Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: mmmtsT0JE1n9X9XKODCEkDLC3jubXLlf6nJ4TBxbVNY=
Subject key identifier: 03:C0:C4:E1:DF:05:4D:8E:5B:1D:DD:11:87:36:CD:55:67:DC:5D:31
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0195116C2D8A9EF1AFF85C76586E4F4D39AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 04DF
Signing time: Mon 17 Feb 2025 01:00:56 +0000
Manifest this update: Mon 17 Feb 2025 01:00:56 +0000
Manifest next update: Tue 18 Feb 2025 01:00:56 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: lkQEHpBaGp/feQFe8r3gCr8I2EUS1rEXaSz2wHPsFZk=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:6c:2d:8a:9e:f1:af:f8:5c:76:58:6e:4f:4d:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Feb 17 01:00:56 2025 GMT
Not After : Feb 18 01:00:56 2025 GMT
Subject: CN=03c0c4e1df054d8e5b1ddd118736cd5567dc5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:46:cc:36:43:76:4a:f7:95:fe:78:cf:7c:
63:e6:cd:81:2f:94:e8:e8:1d:f0:28:85:0b:64:29:
d8:a0:06:90:0b:6f:8d:5b:82:ed:26:ce:0e:17:91:
55:50:f6:b2:4c:9c:e7:95:ce:f2:fd:72:ca:89:2d:
ee:34:09:e0:58:e3:73:c7:a9:59:2e:22:a7:1b:a5:
44:87:09:f9:1d:ab:0a:44:be:b4:ac:65:fa:82:93:
3d:7c:0f:e5:cb:5e:78:45:a7:41:f8:f9:02:b7:b1:
68:9c:ef:81:ef:9b:23:c8:c4:5e:e1:75:14:b0:25:
6e:20:3f:cc:ba:3f:c3:d1:a4:65:ed:f6:34:8f:a4:
cf:f8:6c:80:ce:f0:d9:79:44:e8:d5:9f:97:a9:1a:
7e:73:ba:75:44:dd:51:76:64:d6:a2:87:ed:e3:fc:
5e:e8:54:61:e5:65:98:f0:15:89:1e:26:5d:43:48:
1e:5b:55:dd:3f:1c:ed:b6:c2:21:4b:c5:64:18:56:
9f:0b:30:a6:eb:66:8d:ac:ff:4e:6e:d8:b5:7e:f6:
19:3c:b5:24:30:fe:ae:00:b3:fe:b4:71:d6:5b:fb:
8a:f9:11:b0:bc:d1:e2:c8:ea:f6:bb:e4:6c:d3:8e:
c8:8b:72:30:72:e5:cc:c9:d3:72:b3:dd:c6:5e:27:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C0:C4:E1:DF:05:4D:8E:5B:1D:DD:11:87:36:CD:55:67:DC:5D:31
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:56:86:41:ed:2a:77:fa:28:42:1d:d2:d0:8f:0f:5d:1e:
de:80:87:09:64:58:c9:a3:2d:1d:c0:7b:7f:f7:56:98:c7:fb:
e8:f6:42:6d:b7:ac:90:49:00:ed:df:02:ce:78:9e:d7:f3:2f:
8b:91:ba:49:9c:61:ea:79:00:93:1d:b4:7d:c4:67:ec:96:d2:
38:3f:d6:dc:2a:21:2e:63:99:ec:78:58:ea:e6:37:7d:37:39:
4e:7b:84:10:ce:0b:5f:a6:c4:1a:88:63:eb:b2:06:2c:a1:a9:
f9:54:a3:57:9d:6d:ec:c7:bd:03:b8:d8:49:6f:70:4a:3d:ee:
41:b2:4c:83:25:f4:c2:07:63:95:d7:e6:d4:d0:f3:bb:40:7a:
37:cd:d2:54:35:00:07:46:ed:5e:1e:77:06:70:0e:b8:75:87:
15:a5:5f:b8:35:2f:fa:fa:28:9a:be:39:7a:7b:2a:6c:b2:34:
25:55:26:e8:be:df:a2:68:70:d7:81:95:5a:3f:17:d6:78:ec:
35:8d:73:aa:70:bc:36:23:ec:6a:d4:80:c0:7d:3f:a6:1e:8b:
de:70:8e:84:8f:dc:0f:b4:ba:78:cc:40:6c:f1:e0:71:6a:50:
c6:c2:ac:f2:d5:0d:2e:cc:cd:08:80:0b:cf:ef:27:e3:0d:7e:
dd:d0:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:07 2025 by rpki-client