Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json)
Hash identifier: 0HsNHheX7q95CUZjQVK2QkeTqij9yCrq9V99E4WOvM0=
Subject key identifier: 6A:38:5A:BB:3A:7C:A6:91:73:70:E7:DA:2A:22:F9:C1:D4:0F:90:CF
Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Certificate serial: 01951135614AFEB777720D3AAA5FC30C9DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:01:05 +0000
Manifest this update: Mon 17 Feb 2025 00:01:05 +0000
Manifest next update: Tue 18 Feb 2025 00:01:05 +0000
Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 6VMHIFKBYoA7jsNrfbkiMV8fNfDngu2Qo/tEjTyUWIE=)
2: h5hkogAm1tMHtJhfME4RZjDHuf4.roa (hash: RP4fFeHsjDtuvEjbGy1zv2SpMtLitRmpW5FaeuzZl5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:61:4a:fe:b7:77:72:0d:3a:aa:5f:c3:0c:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8
Validity
Not Before: Feb 17 00:01:05 2025 GMT
Not After : Feb 18 00:01:05 2025 GMT
Subject: CN=6a385abb3a7ca6917370e7da2a22f9c1d40f90cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:20:55:5a:ff:73:d2:93:8f:48:3d:08:33:
25:54:fc:0d:0c:82:05:a1:77:9e:4e:fe:2c:f6:e1:
38:ef:e1:a7:ee:0f:13:3a:1d:7f:fb:f3:60:b0:5c:
5b:a4:8a:0e:bc:32:dc:ee:39:bf:bd:8c:f6:db:25:
ae:5a:a7:f7:87:85:12:a7:3c:66:73:05:a9:7e:f2:
d8:86:0d:b6:80:d1:77:04:0a:a3:f4:27:1e:0c:69:
21:5e:a6:e9:3e:57:7d:5e:ef:9e:8b:7a:38:71:9c:
9b:51:22:85:a4:b3:78:4d:41:80:12:d6:fd:48:83:
b0:de:00:c7:25:11:74:ac:30:18:9e:de:0a:38:f1:
36:1f:b3:e5:5a:00:30:5b:ce:d7:7c:3c:5a:ef:38:
bb:49:5a:37:cd:5a:8d:53:5f:28:e3:7c:69:bc:5b:
ed:7e:2f:77:f6:fc:82:68:1b:6c:9a:f7:48:9e:ed:
7c:e2:ff:12:5b:be:d5:5c:39:26:2b:89:ea:77:17:
8b:81:27:7e:42:d1:38:34:dc:ce:30:79:62:37:8e:
fa:35:89:0c:2f:cf:f2:37:5f:99:15:e5:ee:5a:62:
a9:f2:26:04:50:12:83:6e:26:8d:85:c0:5a:c9:ea:
be:54:25:f1:04:de:76:62:ac:a9:96:d0:25:23:8c:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:5A:BB:3A:7C:A6:91:73:70:E7:DA:2A:22:F9:C1:D4:0F:90:CF
X509v3 Authority Key Identifier:
keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:25:bb:ca:e5:9b:83:ca:dd:a7:e9:a0:4d:f4:8c:6d:cf:
d7:d6:cd:84:b6:ae:8e:cc:1b:91:92:e5:bc:d2:36:44:22:cb:
99:b8:38:18:0d:5c:bc:28:03:dc:11:1d:3c:ae:cf:6e:d0:5e:
20:04:c4:14:0e:2b:be:43:7d:e0:6e:0a:89:25:1f:46:09:6a:
42:21:d9:d5:53:92:31:81:5f:7d:2a:1c:42:1b:8d:2b:c7:b1:
c4:62:2d:55:1c:6b:23:65:8e:4b:89:df:f8:2e:89:2e:df:e0:
4c:3f:24:ee:32:61:18:c0:ee:42:d6:bf:a9:43:b4:d1:08:b9:
c1:91:84:24:bb:f2:4c:84:81:a8:44:81:9c:2a:82:a7:d1:15:
cd:00:45:02:0a:45:37:06:8f:ec:75:22:f4:71:ed:70:2e:2e:
1b:d9:01:75:24:e2:33:3a:88:21:41:84:a8:96:0f:c6:c8:7b:
19:f4:f8:a3:73:17:39:eb:97:6f:f0:78:5a:62:6f:23:a4:00:
26:ef:85:8a:f7:91:69:e2:8b:98:86:66:fa:60:88:85:30:77:
36:e8:ae:16:d6:2c:2c:16:8b:e2:db:30:b6:63:f6:ac:21:e3:
6b:1e:e4:ac:2e:1f:23:81:c9:0f:b1:e9:71:22:f6:95:14:99:
56:60:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:52 2025 by rpki-client