Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
File: BbiIxzyL2SyrKy9GX-Z17h9unWA.mft (raw, json)
Hash identifier: YmHA0RBAKYC8e3N8TXfLL08QQ3h0H4BKUg4T682vSaI=
Subject key identifier: 53:41:7D:C2:B0:9A:15:CB:0F:30:9D:FE:42:9E:99:69:74:AC:48:BF
Authority key identifier: 05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
Certificate issuer: /CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Certificate serial: 019511A2F12CA73B86F5475444FA169CD528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
Manifest number: 1453
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: BbiIxzyL2SyrKy9GX-Z17h9unWA.crl (hash: ElNOOZvzJjPIjSk4ZOSd8Y9/JNiXh3bEs5Qe81QB2tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f1:2c:a7:3b:86:f5:47:54:44:fa:16:9c:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b888c73c8bd92cab2b2f465fe675ee1f6e9d60
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=53417dc2b09a15cb0f309dfe429e996974ac48bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:99:37:2b:a3:76:9f:d9:77:fc:91:c9:09:
6d:23:32:15:87:1b:4e:4d:8b:c7:c6:97:91:05:de:
36:77:1d:d5:ce:6d:4d:6e:81:61:1e:a9:5f:c9:bb:
b7:4e:92:ce:39:aa:6c:60:08:ac:34:5e:22:c2:0c:
24:84:44:c4:c0:1e:77:5d:df:6e:e9:5c:9f:87:9c:
36:be:9e:65:8a:7c:5d:0c:e0:a1:eb:c7:cd:f4:8b:
d2:04:01:81:47:c0:31:fc:2b:d1:22:4c:42:95:ae:
a1:24:03:36:9f:46:18:86:1a:ce:34:03:12:c7:cf:
c7:a5:5d:d2:9d:b2:74:f2:09:c8:db:d0:b1:3f:e6:
79:62:81:05:a5:64:2d:35:c5:d8:af:8f:1a:1d:4d:
20:69:c0:5a:02:e7:d8:94:97:07:5d:13:ce:41:3a:
f4:b3:34:82:b8:d0:ca:8a:46:74:82:e4:19:f7:9a:
8d:a1:54:f1:38:ba:11:b5:02:82:39:d1:59:fb:89:
35:18:fa:6a:d7:a1:f4:9a:49:11:91:8a:52:2f:71:
f5:5e:10:66:2b:7f:e9:90:24:52:8a:4d:84:2b:24:
16:ff:e8:12:51:5a:2e:68:82:49:a0:d6:4e:cd:eb:
00:2c:11:8f:4d:80:cc:4b:69:3e:6a:09:94:ab:5f:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:7D:C2:B0:9A:15:CB:0F:30:9D:FE:42:9E:99:69:74:AC:48:BF
X509v3 Authority Key Identifier:
keyid:05:B8:88:C7:3C:8B:D9:2C:AB:2B:2F:46:5F:E6:75:EE:1F:6E:9D:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiIxzyL2SyrKy9GX-Z17h9unWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1541e0-88d7-48dd-89bc-ce6367e44e6b/1/BbiIxzyL2SyrKy9GX-Z17h9unWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3a:23:6c:63:da:2f:66:1f:ab:1a:6f:e8:4b:55:5d:a5:11:
85:e9:9d:03:35:27:b5:d0:a5:62:43:70:1a:0c:8d:1d:a9:50:
ab:3d:ca:34:2b:26:8b:4e:a4:31:4c:ed:a7:94:da:ff:c1:a0:
3a:01:e0:66:58:c2:15:4c:0c:0b:bc:e8:2a:c3:60:eb:be:fb:
ae:f8:6e:f4:1e:96:25:ab:3b:3e:77:1e:7f:33:bc:b0:28:e3:
d7:82:f8:78:fa:0e:05:56:1c:3b:91:0e:84:a8:54:d9:5d:20:
f0:5b:59:2a:35:bc:46:52:73:87:1d:b4:ba:34:11:a1:b3:1f:
6e:e1:3e:5a:7a:ac:fe:5e:25:a5:8c:54:06:81:5f:f6:89:63:
0e:d0:26:fe:8a:47:70:1e:72:c2:9a:11:33:6e:d4:70:21:dc:
82:7b:36:99:03:2c:e2:73:86:e1:e8:27:78:eb:1f:81:be:04:
4c:3c:34:75:cf:d8:40:51:2c:63:71:2d:7f:6b:7b:ae:78:d0:
da:ee:2f:fd:a1:37:ca:8e:18:14:75:b4:83:f9:ae:74:42:e7:
55:19:75:eb:38:ae:38:21:fe:94:0b:3f:6f:22:50:50:5e:d6:
64:ea:e9:a2:e5:f6:46:ad:af:8b:31:3b:1b:2d:1f:2f:09:cb:
38:ec:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:05 2025 by rpki-client