Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
File: BjnEhGuIwtcOMc5MD8y0z03qVDY.mft (raw, json)
Hash identifier: /4Zj0kkG/jjwCRNdKmPvbDQS+OXcIqVwiZF/hAFrZOE=
Subject key identifier: 0C:19:30:80:E7:6C:84:B5:63:7C:80:3D:9A:C5:C0:E2:64:E7:57:53
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019511A2F97A1FD9D8F794C0A2B74C230B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
Manifest number: 1454
Signing time: Mon 17 Feb 2025 02:00:48 +0000
Manifest this update: Mon 17 Feb 2025 02:00:48 +0000
Manifest next update: Tue 18 Feb 2025 02:00:48 +0000
Files and hashes: 1: BjnEhGuIwtcOMc5MD8y0z03qVDY.crl (hash: uGITnjoqN5bfiY5G5q+YCqSihFDsQ/TYuRO/9lQ9NeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f9:7a:1f:d9:d8:f7:94:c0:a2:b7:4c:23:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Feb 17 02:00:48 2025 GMT
Not After : Feb 18 02:00:48 2025 GMT
Subject: CN=0c193080e76c84b5637c803d9ac5c0e264e75753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:1d:7f:63:a0:12:ce:10:2f:39:65:6e:48:
bc:8e:5e:06:e2:11:c3:1a:3c:b5:e8:ea:3a:89:6c:
d5:c5:1a:bb:a3:34:54:ce:0c:de:e8:7d:c8:e6:b4:
19:ed:fa:2b:80:2a:e2:aa:8f:e7:0b:c1:26:d7:c6:
7a:bd:a8:81:03:c9:e6:ea:9d:95:3b:6e:f7:28:7b:
8f:90:52:20:8f:ab:e6:fe:ba:69:a8:92:0c:c9:94:
58:03:44:71:fa:c8:43:db:e6:f8:fd:e1:39:3e:d3:
40:52:02:42:ca:60:13:c7:1e:76:ba:ff:aa:3c:d3:
24:14:30:35:dd:12:46:f4:9a:d8:20:6f:5f:65:30:
c5:60:41:c7:dd:d5:fd:58:ad:21:35:90:3f:54:1e:
4e:7c:8f:e2:36:d2:56:f3:01:2f:8b:ce:72:a9:c6:
3f:54:74:4e:97:ea:e7:89:00:f8:fa:06:f9:6b:81:
7a:0b:fb:a3:64:a2:b1:11:fb:d4:5e:52:7e:f6:eb:
ae:e3:52:e7:88:d3:fe:b3:b4:e9:e2:be:4a:12:af:
74:93:74:6a:ac:69:b7:08:54:3f:dc:c4:8a:a9:1e:
49:dd:71:52:4a:62:3f:8a:3a:7b:40:cf:49:06:5f:
cb:a3:c4:aa:04:f2:59:42:2a:db:d8:6a:52:0e:de:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:30:80:E7:6C:84:B5:63:7C:80:3D:9A:C5:C0:E2:64:E7:57:53
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:83:d5:7d:6f:06:6e:ba:ff:cc:e5:57:a5:e3:0a:6f:92:
3a:77:e0:bd:49:16:ee:4d:5f:d7:ed:4d:bc:36:2e:ce:48:e2:
6a:20:28:cc:64:3f:d4:5e:15:c9:56:68:03:68:8f:2e:8d:a1:
46:03:6c:5d:87:68:fa:fc:36:4d:2a:00:0b:02:7c:e8:a0:1b:
96:07:ad:a3:19:ba:09:02:75:da:80:f3:d6:2b:2e:84:21:c0:
41:7d:84:35:10:fe:b5:23:dd:20:89:08:64:08:16:22:67:3e:
3e:d1:0e:a8:f4:0a:b1:0f:f5:f2:2b:56:7a:ec:b5:83:5a:da:
d9:0b:30:22:3a:31:1c:90:e0:02:f0:ad:93:ce:56:dc:79:fe:
1c:fb:b6:72:f0:8e:c3:b1:8b:df:81:bc:40:4f:f1:3b:0f:08:
52:df:41:65:1c:1b:e8:5e:c7:f9:c7:b6:8d:1e:70:cf:20:2c:
43:70:2a:86:0e:a4:7f:ee:94:07:c5:48:c8:58:81:ca:48:b1:
17:06:40:60:22:47:1f:2f:cd:7a:8a:2a:5f:1a:0b:1d:ae:14:
32:5c:8f:02:b1:26:9b:1c:9b:32:fb:44:61:a2:fd:06:9f:94:
d0:67:31:05:73:11:36:77:11:cf:ef:1a:a7:46:b3:c8:a2:e8:
56:e3:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:45 2025 by rpki-client