Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: YaDfHKG9YUNeB574N0oyQk63/BHKDxi3eBFD4yR92rM=
Subject key identifier: A5:FF:52:D1:AA:D4:AA:EB:48:66:51:00:61:59:1C:C3:10:33:B6:3B
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 0194C3BE6FDF57DC2209E5659D10041CD1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1432
Signing time: Sat 01 Feb 2025 23:00:25 +0000
Manifest this update: Sat 01 Feb 2025 23:00:25 +0000
Manifest next update: Sun 02 Feb 2025 23:00:25 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: HjgIRMd0JxQWU4Jez3JlFsf/Xgn/n+1EDaR26xyLGWg=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:be:6f:df:57:dc:22:09:e5:65:9d:10:04:1c:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Feb 1 23:00:25 2025 GMT
Not After : Feb 2 23:00:25 2025 GMT
Subject: CN=a5ff52d1aad4aaeb4866510061591cc31033b63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:78:4b:da:d1:85:77:ac:c5:c1:79:6c:df:
1a:7f:cc:07:0e:7a:c0:02:57:43:d9:8d:c0:a7:61:
d5:e5:77:07:97:80:2b:4b:35:45:73:d7:7b:41:ec:
f9:f7:b4:40:fc:7b:8f:a0:52:e9:cf:d7:29:26:f7:
45:83:05:ef:86:19:45:b2:f9:e4:18:b9:0b:70:68:
c2:61:65:ed:82:f9:70:c0:55:ce:1e:b6:bc:fd:69:
99:37:60:4b:68:95:9a:78:77:4c:20:20:30:e6:01:
47:94:e0:83:fd:89:90:2d:23:bb:46:3e:23:5b:e3:
b0:06:5f:dc:9f:0a:3a:c0:04:cc:a9:c0:63:16:fc:
63:0c:a4:55:a0:93:56:1d:f3:1f:9f:82:cc:ef:64:
6b:f3:46:e3:c6:56:cb:08:d7:02:e3:56:47:9e:06:
b2:07:4e:74:f3:21:b6:06:bb:cf:79:80:43:fb:5f:
77:27:71:4f:16:72:24:f4:af:e0:bd:66:a8:3e:13:
b8:d0:a4:d7:92:70:7f:fd:98:32:5a:cf:e9:ca:9e:
1c:27:60:91:03:4c:4e:11:b4:cc:78:21:2d:fa:d5:
9c:9d:f8:1d:44:c8:8d:f8:23:8e:08:1a:ac:4f:c5:
9a:df:2a:3a:71:7d:5c:db:cb:fd:b3:7c:41:2a:70:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:52:D1:AA:D4:AA:EB:48:66:51:00:61:59:1C:C3:10:33:B6:3B
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:39:01:84:7f:c3:a7:52:1c:be:7d:59:5c:1d:96:95:9a:e1:
59:e8:a5:e4:1d:41:6f:91:69:5b:fe:e7:bf:14:cd:5d:7f:a3:
71:d3:4f:d9:36:25:4c:f9:37:45:cf:b9:df:67:90:45:da:53:
7f:f1:bb:06:0b:9d:74:19:9a:83:41:eb:7c:9d:fc:95:66:ef:
ea:61:1f:ac:d4:79:69:22:1a:a7:ac:00:99:2b:9b:91:03:18:
03:5b:f5:7c:cf:8b:c5:16:18:d9:93:62:62:c5:2c:b9:37:9f:
6c:f5:61:0c:48:a5:e0:37:13:39:d9:59:32:f8:51:0e:eb:61:
79:1c:96:83:96:3c:d2:aa:1e:8a:67:2c:6c:43:ee:30:1e:b2:
a6:f3:32:93:0d:97:6f:ee:5c:f8:ef:b4:96:61:d2:b8:f4:ee:
61:f4:23:bc:fb:2c:96:ee:7e:3e:52:e6:be:61:7d:33:ea:ff:
12:32:7a:44:aa:8a:02:ff:72:d6:de:03:e9:e2:ce:a6:9f:21:
05:fe:7f:86:83:09:0a:6d:23:92:0f:04:20:0f:d2:8b:29:59:
65:07:76:9a:2f:8d:46:a4:9c:04:1f:f6:cf:3b:35:64:a2:7c:
38:a4:0a:bd:8c:60:05:01:91:91:b2:af:14:44:1d:bc:21:68:
6d:3c:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:43 2025 by rpki-client