Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: SUvKy28g2glKXOEnIulhPQ6tn2KiEqO9ANdC9UfBdBs=
Subject key identifier: B8:F2:7F:29:7B:16:44:3A:7A:2E:38:99:D9:A8:9E:84:0D:83:15:5E
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01951134E1B8A3FD2A722E0A9E47765A0A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:33 +0000
Manifest this update: Mon 17 Feb 2025 00:00:33 +0000
Manifest next update: Tue 18 Feb 2025 00:00:33 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: O5uoIERYueDpfNt9JVDr1xliXQ/HzVTnLnp0jWRb2DE=)
2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e1:b8:a3:fd:2a:72:2e:0a:9e:47:76:5a:0a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Feb 17 00:00:33 2025 GMT
Not After : Feb 18 00:00:33 2025 GMT
Subject: CN=b8f27f297b16443a7a2e3899d9a89e840d83155e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:62:2a:2d:30:ad:92:b1:ed:2d:71:d5:ac:
a7:d5:90:15:9f:f5:e8:7a:9d:33:68:1a:42:4d:e2:
ff:0c:6c:2e:11:c4:b2:4f:0d:59:8f:f7:d4:aa:79:
93:92:92:c7:e4:89:e5:ea:2d:84:96:fc:41:f7:c4:
c5:ef:f5:2e:5d:2f:27:a5:0e:39:b0:b2:04:54:ae:
c2:1d:24:2b:e0:76:1e:1a:e5:66:a2:75:b1:78:e5:
a3:b7:c1:30:63:67:84:f7:f8:62:18:da:a4:2f:cf:
d5:79:79:a7:48:85:5b:9c:d6:aa:c6:62:ba:2d:bc:
34:9a:fa:b3:17:8a:2a:ef:06:80:c7:44:9c:e0:e7:
9f:53:47:4e:51:77:58:ea:3f:1a:3d:85:c7:c7:fb:
b3:63:65:d8:1b:32:ae:00:73:b1:1f:d3:91:a4:cf:
b8:e5:ff:dc:9b:60:89:78:48:44:8b:fb:43:28:67:
1d:47:f2:f8:94:1d:8f:02:b1:1f:11:7a:99:48:b9:
85:88:fc:e4:99:c9:61:da:53:5f:66:72:28:5e:44:
92:82:60:88:70:0c:f3:61:4b:42:95:03:be:fc:52:
1d:07:5d:41:ef:c1:cb:e1:85:d0:ee:29:69:10:fc:
d6:82:1f:65:2f:1b:49:24:52:5d:66:0b:5e:01:99:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:7F:29:7B:16:44:3A:7A:2E:38:99:D9:A8:9E:84:0D:83:15:5E
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7c:89:0b:fd:f3:db:1b:1d:08:3a:07:62:da:32:4c:a4:e8:
1a:65:ab:b5:2f:07:8d:49:2f:87:e4:43:c5:a5:d4:77:15:1a:
f4:8b:1a:cb:56:74:45:03:ad:bd:b2:94:48:54:c9:c4:08:8d:
4f:f2:bf:18:1c:dc:7e:66:32:3e:4c:f9:6e:af:a3:80:42:a2:
51:51:94:b7:07:0b:b9:73:25:95:4e:de:52:66:ce:15:0f:71:
10:12:67:9a:28:a3:2d:be:a2:88:13:90:85:a5:8d:7c:fd:28:
3e:b2:9d:e0:af:d7:d0:5a:ca:af:fe:e1:4e:6d:0e:1f:c0:e0:
6d:6c:d9:ec:a3:b3:f4:ee:10:8f:fd:68:18:70:12:f1:a2:3b:
23:56:cd:59:0d:6b:9f:d3:1a:69:85:c4:72:07:88:83:3e:8d:
6f:b8:8c:44:fa:1f:a6:84:79:b0:4b:75:d0:fb:4b:2b:6d:07:
58:32:77:94:5d:53:21:94:38:41:68:f5:9e:b6:b4:8b:db:da:
fa:f5:35:49:34:da:b8:97:94:35:cc:e5:3c:99:d1:52:dc:2a:
01:50:78:6f:b2:e4:a3:9a:d4:47:a7:81:10:30:1f:e8:8c:c4:
74:63:34:2f:02:b7:12:45:57:71:5f:cc:ae:22:01:30:19:ac:
c9:bd:21:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNOG4o/0qci4Knkd2WgovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri
OWJkZWEwHhcNMjUwMjE3MDAwMDMzWhcNMjUwMjE4MDAwMDMzWjAzMTEwLwYDVQQD
EyhiOGYyN2YyOTdiMTY0NDNhN2EyZTM4OTlkOWE4OWU4NDBkODMxNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5iKi0wrZKx7S1x1ayn1ZAVn/Xo
ep0zaBpCTeL/DGwuEcSyTw1Zj/fUqnmTkpLH5Inl6i2ElvxB98TF7/UuXS8npQ45
sLIEVK7CHSQr4HYeGuVmonWxeOWjt8EwY2eE9/hiGNqkL8/VeXmnSIVbnNaqxmK6
Lbw0mvqzF4oq7waAx0Sc4OefU0dOUXdY6j8aPYXHx/uzY2XYGzKuAHOxH9ORpM+4
5f/cm2CJeEhEi/tDKGcdR/L4lB2PArEfEXqZSLmFiPzkmclh2lNfZnIoXkSSgmCI
cAzzYUtClQO+/FIdB11B78HL4YXQ7ilpEPzWgh9lLxtJJFJdZgteAZkv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjyfyl7FkQ6ei44mdmonoQNgxVeMB8GA1UdIwQY
MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt
Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx
LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXyJC/3z
2xsdCDoHYtoyTKToGmWrtS8HjUkvh+RDxaXUdxUa9Isay1Z0RQOtvbKUSFTJxAiN
T/K/GBzcfmYyPkz5bq+jgEKiUVGUtwcLuXMllU7eUmbOFQ9xEBJnmiijLb6iiBOQ
haWNfP0oPrKd4K/X0FrKr/7hTm0OH8DgbWzZ7KOz9O4Qj/1oGHAS8aI7I1bNWQ1r
n9MaaYXEcgeIgz6Nb7iMRPofpoR5sEt10PtLK20HWDJ3lF1TIZQ4QWj1nra0i9va
+vU1STTauJeUNczlPJnRUtwqAVB4b7Lko5rUR6eBEDAf6IzEdGM0LwK3EkVXcV/M
riIBMBmsyb0hqQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:16 2025 by rpki-client