Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: /xSTYrqadFkmdI7PGJV+l2Clcr0taSqcjP3pMIMOpDA=
Subject key identifier: 9D:B2:F6:AB:E8:FE:00:2E:54:29:FC:94:68:DF:1D:0A:74:73:B8:BF
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 019511A25A17BBE16166E047D58BF7D8B10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 02:00:07 +0000
Manifest this update: Mon 17 Feb 2025 02:00:07 +0000
Manifest next update: Tue 18 Feb 2025 02:00:07 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: xGPEB6vqIHeS3Ux8TI8ij3molNLalzcwFzu8t+qyI5Y=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:5a:17:bb:e1:61:66:e0:47:d5:8b:f7:d8:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Feb 17 02:00:07 2025 GMT
Not After : Feb 18 02:00:07 2025 GMT
Subject: CN=9db2f6abe8fe002e5429fc9468df1d0a7473b8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:69:da:2b:7f:81:21:ec:fe:18:22:df:c1:
94:68:76:41:a6:9c:76:4c:53:22:a9:ba:ae:4d:46:
ad:cb:92:a6:63:92:33:6d:aa:85:79:85:0b:0c:c9:
98:b2:f7:f6:8c:47:be:d3:5b:41:42:74:f6:35:69:
cb:14:08:65:4d:2e:bf:1f:0f:b9:a0:c2:3d:09:82:
b7:f3:9f:d4:1a:5d:dd:e1:b1:43:22:f2:54:45:86:
59:bc:43:52:dc:88:49:d9:0c:18:82:31:3c:e6:53:
2f:cd:bd:07:a9:5f:22:56:a0:2d:79:07:dd:d8:67:
b0:08:9b:b3:61:fc:bb:8b:8f:de:33:33:bb:8b:35:
2d:4c:2d:00:9b:67:bf:39:d6:b9:ac:74:f4:e6:06:
94:51:19:9a:bd:af:ba:17:5a:d5:e4:df:54:e2:49:
83:e9:4b:22:65:98:c8:43:9d:85:1b:43:47:c2:22:
d8:f1:61:ae:49:ed:73:33:5c:46:cd:52:6b:51:73:
ea:66:5f:d9:23:ca:1a:2f:7c:26:c7:98:4e:9f:03:
56:09:d5:53:39:ec:63:8a:19:80:d9:a0:f9:ca:19:
eb:39:e2:f5:60:ba:9e:5c:12:07:6f:f2:78:7c:81:
5b:67:79:be:d9:b7:ea:a0:9f:9e:9a:b3:56:ba:85:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:F6:AB:E8:FE:00:2E:54:29:FC:94:68:DF:1D:0A:74:73:B8:BF
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:37:fd:34:af:35:84:df:bc:dd:15:59:f7:31:ce:80:ac:e0:
5a:7a:e4:ff:57:ae:7d:8d:bf:1e:c3:cf:89:7c:87:a1:c3:8d:
b5:7e:fb:9b:a0:29:82:7e:37:15:11:33:ad:d6:a8:21:13:d1:
0e:6c:c3:5f:5c:f7:00:ae:29:83:af:83:e5:5a:72:9f:06:7c:
00:8d:6f:54:50:b6:d3:df:67:41:9f:b1:bc:76:bd:25:7f:fe:
f4:fe:81:c1:61:d7:14:eb:11:c9:ba:6c:ac:60:d4:0a:73:8d:
3c:6b:9c:58:bb:b0:7c:b5:0d:90:74:f1:a9:9e:75:9b:ec:16:
48:ce:cb:3d:99:4a:cc:46:34:af:02:44:a5:c9:a1:51:f8:da:
65:2c:f2:ef:f0:56:e2:ae:95:0d:40:a1:fe:ea:47:7e:ab:bd:
7a:98:12:ef:ec:2b:a7:c4:05:9b:d4:35:16:f2:3e:59:2f:16:
a9:e3:c4:41:cc:21:ca:0f:4f:45:98:22:14:6e:48:02:08:23:
2e:2e:99:55:7b:d1:f1:f0:e6:ea:3a:17:c2:c0:27:15:a1:be:
bf:78:aa:40:3c:ba:34:a8:a5:46:e2:78:86:f2:7f:0f:a1:a1:
d1:a5:87:2f:c5:82:2c:72:c8:d6:85:10:45:d9:4e:f6:63:52:
07:e5:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:10 2025 by rpki-client