Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: ngl+nRojatVnTJW/96EP/ZIdCYETZn/JvTbzKPi2mOE=
Subject key identifier: 5F:1F:25:F4:C9:3C:24:51:67:94:6C:0B:33:A3:00:9D:C1:CC:B3:E1
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0194C49A69B3221EA6FBF5B35C7AA5064655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0529
Signing time: Sun 02 Feb 2025 03:00:41 +0000
Manifest this update: Sun 02 Feb 2025 03:00:41 +0000
Manifest next update: Mon 03 Feb 2025 03:00:41 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: 1/wuDAdKKcMdqIVwQfHJSVBKs5ZMVih69648q0kFIJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:69:b3:22:1e:a6:fb:f5:b3:5c:7a:a5:06:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Feb 2 03:00:41 2025 GMT
Not After : Feb 3 03:00:41 2025 GMT
Subject: CN=5f1f25f4c93c245167946c0b33a3009dc1ccb3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:8e:f0:f8:83:d5:69:e9:d0:7a:a7:0e:3e:
c6:b7:2c:c7:1c:1b:c2:d9:0d:ae:9a:eb:dd:a2:c1:
62:59:12:52:47:27:a6:06:82:3c:44:f4:a6:b7:16:
e7:ad:d9:cf:8e:eb:6b:38:5c:3b:64:8f:14:b6:c8:
c9:c9:87:44:ba:6b:76:db:5f:26:fe:7f:ed:b4:2e:
aa:a7:17:c3:9a:4d:cd:38:38:4b:70:d9:69:a9:0b:
93:fd:51:d3:f7:bf:55:de:d8:68:71:66:db:ab:05:
7e:40:c0:ab:d9:7e:b4:57:40:d7:b6:2e:4c:dd:5e:
e3:c2:56:80:fb:28:7e:39:b9:a9:2a:12:1b:11:5c:
15:eb:cb:8a:d0:ca:26:a8:09:7d:46:1a:67:7e:eb:
b5:f3:ce:f0:fb:e2:64:22:b6:d7:9f:dc:5b:2c:39:
ca:2b:43:63:5b:ee:66:97:c6:03:da:9c:55:b4:83:
34:ff:a0:88:aa:82:3f:a7:39:5b:99:94:d4:0a:74:
0e:dc:30:81:b4:39:f0:82:bf:36:9a:b6:6a:38:28:
6c:87:58:e6:a0:3d:41:be:d5:e5:ec:ec:c9:ee:89:
8d:5d:8c:fc:30:cf:ed:7f:a3:5f:2d:dd:1b:2a:10:
66:e9:a5:0b:cd:54:8e:12:c9:6f:ca:57:b5:ee:3a:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1F:25:F4:C9:3C:24:51:67:94:6C:0B:33:A3:00:9D:C1:CC:B3:E1
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:b7:61:dc:db:4c:84:f3:39:8b:4c:a4:83:be:38:bf:91:
5c:c7:70:05:e4:85:e8:d3:2f:a3:07:95:e5:23:40:c6:44:22:
62:23:9c:5d:98:77:cf:04:9e:5a:ac:65:8e:01:92:93:b0:5e:
26:45:8a:59:8c:80:f1:8d:1c:ca:f6:76:53:11:b9:41:84:20:
2d:b5:8b:04:23:1c:1c:7d:76:73:59:2f:89:9d:c4:f3:30:74:
09:26:78:a3:63:db:53:27:c4:73:bf:85:9c:ab:69:50:18:2a:
da:81:34:33:98:7c:d0:92:4b:9d:13:a8:4d:ab:c9:50:12:ab:
2d:58:36:7d:b4:61:21:7a:f7:b6:9b:03:bb:e7:0a:d3:50:33:
03:c0:af:44:83:3b:f2:32:7c:4b:38:6d:b5:3e:d1:e2:07:84:
9d:ce:c6:5b:e1:fb:04:23:06:0d:3f:e2:77:21:fe:53:15:97:
6b:fa:57:2a:63:26:88:ff:89:19:2d:fc:0a:b1:5e:55:fa:46:
f0:df:d2:b7:a7:a8:9b:58:75:be:15:09:22:3e:39:f0:9b:b8:
10:ac:e4:55:97:57:4e:a8:b2:67:98:80:df:e7:b9:7e:8a:eb:
57:3a:3e:60:d0:de:4d:2a:e0:64:f9:aa:f0:82:d6:ee:62:ce:
4a:d5:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:38 2025 by rpki-client