Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: TIdLYhk5jzdlu3BybGmb7JnSGGSu/trg6nJYBP/MmMw=
Subject key identifier: 35:BA:1B:CC:70:23:1C:E7:63:89:B7:A9:AF:D2:B7:3F:F9:77:B5:B1
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0194C4D12D66E9D39C5F4D10850613DA4751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 142D
Signing time: Sun 02 Feb 2025 04:00:30 +0000
Manifest this update: Sun 02 Feb 2025 04:00:30 +0000
Manifest next update: Mon 03 Feb 2025 04:00:30 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: HpDkpQSgS/XXS0Je41LPZYOyIpUGgyCk9RM3Vn+D6Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:2d:66:e9:d3:9c:5f:4d:10:85:06:13:da:47:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Feb 2 04:00:30 2025 GMT
Not After : Feb 3 04:00:30 2025 GMT
Subject: CN=35ba1bcc70231ce76389b7a9afd2b73ff977b5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:d8:18:0e:f7:4e:a6:de:13:cc:a7:7a:85:
4e:fa:38:57:0d:76:fe:aa:fa:e5:bf:ce:8a:91:a9:
75:c0:52:15:09:8e:7c:ad:0e:da:82:ad:71:98:0c:
2f:6e:bf:2c:15:a9:90:7e:be:07:1b:50:dc:59:c9:
68:68:c2:8d:7c:d7:57:cb:82:fd:d2:68:14:cc:00:
26:53:88:ca:62:6d:bb:4a:b8:35:c3:c9:27:f1:cd:
5c:70:c7:51:0f:c0:9e:9b:5f:1a:0f:c2:ef:8d:69:
2c:ca:83:2e:b0:59:df:10:5a:97:c0:d8:8e:23:df:
33:f8:4c:e5:62:01:b9:13:09:51:01:a5:b4:82:fc:
1d:95:0d:c5:ed:62:a5:4e:29:08:28:af:b9:48:8f:
ab:9d:27:c0:fb:4d:af:76:34:03:72:fc:41:4b:61:
4c:0b:df:a4:c3:e8:cd:53:e1:b6:23:be:cc:89:a4:
c9:8e:e5:8e:7f:29:3c:3e:97:f5:cc:06:68:3f:4a:
df:69:84:5c:30:0c:6c:3a:8f:a0:07:4f:34:af:88:
1f:b5:08:59:5c:4d:54:73:ef:c5:d1:a8:8d:9f:19:
11:54:4d:3a:e2:94:8d:6b:f7:8a:6b:da:96:0d:8b:
6b:87:21:59:d4:1b:be:20:33:5d:c0:40:3f:ec:66:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:1B:CC:70:23:1C:E7:63:89:B7:A9:AF:D2:B7:3F:F9:77:B5:B1
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:51:3d:a8:fe:ff:81:bb:8e:8f:3f:cc:f9:39:a2:9b:4f:
da:56:1a:bb:ae:c9:31:f1:a7:dd:c4:53:7c:32:87:56:c9:3d:
81:7e:22:a9:fd:76:5d:fb:51:1f:39:16:70:72:43:b1:08:da:
9b:d6:60:ce:49:f7:74:68:e3:f7:b0:05:df:0e:df:3c:f4:1e:
db:f5:f7:b1:cb:26:6d:d8:1b:31:ea:89:df:ee:75:a7:60:97:
fe:1e:8e:a6:ea:59:15:e4:f0:4e:f6:04:2e:f5:3f:71:a8:1a:
db:99:74:a7:9a:19:32:af:32:d1:7f:0c:fc:4a:a6:3e:40:e9:
8c:e9:35:95:aa:13:8b:fe:53:43:90:e8:b8:9e:3f:86:61:ef:
22:ef:0c:97:09:de:75:1d:88:ef:dd:d9:ae:4a:f5:3a:45:ac:
bc:c0:d5:3b:91:3a:80:a9:68:d8:2d:00:56:eb:9f:ac:f5:5d:
7c:d9:6b:fd:d5:d1:6b:93:f1:0d:63:df:e0:fa:27:cf:20:5e:
11:6e:a9:26:d2:f4:a4:72:3c:48:3e:3f:0a:33:44:2f:08:d5:
35:eb:49:1c:82:07:96:c4:d4:9b:cc:1b:ba:83:6d:a2:03:ce:
16:17:63:a3:fb:28:44:6e:73:50:78:2f:e5:87:43:a8:91:52:
37:a1:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:55:48 2025 by rpki-client