Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: MYmKlba+kv/ZA94w6Vdqi8Le3b8URtnpGGK74Na5XQ4=
Subject key identifier: 96:81:B0:E3:E7:79:CB:89:50:D7:AC:94:D1:A9:BA:91:EF:A3:97:EC
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 0195113500D05E1619D66E44E014EC20C9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0B36
Signing time: Mon 17 Feb 2025 00:00:41 +0000
Manifest this update: Mon 17 Feb 2025 00:00:41 +0000
Manifest next update: Tue 18 Feb 2025 00:00:41 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: vfrTFlW3F5mFPsTosHcUR16jcRu+lAEAkqj0L+9nRWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:00:d0:5e:16:19:d6:6e:44:e0:14:ec:20:c9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Feb 17 00:00:41 2025 GMT
Not After : Feb 18 00:00:41 2025 GMT
Subject: CN=9681b0e3e779cb8950d7ac94d1a9ba91efa397ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:72:61:4b:b0:41:db:02:44:74:1e:89:1f:
74:d1:e1:4e:82:05:8d:fb:a9:58:e9:c6:b6:92:b1:
9c:48:27:62:25:8f:87:73:3b:be:cf:5a:3a:0c:6b:
1e:78:68:31:3a:35:71:e0:66:30:43:93:dc:b8:ba:
0a:3c:69:f2:b1:6a:98:49:74:7b:b8:9f:ae:e3:75:
34:94:3d:ad:9e:ba:ac:8b:a1:0e:f0:58:fc:f3:ee:
b4:60:ba:aa:07:fe:f2:e1:51:0f:0c:4c:97:9c:ae:
43:43:b2:2b:f6:f9:c0:d9:95:a0:8d:59:ee:3c:6a:
c3:47:99:8f:eb:b5:16:cb:f6:b4:58:10:3b:13:2e:
72:a3:ec:50:0c:5f:12:4d:2e:b0:97:92:ff:2e:72:
f4:25:ac:a8:c5:4e:35:87:b7:c5:30:17:d2:35:34:
c4:f3:11:7e:ed:67:90:7d:0f:ff:74:d4:0e:23:54:
aa:d2:04:7f:ba:0c:69:47:cc:f2:76:f1:e6:f6:11:
db:32:16:b8:50:5c:55:fc:33:24:54:e8:6f:d1:ec:
2a:f7:d9:43:f9:82:c5:8c:dd:5e:07:47:a5:bc:5a:
31:4e:7d:66:7c:66:2a:1e:18:22:66:c0:fc:8c:90:
03:3d:5a:d6:22:4a:c3:ef:01:39:e6:a6:19:3b:27:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:B0:E3:E7:79:CB:89:50:D7:AC:94:D1:A9:BA:91:EF:A3:97:EC
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:8e:ee:7e:6d:84:bc:c6:e4:01:72:23:2a:a3:29:f5:9e:
76:6b:f9:87:b8:b0:cf:03:0d:f9:97:9c:ff:37:7d:31:e9:0c:
88:b9:4b:88:f1:7c:a8:2c:6d:e8:17:65:d9:4e:1a:af:35:31:
95:f0:ce:69:4c:2c:06:fa:c3:ab:50:d1:6a:2a:99:b6:1e:9d:
f0:ed:67:0e:5a:b4:20:59:a6:3b:2c:39:4f:d7:86:18:f3:d0:
9a:1c:9e:74:b6:db:89:cd:1c:5d:e0:f6:45:74:97:b4:b5:db:
7f:f0:9e:44:86:93:89:e6:32:6d:0b:67:0a:fc:e1:75:1f:08:
f5:5b:3c:b4:39:ce:fc:36:6f:82:ef:7c:9b:ac:7b:70:06:91:
b4:81:f0:4f:8f:56:8c:b3:84:ff:3a:79:9e:01:5e:74:23:f1:
24:00:52:0d:34:e5:22:b9:e0:4f:d5:12:05:cf:5c:71:8c:cf:
2d:62:77:3b:dd:d9:82:7f:3f:ba:e4:5f:b6:cb:18:14:38:24:
74:6d:b8:9f:fd:49:e4:a1:b4:f5:f5:6e:13:52:e4:f8:d4:b3:
76:52:a0:f3:08:ea:36:35:28:e3:c1:2e:cb:c4:65:37:97:a9:
79:8a:3f:9d:42:c9:47:87:f4:fd:02:9e:f3:74:36:cb:f6:8c:
d7:79:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:32 2025 by rpki-client