Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: ffgd5uUNIWX0Jr6GWkTZmlqofA9LK5aA+8MZik4PwkU=
Subject key identifier: DC:07:3D:64:B6:83:D2:E0:39:7F:44:14:D7:DF:09:88:20:47:AA:CA
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 01951210B5FD7579044035B3ED2BDAA7A578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 13E8
Signing time: Mon 17 Feb 2025 04:00:39 +0000
Manifest this update: Mon 17 Feb 2025 04:00:39 +0000
Manifest next update: Tue 18 Feb 2025 04:00:39 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: Ra3rZntXdXaw13wFOUPXtu1lM71sYV4aZPmJ4JUFnBc=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b5:fd:75:79:04:40:35:b3:ed:2b:da:a7:a5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Feb 17 04:00:39 2025 GMT
Not After : Feb 18 04:00:39 2025 GMT
Subject: CN=dc073d64b683d2e0397f4414d7df09882047aaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:44:d8:c2:6b:1f:51:6d:5c:e5:87:e3:cb:36:
df:d3:dc:ba:b6:99:c3:74:ec:cd:db:bc:04:b5:90:
f3:43:72:c8:ed:66:5d:56:d3:0c:6d:0c:83:06:cf:
30:40:ec:07:2a:e8:70:07:95:76:6c:b8:90:ee:48:
2e:c8:09:42:4f:f1:65:b6:ee:45:44:6b:9b:60:bd:
fa:85:d0:12:fc:4c:1e:d4:e1:e5:50:c6:2e:76:63:
f1:57:8f:45:58:eb:f6:ad:78:0f:32:9e:ef:4b:fa:
cf:bd:30:59:b0:a1:49:46:bc:56:84:cb:db:04:74:
4d:d5:ba:a9:50:ba:3d:7a:c6:4c:6d:9c:b0:5b:95:
85:00:a3:11:3a:36:d4:5f:db:e8:c9:db:57:c3:10:
ec:77:71:29:18:f5:3d:28:d4:18:e3:f8:5c:85:3d:
d2:c5:31:b5:8c:a7:17:87:65:e6:66:4b:d4:76:ef:
ad:91:b6:11:62:d5:a2:8b:51:15:4a:13:64:49:eb:
e3:d3:3a:72:6a:5f:81:3f:d3:56:76:5a:5e:7b:4b:
4b:7a:da:8a:04:0b:97:a8:19:66:f5:22:75:3e:31:
cf:d2:d6:19:98:ae:88:8a:d6:f9:ee:3b:78:28:9d:
28:d2:b5:9b:86:a6:c9:5c:e7:59:f6:56:6e:d6:69:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:3D:64:B6:83:D2:E0:39:7F:44:14:D7:DF:09:88:20:47:AA:CA
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:bf:24:dd:9f:4f:96:a5:fd:46:3d:f5:7a:31:df:b9:85:
b5:fd:a2:31:c9:90:a8:74:72:dc:b5:56:86:8a:9e:79:25:d6:
ce:f3:fa:ac:a5:b7:d5:0b:75:d2:6f:3d:2e:a7:a8:8b:56:ea:
b8:94:a6:88:fb:a3:52:c8:f5:5d:c8:a1:0d:1a:34:21:59:6e:
c6:14:9e:ca:51:19:5e:35:e3:05:f2:2f:21:01:d7:31:96:85:
84:96:a0:00:7b:f2:a9:05:57:ac:13:0b:aa:81:6a:50:fa:d1:
1d:24:7f:a4:d4:6e:8d:cf:2b:4e:1c:39:0e:39:7d:6f:6a:a1:
df:2f:ad:dd:c1:4f:56:37:b2:9e:97:da:04:91:16:78:e4:b7:
4d:dd:2f:a6:23:fb:da:a2:7a:d4:88:2d:1d:38:9d:95:76:f2:
ca:4a:a7:d9:ed:14:2a:08:03:e7:38:9d:09:c4:92:fb:22:bb:
72:69:14:0d:b5:1d:c9:3e:d7:3c:04:03:86:9c:fd:4b:61:ca:
0f:a2:1d:d8:3a:71:9f:ab:4d:3c:e5:86:17:c3:44:da:24:08:
3e:0d:fe:23:18:38:12:2c:9a:37:f3:71:b3:55:9e:36:b2:cb:
11:c4:1f:07:a8:a5:6e:b7:13:26:ec:4d:3d:e6:aa:c2:06:77:
c2:17:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:54 2025 by rpki-client