Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: 9xOfITiupMPLak4epAQ9c9g+culGKQ3YHwd89H2M1+w=
Subject key identifier: 0E:68:0B:52:3D:7E:9C:89:B1:D7:24:E8:8E:04:73:1B:BF:43:20:7F
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 019511A2FD5472BE5229E72312FADFD85CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 038A
Signing time: Mon 17 Feb 2025 02:00:49 +0000
Manifest this update: Mon 17 Feb 2025 02:00:49 +0000
Manifest next update: Tue 18 Feb 2025 02:00:49 +0000
Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: GSDiuyqahGny4mPWYjJnKzTYZzswgjz1AYW1dPhwZGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:fd:54:72:be:52:29:e7:23:12:fa:df:d8:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Feb 17 02:00:49 2025 GMT
Not After : Feb 18 02:00:49 2025 GMT
Subject: CN=0e680b523d7e9c89b1d724e88e04731bbf43207f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:a0:e8:c8:09:00:87:25:54:a0:e9:1a:82:
07:f0:c3:47:f9:e1:91:4b:41:91:8c:75:86:b7:20:
af:fe:3f:c8:bf:31:c6:75:ab:e9:76:a0:fa:5c:d9:
5f:08:5f:f7:7d:7c:0a:ae:c9:c0:1b:de:f5:d1:1c:
3a:e4:d0:81:31:40:79:75:6c:f3:ff:79:f8:e8:16:
3a:d8:f0:6f:50:d3:aa:e8:62:fb:3b:c8:88:5f:bd:
91:80:81:55:65:97:17:0a:fa:80:60:6b:f1:53:24:
07:77:a9:1d:96:60:e7:b2:92:0a:a8:a4:36:e2:2f:
20:86:85:af:c9:26:2e:72:4f:06:fc:02:1d:d4:59:
7f:3a:7c:32:62:de:0d:ac:0d:e0:a2:66:eb:b6:99:
b7:d1:fb:d4:29:ba:33:a4:bd:6a:69:ec:1e:dc:b1:
37:7d:ab:0b:3e:b1:8b:e1:31:8f:72:53:06:f5:a9:
17:1e:26:f4:b9:11:d6:ef:41:c7:38:22:15:d4:3f:
12:f5:34:d3:0c:d7:18:50:88:58:02:e7:3b:e7:32:
ce:d6:af:17:e3:64:87:d1:c5:b2:81:fd:d5:af:6d:
9e:a6:2c:92:30:60:b5:2b:a6:ed:90:ad:77:bd:fb:
ae:c8:22:d3:66:19:7f:da:13:e7:18:75:17:7e:70:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:68:0B:52:3D:7E:9C:89:B1:D7:24:E8:8E:04:73:1B:BF:43:20:7F
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:38:bc:cd:14:e4:3c:14:3b:2c:0a:31:59:ec:04:e6:a2:da:
b3:41:7d:cf:58:16:1e:86:a9:8c:ba:e0:ce:12:f2:67:9b:8f:
22:28:bd:22:bc:c2:31:92:f1:a1:69:8a:bf:9f:24:1b:84:86:
a6:20:8a:9b:86:73:9c:12:5f:f8:88:e1:75:5b:3f:b9:dc:94:
5a:17:c2:3e:37:fd:e1:38:80:52:4c:d2:99:45:ed:06:07:71:
d7:ff:80:24:53:88:95:fd:c6:6c:39:d8:64:ec:fa:95:eb:be:
34:07:e6:40:3d:be:e8:ad:98:04:03:c0:c5:50:5f:df:2d:fa:
32:3c:ab:d0:24:13:84:4c:a7:53:c5:4d:a2:af:90:90:f6:7a:
b5:b8:24:fd:0f:02:d0:61:87:b2:3d:48:00:a0:60:0b:14:ae:
cb:7c:43:a8:bb:f3:5b:f9:63:4a:c9:9c:c6:6b:51:37:8c:cd:
c0:83:ba:7f:2d:7d:2d:c3:0b:23:9d:4e:d1:0a:9c:73:06:62:
bf:58:68:7a:3a:b8:12:80:49:d8:e4:70:4c:fd:6e:4c:a4:8d:
ab:c3:a7:59:2e:e6:2c:74:c1:07:b3:c9:e4:4b:56:77:ea:63:
b8:83:c0:47:4c:f7:83:c2:32:2b:92:a5:80:e5:67:06:f7:21:
31:5c:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:40 2025 by rpki-client