Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File: BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier: RypDMtfhfNK+YIXXle2KIh96IGIWixdgE/wd28qGlRg=
Subject key identifier: 89:49:9A:EB:01:DF:41:59:1E:D4:C7:AB:6B:1A:E0:BE:BB:4B:28:FE
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer: /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial: 019510C705A1E14485877E7C036C1DF47B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number: 0788
Signing time: Sun 16 Feb 2025 22:00:33 +0000
Manifest this update: Sun 16 Feb 2025 22:00:33 +0000
Manifest next update: Mon 17 Feb 2025 22:00:33 +0000
Files and hashes: 1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: 2tVTkWGFE54lZokFSjwvtS2reBtvWeXSVQy3oFRFshE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:05:a1:e1:44:85:87:7e:7c:03:6c:1d:f4:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Validity
Not Before: Feb 16 22:00:33 2025 GMT
Not After : Feb 17 22:00:33 2025 GMT
Subject: CN=89499aeb01df41591ed4c7ab6b1ae0bebb4b28fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:e5:fb:31:77:9a:94:e3:c7:3b:1f:1c:03:
a2:e3:dc:ab:ef:f8:05:35:36:3f:38:2f:27:b1:61:
a4:f3:6a:b1:8d:f0:93:e5:ef:06:9d:25:fc:2d:8e:
31:53:55:f2:92:17:97:23:1a:06:35:91:be:72:4d:
76:5e:d3:f0:03:c4:76:a0:85:44:5c:c5:77:44:e4:
92:73:1c:fe:07:8e:15:ea:06:6c:2c:6c:00:f3:9c:
92:17:a3:36:54:14:65:f4:bd:33:03:4f:16:79:df:
be:0d:08:f4:ba:fe:85:23:22:7d:61:fd:ab:c9:1c:
cf:a1:35:12:9b:a6:02:5f:a2:c1:3a:92:ad:9b:fe:
99:33:e7:ef:1e:4a:45:b2:d1:97:be:86:4b:e4:f6:
4c:9e:69:8b:04:ae:d0:8c:1b:d9:34:9d:ed:f4:19:
f3:59:c4:98:e9:0a:ac:ae:b0:0a:32:e9:a4:bb:d3:
37:34:83:82:c5:2c:31:ec:97:75:09:7d:4e:d7:47:
78:f8:0c:07:98:df:bb:5e:5d:77:2a:a9:ab:d7:ea:
68:f7:2d:5d:fb:dd:7c:f0:d2:c4:a8:4b:51:1e:a0:
d0:74:01:49:b6:a3:2e:a0:0b:4d:d5:46:28:8b:7c:
02:d5:ad:5c:e2:ea:b1:21:25:f1:59:16:ee:ea:c5:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:9A:EB:01:DF:41:59:1E:D4:C7:AB:6B:1A:E0:BE:BB:4B:28:FE
X509v3 Authority Key Identifier:
keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:f2:df:57:2c:d3:6a:43:ba:fa:cc:35:9a:52:3f:15:b4:
68:93:18:06:c3:33:72:2b:0c:c9:f8:9e:f0:ea:56:89:3d:bf:
25:c3:1b:62:73:8c:0f:d8:73:64:d0:e6:39:72:94:10:19:bc:
a1:ea:8a:b3:17:86:ee:24:ee:53:c1:6c:ae:76:5e:74:fa:f7:
2c:c5:76:ac:08:64:3f:38:27:19:61:9a:24:4d:1a:57:27:4b:
71:bb:10:38:00:bd:de:6a:22:45:f9:47:3d:5a:6f:37:51:93:
ea:0a:92:05:22:60:f1:db:75:d9:f8:ca:c0:d0:95:8b:f1:7f:
0f:84:f1:54:31:39:b7:7c:6d:fd:22:a1:a3:16:0a:b4:7e:74:
6e:17:dd:10:7b:76:0b:6d:03:a0:8c:61:10:c7:ba:b0:ba:0c:
a9:f9:79:cf:73:bc:f0:07:6a:0f:e6:af:43:c4:70:d1:ea:27:
0c:a8:45:0f:bc:e0:92:d2:a4:94:62:fb:aa:24:11:ae:14:20:
e9:67:e4:5d:11:95:9a:c0:d4:27:cf:31:6f:2c:36:a6:25:51:
dc:9b:d3:b2:1c:16:53:92:91:c2:bb:92:80:81:09:5b:66:09:
6f:32:af:95:a6:1e:d2:a8:c0:bb:bd:31:a8:53:ca:ff:73:89:
16:25:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:23 2025 by rpki-client