Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: ptmNeu8PEcWq80S63WUZYkjcNCFpJtzz/eOf98C1Pj4=
Subject key identifier: FC:EC:12:D3:51:AD:06:C7:25:C5:3E:81:B8:2D:2A:F2:71:4D:7E:84
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 01962ABCA99B116C3C031A84F1B26F3045AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0834
Signing time: Sat 12 Apr 2025 16:02:09 +0000
Manifest this update: Sat 12 Apr 2025 16:02:09 +0000
Manifest next update: Sun 13 Apr 2025 16:02:09 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: 5SoYjidHy+IqQEetJphOSihEVxOvtL1dGR7LQfQq4Hc=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:a9:9b:11:6c:3c:03:1a:84:f1:b2:6f:30:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Apr 12 16:02:09 2025 GMT
Not After : Apr 13 16:02:09 2025 GMT
Subject: CN=fcec12d351ad06c725c53e81b82d2af2714d7e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:c6:fe:55:a3:a4:2d:9a:98:87:37:41:a3:
f4:8f:e4:26:ba:b4:ac:87:ea:c0:fb:72:7b:3f:0a:
48:7d:17:76:6e:92:33:13:0f:30:d7:19:63:42:cb:
70:7a:5c:59:02:dd:fd:2a:85:5a:b2:2e:a0:94:54:
78:65:44:36:fd:64:34:e6:16:78:7e:5e:cb:1e:6f:
21:20:1b:d5:c1:70:a2:db:b6:5e:30:3f:73:56:56:
e0:fd:9e:cb:ec:d6:1f:26:14:57:2d:6d:82:95:ab:
eb:9c:e4:98:43:68:2b:ad:54:5b:e9:5d:fa:3d:33:
75:4f:da:c1:f6:32:a5:e1:be:72:59:25:b6:40:3c:
1d:d7:ce:79:72:13:53:02:ed:c8:5a:c6:46:6b:85:
32:c1:30:0d:7c:ca:ac:87:98:f3:db:a7:c8:0b:9a:
57:3c:9c:6d:97:d4:c0:a9:fb:10:35:15:e8:8a:41:
ec:51:ac:85:ca:e2:ab:69:91:e6:6a:62:c6:f6:97:
7e:92:12:3a:4a:63:5b:94:f9:0b:02:11:ae:7d:6d:
b7:d8:19:b8:61:f9:56:b0:5d:51:6b:72:f7:e4:94:
29:6a:ad:30:f3:e8:e7:c5:87:4d:ea:0d:2e:17:b2:
b9:9f:57:8e:5a:b6:25:48:80:73:bc:aa:a2:84:d8:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:12:D3:51:AD:06:C7:25:C5:3E:81:B8:2D:2A:F2:71:4D:7E:84
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f0:46:9b:5c:69:a1:84:33:b6:d9:bf:08:57:27:ff:30:48:
fc:b5:5a:36:75:85:17:43:5c:fe:89:61:53:76:9f:2f:06:c0:
c3:f0:2f:22:df:ff:4d:fc:d1:3a:25:d6:c8:00:a2:38:a7:09:
c2:56:36:99:b5:56:30:41:92:6c:43:31:91:a8:73:97:b8:99:
b3:e4:b6:28:66:1c:4f:66:fd:7b:05:30:7b:f9:dc:7e:3b:37:
91:74:3a:8a:4d:f2:f8:34:db:17:61:5e:b1:8e:4e:fd:ac:78:
17:a7:f1:0d:96:ec:01:54:83:e5:ac:21:50:e4:8b:d1:b2:c3:
df:2c:3f:19:fe:15:d3:a0:c3:f5:20:d1:42:5a:62:b4:c7:e9:
61:aa:b9:76:04:58:a5:43:85:56:41:b7:44:78:f3:2a:ce:5f:
31:f2:c5:31:7c:9f:2c:04:d5:df:61:a0:7f:42:d0:d9:66:91:
e0:0b:6a:a3:f2:15:83:f1:4a:fc:8c:3f:e2:3b:01:ba:c2:e2:
84:39:1b:c7:2a:5b:dc:6f:b0:c3:cc:93:b0:ff:7b:5e:1c:74:
22:a6:79:71:87:42:a5:b4:ae:69:0e:9a:ef:b3:d3:48:c0:b2:
70:ba:24:36:14:27:b2:9f:98:68:39:f6:5f:b4:c6:b8:d5:6b:
0b:8f:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:45:50 2025 by rpki-client