Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File: B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier: Q0UTfwws3wPxX+ZaFNe+bV2F9IqtOSpPG0Q8j//eUcM=
Subject key identifier: 8B:89:6E:AE:F2:C6:24:A8:CE:E3:AE:48:9F:BF:48:4B:B6:AD:8F:DA
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer: /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial: 0194BABB0CFABA57CCD99F557743902D7BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number: 0AA9
Signing time: Fri 31 Jan 2025 05:00:08 +0000
Manifest this update: Fri 31 Jan 2025 05:00:08 +0000
Manifest next update: Sat 01 Feb 2025 05:00:08 +0000
Files and hashes: 1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: Yl7hlL1detpbOLcEbVHx7PYfx33rwhDNTcVCY3BrFF4=)
2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:0c:fa:ba:57:cc:d9:9f:55:77:43:90:2d:7b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Validity
Not Before: Jan 31 05:00:08 2025 GMT
Not After : Feb 1 05:00:08 2025 GMT
Subject: CN=8b896eaef2c624a8cee3ae489fbf484bb6ad8fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:95:ed:e7:98:7c:65:4a:83:da:2a:87:9c:
6b:cb:5b:4b:db:e1:54:63:1f:ea:69:56:95:5c:4b:
bc:78:55:db:6d:6c:e0:f6:d0:f7:78:b5:48:98:41:
30:69:b3:83:a5:21:3f:c7:dd:82:85:4d:31:a6:cd:
d4:5a:ff:04:cb:63:88:9a:cd:2a:53:6c:3b:52:f0:
ce:e7:46:e1:97:3d:2e:9a:8e:3f:bb:1c:10:89:28:
f2:ac:b0:04:23:d2:0a:cc:0b:aa:fb:63:bd:d4:b7:
0b:00:81:50:a8:32:3d:ff:6c:7e:5b:6d:ac:8f:7f:
9a:db:00:e6:17:52:43:cf:e4:dc:82:dd:3b:5b:33:
5f:74:5d:61:35:f4:db:1f:e0:9b:9b:1d:07:a6:1b:
33:34:9a:ab:30:ea:fe:98:93:cc:c6:34:4b:cf:26:
ee:65:54:35:83:78:be:c4:53:ea:eb:a1:aa:8f:96:
eb:5d:3c:4c:56:9e:6b:e4:fb:1e:8a:c3:d8:b4:ae:
7d:7e:90:02:1c:d4:82:d9:f9:cf:0d:79:21:fe:50:
27:21:dc:5d:a4:be:ab:20:5e:87:53:5d:bf:c6:6e:
f7:ad:a3:16:b2:66:dd:d9:d8:05:2b:3a:59:77:48:
dd:ad:e4:01:cd:6f:d1:35:2f:64:d9:32:26:a7:69:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:6E:AE:F2:C6:24:A8:CE:E3:AE:48:9F:BF:48:4B:B6:AD:8F:DA
X509v3 Authority Key Identifier:
keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:69:dc:11:cd:b5:e4:05:d0:51:46:35:79:5b:1d:eb:d2:d0:
36:b0:5e:10:5b:64:48:de:fd:f7:55:f2:ae:09:31:e5:e8:56:
3f:26:42:6f:3e:ca:82:63:59:81:5e:b5:51:ae:19:ff:67:f7:
0d:38:3b:1b:5f:52:91:70:87:da:e9:85:52:c1:f7:45:3a:4b:
f2:54:70:41:c0:7c:f0:7c:0f:39:a3:2f:6b:81:fa:30:9a:a1:
1d:aa:8f:38:0e:e7:90:7a:b7:47:01:5f:c2:54:40:58:df:75:
e5:cf:52:ca:f4:96:f6:73:2c:07:6c:b3:c9:e2:b5:f1:40:20:
1c:1c:58:16:f5:51:47:1d:8f:6b:a8:dc:7c:0b:46:46:68:7b:
e3:4d:63:4c:04:19:6c:7c:36:cb:37:6e:9e:d2:1e:f5:07:63:
59:87:1a:5c:ff:98:51:84:6e:b1:f9:37:db:b8:fa:e5:9d:2e:
09:b0:f8:5a:47:bb:a5:64:9d:a5:a6:1d:dd:49:ac:fc:8d:b3:
78:a1:c0:7d:4d:ad:f5:e6:88:c7:4b:9b:ee:c2:1f:f7:47:fb:
1e:dc:98:a5:b2:8d:e4:0a:3b:25:fa:55:37:54:6d:f3:1a:a3:
cc:d7:29:04:5a:b0:b2:a1:55:4a:2c:c3:fb:36:c4:fc:4c:aa:
3e:fe:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:04 2025 by rpki-client on console-fra.rpki-client.org