Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File: BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier: TZarm01f7+Hs/5n0/bp8GCH5C4+CXwLaihONl7iosKw=
Subject key identifier: C6:F9:11:8A:0A:0E:D8:BF:38:2E:DD:05:8F:BE:37:EF:81:82:40:5E
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer: /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial: 0194BA845B4A87D85011E15DE843A03F4A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 04:00:23 +0000
Manifest this update: Fri 31 Jan 2025 04:00:23 +0000
Manifest next update: Sat 01 Feb 2025 04:00:23 +0000
Files and hashes: 1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: rmSqFZAT84iDBlpfZzVczdHHU5M+jEX6crXX/DY2mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:5b:4a:87:d8:50:11:e1:5d:e8:43:a0:3f:4a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
Validity
Not Before: Jan 31 04:00:23 2025 GMT
Not After : Feb 1 04:00:23 2025 GMT
Subject: CN=c6f9118a0a0ed8bf382edd058fbe37ef8182405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:75:1c:68:95:3b:10:f0:78:7b:18:b6:ac:
e2:15:5f:31:0b:e7:d7:6b:22:57:e8:29:79:96:81:
82:d6:c4:ec:50:50:0d:0c:f2:e5:33:62:f5:c8:6b:
66:ea:69:94:c8:5d:c3:5d:14:3c:e1:83:2f:4c:4d:
b7:01:0b:5e:b3:0c:bb:f2:f1:b1:32:7c:75:a7:02:
13:3d:a8:41:65:be:f6:81:9e:17:9c:6a:a9:4b:fb:
84:98:d6:ce:ad:1b:72:d6:ff:e8:fb:b5:ab:0e:96:
69:16:41:69:5f:a1:49:31:72:e2:31:c6:de:92:81:
b5:16:a1:36:f8:1a:46:85:5d:da:e5:e8:e1:6a:d9:
bd:6f:91:12:42:9d:4d:61:cd:16:08:e0:c3:56:39:
2b:a1:47:2c:fc:26:4e:b9:fe:36:96:a2:29:f7:39:
61:43:ae:d4:d6:a1:39:a3:ba:b4:8f:e0:63:fa:17:
ad:b9:a7:0f:14:19:f7:3d:eb:17:cb:77:03:3c:22:
38:a8:fc:5c:b9:c3:20:20:2b:9d:ca:ea:a3:7b:ae:
02:a7:7f:e9:18:ce:0c:9c:30:ad:53:26:4e:f1:d1:
40:a0:ff:18:80:c6:77:8b:90:66:14:f6:ab:8e:17:
9f:7f:95:b3:b4:f8:e6:3b:b2:5c:64:80:0a:fe:0c:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:11:8A:0A:0E:D8:BF:38:2E:DD:05:8F:BE:37:EF:81:82:40:5E
X509v3 Authority Key Identifier:
keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:d6:cd:1c:00:aa:43:67:88:ed:4a:05:bf:d8:ff:62:32:
68:50:e5:a3:af:f8:d3:60:5e:ba:12:23:ed:ba:54:cf:f8:b0:
b4:5f:1b:2d:96:be:46:a0:b1:1c:98:b9:5e:48:d5:8f:15:66:
a6:ed:01:73:dc:de:14:62:a1:3c:5b:8a:84:49:82:b6:88:d0:
80:47:5e:0a:bc:f6:81:52:e4:f8:2c:85:60:c8:6b:55:9e:0f:
9a:7b:c2:1c:e6:d2:2b:aa:fa:3d:86:32:2a:cd:31:87:7a:75:
dc:58:17:89:b6:69:4e:fd:93:ae:b0:9f:e5:82:97:57:34:01:
c3:17:1d:e2:e1:90:fe:6f:b6:a8:f2:75:00:04:44:a9:c6:d4:
dc:c2:31:57:b8:7a:67:ea:d5:60:aa:df:f4:fa:6c:6a:e6:31:
db:5a:94:d7:65:a8:45:3b:30:dc:0e:89:40:90:92:23:64:44:
6b:e0:76:a4:b5:95:7e:75:46:d5:d1:b3:c0:15:14:7a:24:74:
f5:41:cb:00:7e:13:68:3f:2e:d9:75:29:28:c4:4d:a2:60:53:
9e:a4:d0:b3:33:57:6e:dc:48:8b:76:52:64:f4:88:ec:52:8f:
2e:8b:be:cd:79:bd:17:ec:e3:88:51:5b:ed:7c:40:ed:89:f0:
f6:57:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:11 2025 by rpki-client on console-fra.rpki-client.org