Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File: u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier: QlIUxwWagWKWd4WGl2FrF4niia040TnotQqgxKifju0=
Subject key identifier: 5C:3E:F7:24:53:FE:7C:C5:16:8F:03:99:58:67:5C:F3:3A:DE:10:FC
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019512108F61D2CFD7F735557DE88FB91A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number: 0C87
Signing time: Mon 17 Feb 2025 04:00:29 +0000
Manifest this update: Mon 17 Feb 2025 04:00:29 +0000
Manifest next update: Tue 18 Feb 2025 04:00:29 +0000
Files and hashes: 1: YoDPQ8jxpF-CN2VHgKxtvvUR3bQ.roa (hash: g/qsR0k5Ei+SDVv91fZQXrt72mIklFPFEABHdzZ/ZJE=)
2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: E4dfIDQXrKAg/HaWEcD09+cs9CPj47lRSdNdkyZEJQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:8f:61:d2:cf:d7:f7:35:55:7d:e8:8f:b9:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Feb 17 04:00:29 2025 GMT
Not After : Feb 18 04:00:29 2025 GMT
Subject: CN=5c3ef72453fe7cc5168f039958675cf33ade10fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:a4:41:fa:d1:97:f6:d5:3f:b6:dd:ca:6b:
71:54:e8:ad:c6:7a:2e:33:e6:ce:73:68:68:af:4d:
6d:fc:6a:08:31:8c:bb:2d:b4:55:24:63:bd:97:f0:
2d:fc:10:d5:87:88:09:97:9f:1b:87:79:26:e6:46:
3f:d4:11:b3:a2:f6:d8:05:b4:48:a7:18:8e:40:04:
b1:1e:2b:a3:de:6a:59:5f:9e:25:6f:00:ad:6e:d2:
49:60:ad:00:fa:fc:76:52:9f:28:e5:c7:98:c7:f1:
38:bb:68:0e:3b:ee:b6:6b:d0:0e:ce:f6:d5:cf:2a:
a6:32:a7:fb:3f:5a:82:e6:82:33:e3:a4:05:31:52:
1a:e5:d7:ea:84:e7:60:7f:c4:33:2f:b8:59:9d:67:
53:d8:2e:c7:a2:6d:37:87:7c:9e:24:a9:bc:da:b4:
ec:e7:ff:01:4d:b5:5d:94:ba:68:e0:3e:17:83:42:
35:ec:2a:60:74:31:88:a0:47:8f:89:13:ce:1a:0c:
3e:49:20:b4:e0:48:53:8e:cc:74:8b:c4:62:56:46:
47:a9:be:c8:ef:4c:d7:a3:d7:ee:83:c5:1b:80:aa:
69:a7:1f:4e:cc:65:13:ed:f1:4d:a1:10:85:57:0a:
22:65:86:b2:1b:33:cd:8b:e3:97:9b:5d:90:98:46:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:F7:24:53:FE:7C:C5:16:8F:03:99:58:67:5C:F3:3A:DE:10:FC
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:72:fd:33:68:44:c2:f7:40:35:1d:d3:f0:93:96:49:ed:
ee:13:e5:2c:39:a9:15:3b:42:e3:9f:cf:8e:12:a5:92:1e:5a:
59:7e:af:ff:7c:f0:0c:0c:04:9e:86:a0:6a:54:f8:28:c0:b5:
cd:3e:9c:c1:88:c2:ef:7a:55:e5:3d:55:69:25:e4:01:25:d7:
50:8c:16:1f:e8:52:cf:67:0b:64:19:cd:a3:ff:c6:d7:69:fa:
ac:5b:5c:cc:3a:60:1b:f7:03:60:59:51:c0:53:f9:a7:e3:a6:
4f:65:57:36:46:d7:10:9b:a1:b8:1e:a4:71:9d:3f:05:f1:12:
f0:59:29:d5:ab:de:ad:9d:5d:12:00:39:4d:e2:aa:cd:12:6f:
8a:13:f0:36:56:0b:e7:6b:e1:0e:4f:ba:3c:f4:1d:b4:54:bb:
ca:db:65:85:f5:4a:46:6f:0f:fd:a5:cf:be:bf:64:6c:d1:d0:
ef:ec:07:d7:0c:8b:71:87:5b:06:8d:37:c2:74:1c:b3:d6:37:
8f:88:49:20:99:7e:01:4d:f4:a3:5b:d6:f6:9b:ee:1f:1b:14:
b5:2f:d8:22:11:e9:82:54:ac:fa:f2:52:69:94:7e:7b:51:84:
b1:4f:d8:bd:2c:9e:60:68:e3:b1:19:71:17:72:3b:35:f5:1d:
2c:cf:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:11 2025 by rpki-client