2a:6f:ea:51:81:f0:11:e2:13:
9f:05:4f:fd:f3:5c:33:80:59:e3:58:73:8b:06:08:
ea:9b:f7:a0:07:64:92:69:4a:7b:ad:e3:04:73:8f:
8a:de:70:d7:c2:a1:1c:f9:eb:5c:eb:ad:f8:9e:b0:
bb:93:1d:a1:a2:c6:29:5e:a6:97:24:0f:7a:7a:24:
ae:9e:16:41:a8:4e:17:fb:66:6e:18:a2:22:ed:ce:
40:f2:83:bb:4a:7c:e4:70:95:30:c8:dd:9f:30:1b:
58:ba:b0:77:09:15:19:38:9d:cf:af:71:06:31:a0:
0c:ea:52:02:e4:48:9c:19:f8:cd:76:2c:f9:bb:8c:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:0A:55:C1:70:AA:C2:DA:47:8A:32:8B:59:25:0D:5D:FE:56:DF
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b3:1b:e9:63:f4:cf:2f:75:62:c4:e0:bc:ea:d0:5b:8f:10:
be:28:9c:df:9e:c6:24:6e:21:d8:21:c4:55:ca:5a:65:27:8f:
a5:00:3b:09:53:b5:a3:6d:cc:d7:1f:ad:b8:17:d2:e9:c0:a2:
97:4d:07:8c:80:fc:eb:b5:05:7a:69:61:c9:8a:93:16:ce:6d:
29:d1:e5:60:d1:a6:f6:08:dc:3d:68:9c:29:11:21:fe:81:97:
07:3e:0a:e3:81:dc:f1:ac:bb:0c:b3:2c:2f:88:6e:ee:c1:3c:
58:a7:ec:a1:78:03:62:f4:65:43:df:56:50:80:6b:cf:7a:e1:
8b:71:d3:ec:f6:89:6e:5f:f4:97:85:79:03:3c:68:b2:80:6e:
67:1e:6b:08:de:62:6c:ac:3d:f8:33:23:6c:3e:73:17:f1:95:
33:f5:29:c7:96:bf:23:ae:c7:7c:31:7b:37:be:34:3c:72:b9:
37:e7:01:b2:84:66:ff:d5:e1:49:9d:50:30:25:a6:c7:a5:a4:
18:fb:67:df:1f:78:90:a6:f9:e0:f6:6d:1a:d9:2b:a3:83:56:
ec:34:fa:1d:fe:62:78:25:de:fb:12:d0:4b:08:2b:75:1b:99:
76:85:33:ef:09:44:89:04:6c:d4:b5:af:b8:de:e0:aa:a6:6b:
7e:f8:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:01 2025 by rpki-client