Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: tcWo3TJvLz0+QNHab8oa9yGYoJZ8iLM7wPaGrcCP488=
Subject key identifier: 7D:56:89:A9:58:CB:B1:E9:C7:D8:D8:E2:57:0B:3F:54:87:73:19:96
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019511D98C7382805AD7225C8571193FB0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 05B1
Signing time: Mon 17 Feb 2025 03:00:24 +0000
Manifest this update: Mon 17 Feb 2025 03:00:24 +0000
Manifest next update: Tue 18 Feb 2025 03:00:24 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: PRI6/dZ8FAN5aKYACsFeY8V9LBE5n21CoWm0xo3uq1M=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:8c:73:82:80:5a:d7:22:5c:85:71:19:3f:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Feb 17 03:00:24 2025 GMT
Not After : Feb 18 03:00:24 2025 GMT
Subject: CN=7d5689a958cbb1e9c7d8d8e2570b3f5487731996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:14:e0:19:77:4d:ee:0f:9e:ac:2d:37:e1:
62:47:a5:15:9d:8f:fa:4d:80:e6:9c:7a:09:0a:ba:
d3:ae:e3:c1:3b:c9:48:1b:3f:a7:b0:07:f1:86:25:
2e:4a:f4:0a:2b:21:ee:6c:53:e5:65:26:b0:b5:60:
65:09:83:26:9c:e3:ec:61:74:c3:10:37:c2:e4:08:
e9:cd:82:f1:61:ed:67:5b:54:0b:ec:71:c9:cb:33:
22:6b:1a:3b:26:3c:d3:79:73:1f:cc:57:59:e2:3e:
6d:b3:79:7e:a9:96:1a:ef:4f:e8:e3:26:3f:a0:1f:
4f:85:5c:86:98:83:36:e2:db:08:fe:27:41:bb:fc:
8a:e4:ac:df:7b:61:91:40:02:68:f9:48:bf:0c:4e:
84:12:82:e5:64:c5:d0:b1:73:20:b5:42:fc:44:3e:
67:67:da:71:c8:2b:e5:5f:9e:2a:83:30:91:6b:94:
c0:76:e0:16:65:9f:c8:35:f1:df:ef:01:7d:27:0b:
50:24:2d:b4:54:35:87:c1:78:57:c6:5b:20:25:d8:
0f:46:50:f8:e9:22:2a:8a:f9:e7:ac:e7:29:e2:07:
e9:9e:99:0c:cd:a0:ff:39:15:8a:c4:a1:97:5a:5f:
54:d1:5a:b1:59:2f:30:20:8c:4c:bc:cf:6d:17:04:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:89:A9:58:CB:B1:E9:C7:D8:D8:E2:57:0B:3F:54:87:73:19:96
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f2:b8:35:b6:28:06:3d:8d:70:94:df:7c:a2:05:94:da:1d:
17:5a:a0:fa:f1:2f:42:ea:3e:31:32:c3:6c:26:b1:b2:f7:ee:
33:d0:d1:52:12:7b:ca:36:2d:21:17:d2:20:8e:78:6f:1e:9e:
57:fc:3c:53:c9:83:75:36:4a:37:6d:fd:00:db:13:dc:2f:a0:
f7:c8:d9:39:06:c2:05:e8:97:75:6b:0c:4b:e1:cd:04:34:71:
18:17:1a:d7:d6:be:79:c6:a9:36:a2:07:ca:bc:1e:9e:3c:39:
1d:c0:32:35:a5:3e:33:7f:25:c0:38:c0:01:0a:b5:a5:5e:19:
01:ea:6d:fb:a2:4a:c6:98:a3:54:7d:32:0a:1c:eb:8d:4c:c5:
7d:69:fd:ec:d9:4e:4b:1c:95:6d:01:9c:c9:b4:ca:1b:65:9a:
32:b7:d3:76:2e:7e:39:25:f6:6d:51:77:a0:71:4c:f7:4e:d6:
f7:db:c8:62:78:8a:e0:70:a4:96:2c:a4:12:65:2f:e9:3d:19:
a0:db:50:31:2a:8e:1a:c6:41:0a:15:d8:5a:7b:e1:ef:e8:5b:
0c:46:ca:61:68:49:7b:d5:5c:c7:1e:3a:62:4f:d3:11:da:96:
47:a7:11:cc:f1:70:0d:73:48:f1:2c:dd:2a:58:8f:d1:18:2e:
cb:5f:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:34 2025 by rpki-client