Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: 8gnN5vbO3Kf1hTcW2mUBJjQrxScJ+dIcQapPYueWjhM=
Subject key identifier: 35:21:15:A2:3F:68:0F:E9:0E:1B:29:AA:80:DA:7D:1A:F3:30:B8:FE
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019512105AFF13794CF69EF4353076F3A6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 0E67
Signing time: Mon 17 Feb 2025 04:00:16 +0000
Manifest this update: Mon 17 Feb 2025 04:00:16 +0000
Manifest next update: Tue 18 Feb 2025 04:00:16 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: Uw3kshclgUwwhXdxfcknjMEjpSRTpjvjl64J62r3g4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:5a:ff:13:79:4c:f6:9e:f4:35:30:76:f3:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Feb 17 04:00:16 2025 GMT
Not After : Feb 18 04:00:16 2025 GMT
Subject: CN=352115a23f680fe90e1b29aa80da7d1af330b8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:d1:61:b3:30:ff:f9:46:63:72:69:00:d9:
cf:25:bb:d6:e3:4c:e0:fc:79:e1:49:4c:21:ed:e8:
65:03:6e:b0:7f:27:2c:12:4a:1e:1f:ec:4c:bd:2b:
30:2e:66:9a:07:45:92:54:26:33:94:c6:a4:f3:4e:
44:b6:fc:29:4c:c5:c2:15:30:e1:58:db:60:b0:f6:
b7:af:3b:f4:6a:ef:15:65:1b:c1:41:6d:72:14:ab:
bd:0e:85:38:60:9d:2c:48:1a:87:6d:26:60:5e:64:
fa:5f:84:5c:b3:5b:94:66:bf:55:0e:a7:34:72:86:
74:0c:8d:f4:2e:4b:c3:cc:54:a6:2c:c9:8a:0f:fe:
f6:f7:5a:94:ca:63:80:01:f7:52:c0:7c:cb:1c:7a:
45:f5:8e:67:e1:a6:9c:40:6a:d7:eb:91:59:f7:87:
15:94:33:ea:5e:a9:b5:27:2c:31:50:22:64:00:20:
d0:89:d4:9d:33:89:81:02:c1:c1:4b:82:f1:85:57:
71:65:bd:ec:f7:4f:e8:b9:0b:cf:c5:4d:0a:a7:69:
e3:20:74:0f:5a:db:b7:99:8e:7b:43:22:8c:c3:3c:
d1:54:c0:08:ef:c3:99:34:f4:e5:39:08:27:de:5a:
d9:9c:5d:be:65:32:f2:b7:a2:55:57:81:3f:19:49:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:15:A2:3F:68:0F:E9:0E:1B:29:AA:80:DA:7D:1A:F3:30:B8:FE
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2c:ea:7c:3e:9d:b3:c7:fa:54:64:e6:42:a7:3d:7a:46:be:
e0:e6:f0:a0:aa:6a:69:74:12:48:5a:8a:33:db:55:1a:e2:cc:
fa:f4:ca:51:b5:52:53:ab:2f:7a:0a:cb:09:56:ed:91:6f:1f:
3c:aa:0f:2d:a8:93:90:94:7e:ad:f7:fe:e2:47:05:95:05:55:
94:c2:dd:ed:0b:22:e6:50:9d:67:cf:38:40:2d:15:43:a9:e3:
d7:4b:dd:bb:2a:e9:3c:04:85:b9:11:2d:49:41:a6:43:28:d7:
ca:f8:6f:1d:52:3c:72:0e:67:ea:70:90:e5:5e:78:02:4a:ea:
a6:c3:1f:3e:42:a5:a5:fd:3b:f3:ab:86:0c:69:59:e6:fd:ef:
45:e5:44:54:3f:6e:34:4a:c5:cd:e4:05:37:f4:2d:c3:fe:cf:
bf:fc:10:f3:ba:ff:c8:91:df:99:13:17:fa:45:d5:34:ef:19:
de:1a:12:72:e1:5e:6c:6a:ee:2a:a0:9c:0f:a4:93:d7:0e:cf:
51:d9:0b:7b:fd:1c:0a:29:f4:3b:17:38:6e:94:cf:0b:f1:6a:
cc:2a:87:be:c7:ef:f1:61:48:b1:71:52:93:6c:b6:c4:de:10:
1b:27:6e:81:c2:59:0e:25:80:7b:d1:38:45:46:bb:16:0f:ca:
34:9a:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:06 2025 by rpki-client