Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: iDDhNpLW8ZNeTB+6bPlj5Xsg+zZdArU/h3H3yRLq4oc=
Subject key identifier: 3D:48:B6:49:FE:D4:D8:F6:3D:08:B2:5A:5E:3B:63:ED:F3:E2:7B:0D
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 019511D951A060AD8DDFEDA18438A8841457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0AE8
Signing time: Mon 17 Feb 2025 03:00:09 +0000
Manifest this update: Mon 17 Feb 2025 03:00:09 +0000
Manifest next update: Tue 18 Feb 2025 03:00:09 +0000
Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: 73C3mYiZsNcK4/L/s+BtuLOYrl0cES7Axke+QG9HCO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:51:a0:60:ad:8d:df:ed:a1:84:38:a8:84:14:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Feb 17 03:00:09 2025 GMT
Not After : Feb 18 03:00:09 2025 GMT
Subject: CN=3d48b649fed4d8f63d08b25a5e3b63edf3e27b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:76:f5:d9:43:44:a8:24:b4:08:a4:dd:54:
54:75:b9:00:f2:a5:23:c7:c1:ab:17:e3:ae:b5:97:
77:a3:7a:b9:cb:5e:6e:82:eb:12:82:f4:a5:7e:76:
e8:58:6c:c7:3e:5f:d9:e5:26:27:91:a3:93:c4:f0:
e3:82:5e:43:d9:b8:ea:69:79:9d:b3:04:78:0a:46:
eb:f4:06:27:76:62:ec:14:9a:ab:35:d9:66:3f:44:
a9:5f:13:65:10:00:8b:ed:2c:a6:25:00:d9:0e:47:
d8:df:25:12:53:2b:17:51:d0:52:98:c5:56:8c:06:
b1:e6:cf:c3:78:6c:82:36:26:00:ae:0c:41:ec:05:
be:d8:5d:51:45:52:b8:fd:45:8a:f7:91:46:33:3f:
0d:8c:87:5f:c9:65:ef:40:93:8e:1e:71:40:5c:96:
8e:30:ab:77:f7:08:4f:68:0f:b4:51:30:b1:ed:12:
4d:02:f0:7b:32:94:dd:02:ab:ac:ca:23:3c:c1:ba:
18:58:2d:dc:29:f6:3a:80:e7:38:c2:9c:7a:d7:60:
96:e7:d1:c3:10:8b:98:f0:d2:f2:17:3e:4e:76:73:
20:6a:11:f0:a3:46:7d:2e:a6:d9:06:11:5b:76:6d:
12:c6:af:29:4b:7c:a1:c0:3b:6d:ea:ba:92:c2:5d:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:48:B6:49:FE:D4:D8:F6:3D:08:B2:5A:5E:3B:63:ED:F3:E2:7B:0D
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:86:dc:bc:46:f1:4f:9e:9f:f4:10:1c:24:3d:14:34:3f:26:
17:bc:6c:41:39:4e:b7:4c:80:10:dd:d3:a5:f7:f9:c2:23:a7:
35:5e:8a:45:0b:54:5e:1b:9b:83:85:85:44:34:1c:52:7b:5f:
3b:e1:7f:a1:77:52:b2:e8:7a:8b:86:ab:09:51:d5:cc:85:a3:
d1:a7:f8:05:b6:0d:00:aa:e0:58:31:65:7a:73:ef:75:b4:d9:
c5:90:50:0b:51:1e:da:8e:e4:2e:4d:50:30:3a:75:97:d0:b3:
c7:91:ca:4f:1c:99:fa:18:1e:6e:c5:68:7a:2e:1d:4b:85:41:
e2:b3:97:ac:4e:04:c7:72:50:08:64:ed:ff:d0:dc:54:83:03:
9e:ca:30:50:4c:0b:c4:03:ea:46:d4:63:76:06:8e:16:b3:58:
3d:51:c6:ca:0e:e9:8c:71:24:79:c2:4f:50:76:e7:29:10:ea:
28:fa:3e:a2:a6:40:86:eb:5e:1a:ae:bc:03:cd:e0:ec:5f:9b:
0c:2a:3a:e7:31:53:26:fc:3f:f4:ae:20:ca:6d:f0:e5:b5:06:
bc:51:86:09:83:3e:4a:14:29:13:27:3e:b1:78:50:11:a2:e5:
b0:3a:60:74:c9:b5:8a:96:cb:dd:52:9b:9e:52:67:9b:d4:d6:
90:5e:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:16 2025 by rpki-client