Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: Y7nhHQ63EcudQLCNkjatRNdNcv1vdOvDqlN4iqMDR6A=
Subject key identifier: 82:99:56:EB:94:3E:4D:06:BE:7F:BF:DE:13:16:9E:2A:70:BF:95:C4
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 019511D96D11E16CC2CD1CA52B03A9E72EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0C56
Signing time: Mon 17 Feb 2025 03:00:16 +0000
Manifest this update: Mon 17 Feb 2025 03:00:16 +0000
Manifest next update: Tue 18 Feb 2025 03:00:16 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: RqX18gbwwhFTYDCCAmLAYhbPEvsgvSBKDg0FeevshIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:6d:11:e1:6c:c2:cd:1c:a5:2b:03:a9:e7:2e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Feb 17 03:00:16 2025 GMT
Not After : Feb 18 03:00:16 2025 GMT
Subject: CN=829956eb943e4d06be7fbfde13169e2a70bf95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:a0:83:a8:a8:eb:df:42:1c:3b:ac:7b:01:
63:82:7f:b7:04:1e:8b:92:22:bc:f9:1b:c4:c2:11:
b4:5a:5f:5f:ff:12:19:2b:ed:88:47:8c:13:b7:f2:
07:a7:2d:17:64:ea:69:a4:eb:82:03:e8:c0:f6:9e:
82:e4:6e:9a:ab:50:c8:d5:d3:94:d9:35:db:f6:ca:
5a:c4:63:e6:d8:27:a4:b8:8f:68:5f:81:a5:d6:ed:
60:c7:50:65:3a:a8:59:e1:b7:46:11:29:0b:73:7d:
51:ae:af:8b:93:05:b0:b3:bb:56:36:63:cc:9e:35:
af:6d:10:19:a7:17:3c:af:47:72:3c:e1:d0:c9:7b:
82:b6:13:d4:0a:7e:77:aa:6a:59:23:b3:8e:84:ee:
ea:6a:e0:7e:e2:56:cc:94:af:f4:23:a4:d4:5c:2d:
d8:d4:1d:d9:d6:39:a8:f0:bc:b9:1d:71:0c:f2:2e:
af:b9:44:94:08:b0:97:57:14:43:12:d8:c6:cf:8b:
17:e9:ec:3d:dd:47:38:ff:4c:1a:26:96:37:e4:5d:
ac:74:e1:e4:81:9c:02:f0:93:31:62:7e:a1:d3:15:
2d:b3:77:ae:9a:bd:c3:7f:77:82:4b:f4:71:46:7c:
f2:7d:53:9e:92:82:67:8e:d4:91:5d:ba:8d:26:a3:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:99:56:EB:94:3E:4D:06:BE:7F:BF:DE:13:16:9E:2A:70:BF:95:C4
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f0:76:c9:66:a6:df:d6:68:f9:90:95:e7:48:9c:ec:ee:7a:
16:d0:03:4a:76:1f:88:b4:b9:79:87:2d:2d:19:66:15:da:65:
19:7c:fc:c3:25:4c:28:1d:c8:2c:72:23:8c:19:77:de:39:82:
3b:51:1a:2e:3b:f3:47:9a:69:f7:25:60:a7:27:8c:7c:7b:dd:
6f:81:72:1f:f6:c5:08:5c:a2:a3:c4:b3:59:2c:bf:b8:0b:04:
05:c7:8e:ce:73:e2:90:ff:23:6c:f0:f8:54:02:3e:0a:ad:be:
97:d3:c4:5b:55:c7:00:e9:b7:b8:96:dd:7e:84:86:80:28:0f:
85:ac:47:d0:ef:05:68:88:8f:91:12:b6:1a:bf:e1:c8:fd:4c:
26:20:b8:a2:6c:b5:58:bb:96:d1:67:c5:db:21:6f:30:d6:eb:
ed:db:bd:4e:04:11:ea:95:8f:03:ea:8d:a9:70:a6:94:2f:21:
4f:ec:49:b8:42:ff:f2:28:d2:3e:12:b0:b6:30:22:69:c1:5b:
29:7b:46:89:18:e8:47:c3:0a:7d:37:21:3f:85:21:16:5b:a8:
61:97:49:a7:3e:34:3a:50:23:13:92:dd:f3:18:4e:2d:6b:7b:
80:f7:80:27:ee:9c:13:15:58:26:28:65:94:5f:bb:d2:3b:62:
c5:aa:e5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:06 2025 by rpki-client