Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: vij9lwpFuXNxPpsvmQ0GfZo2RHssKDs0GPQcaKWSr00=
Subject key identifier: 95:44:37:A9:CA:26:84:27:40:5A:22:5A:AD:73:06:3C:08:5B:76:1B
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 0194BABB14C9D7681C1272EAB4A657928130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 05:00:10 +0000
Manifest this update: Fri 31 Jan 2025 05:00:10 +0000
Manifest next update: Sat 01 Feb 2025 05:00:10 +0000
Files and hashes: 1: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: OUAHxnD1xVq32lgRanJcAxQmeQlhM1IR3gxqvhWNfxI=)
2: tHCbVYNtXVasJFwcwAVRKNWN-3Q.roa (hash: Ww9of/U+//ROw//qlU2ic3DOqjTFR4h9CkZcVWZJb4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:14:c9:d7:68:1c:12:72:ea:b4:a6:57:92:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Jan 31 05:00:10 2025 GMT
Not After : Feb 1 05:00:10 2025 GMT
Subject: CN=954437a9ca268427405a225aad73063c085b761b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:a6:07:19:6d:9a:27:86:ac:4f:31:bb:22:
a9:e3:ba:5d:29:77:3c:cd:bf:bd:10:37:c7:35:30:
de:f5:8d:56:04:7b:91:fc:0f:2e:fe:a9:e3:c1:d9:
65:26:77:84:87:56:98:8d:eb:da:39:f0:80:17:e2:
bd:10:d9:b6:6b:aa:6a:ba:15:78:06:36:12:57:91:
d8:46:05:cb:6d:bb:62:da:f7:99:64:3d:5c:0e:00:
74:2e:9b:a7:0a:e7:53:17:18:be:3e:a3:bf:45:7d:
d6:30:00:7c:28:4f:10:8d:80:e7:9e:27:b0:3e:29:
a1:2b:06:ef:d7:3c:f5:52:9d:fb:4c:d0:96:f6:f3:
23:2d:b9:c0:b7:4a:c3:ba:d4:d9:d8:a2:af:3f:2b:
92:46:ff:b1:9c:c4:cf:b2:2d:8e:6b:05:2c:b8:69:
a1:96:45:45:1f:92:bb:66:c8:92:68:de:6e:c6:9b:
26:61:a2:fa:48:39:77:64:93:c5:ef:8b:e1:14:a0:
92:73:ff:d0:98:cd:9d:aa:b2:11:fd:45:32:d9:b5:
5e:42:83:e4:ee:76:8e:56:70:83:b7:45:c0:e9:c8:
40:9f:13:fe:bb:a8:23:e7:0a:16:ec:b5:53:75:26:
14:c9:48:90:dd:c8:8b:1e:6a:ed:14:07:b7:69:fd:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:37:A9:CA:26:84:27:40:5A:22:5A:AD:73:06:3C:08:5B:76:1B
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:70:32:be:0a:88:a0:3e:28:41:0a:c7:fd:c2:2c:c6:27:89:
1c:63:3f:19:1a:eb:26:e9:5f:c1:75:2e:6f:38:38:fd:21:60:
ff:c4:9b:ff:32:80:5b:26:a8:f9:db:f6:31:04:52:58:4e:94:
9c:2b:94:29:08:1a:d4:a1:49:15:0d:fd:5d:80:03:0e:f6:e9:
88:ea:c5:b0:00:f2:6a:d7:49:3a:3d:d3:66:b8:56:96:b9:c3:
80:f3:4f:82:97:77:32:43:0a:d1:5b:03:68:a9:d9:a3:ee:23:
67:47:bb:05:45:d6:8e:ad:87:a1:7e:14:49:9a:78:e0:13:81:
72:c0:d5:d2:26:81:e8:87:fe:de:e5:4c:e1:fd:27:cb:35:47:
cf:de:09:2f:51:69:23:c4:e5:60:fd:0d:48:07:94:f1:3b:b7:
1e:5c:9a:b7:45:87:be:34:98:10:d4:27:41:a7:35:f2:e5:22:
b3:3d:48:8c:60:24:d0:d7:a9:b1:83:b2:6a:05:d5:b3:23:56:
1e:a8:e8:98:3c:04:70:d7:32:95:d7:14:85:d7:6a:c8:7d:a7:
2e:fd:f2:cb:ce:4d:40:0b:ec:3e:e4:5d:d1:7e:bc:ef:bc:da:
98:da:ba:53:ff:e7:85:3b:65:00:7e:49:a8:49:4b:15:e6:ce:
a6:1d:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:04 2025 by rpki-client on console-fra.rpki-client.org