Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: 4wBzDUBX94IfNkNQWdrd9WHDk47RYFeaPn6FRi9xsIM=
Subject key identifier: 1B:A4:A5:39:CE:8D:FB:81:C9:96:BE:5B:85:E7:69:D9:89:6E:FE:A1
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 0194BBCEDBDB5ECFA4775F7570C141D8C871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: Ngjc8H5rIpFOpG80HUa6TnJX9hUNfwjI1po9HGHKpQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:db:5e:cf:a4:77:5f:75:70:c1:41:d8:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=1ba4a539ce8dfb81c996be5b85e769d9896efea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:74:b3:88:fc:dc:f9:9f:f1:9a:04:15:bb:
b0:8b:9c:3f:cd:a0:39:34:c9:67:54:50:95:5f:70:
d9:d0:f3:aa:c7:3f:89:12:d1:6c:aa:33:ce:00:9c:
3d:a0:5c:9c:93:f0:71:7e:b2:1a:e7:a8:bf:4c:ac:
e1:1f:46:5f:a1:c0:16:6f:80:ca:f7:25:2c:2d:eb:
13:92:42:a8:6c:55:53:2f:80:3f:25:38:e9:5d:df:
cc:58:a6:6c:fb:02:49:f2:af:aa:26:99:63:46:f2:
5e:2f:c0:f4:59:19:ba:27:e3:2f:d8:5a:6a:9e:1d:
24:00:f6:18:d8:56:ad:36:65:a4:c6:c0:32:fb:d2:
96:e9:5d:ad:8a:57:3e:0c:32:bf:80:ba:f2:52:c8:
b2:4e:10:de:07:47:2d:d2:38:d5:32:eb:c6:b2:84:
94:dd:ce:57:65:f6:89:e2:58:9c:7c:c9:ea:44:f1:
03:af:c7:7f:c6:47:b1:d6:2a:6d:97:56:d1:a4:ed:
9f:8d:26:29:c8:fa:52:2b:48:9b:d8:30:0d:d7:a5:
af:27:16:f2:59:e4:61:86:03:1b:03:01:10:8d:c6:
a4:6e:dd:10:46:9e:18:81:9d:18:06:bb:11:aa:74:
83:08:5e:0f:bc:78:23:7d:67:6a:07:ef:c6:4d:60:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:A5:39:CE:8D:FB:81:C9:96:BE:5B:85:E7:69:D9:89:6E:FE:A1
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:96:bf:83:a3:6c:1b:b7:89:21:ab:1a:f8:36:7b:38:36:
25:f0:1b:e6:00:d8:b8:3f:ee:59:4b:c4:77:b7:70:65:49:6f:
04:27:d6:14:3f:f7:2a:74:ea:82:34:f4:b5:49:e1:98:62:c6:
e6:19:b1:5f:25:f7:69:95:28:c1:10:54:4a:fc:f9:db:d6:3b:
b6:df:60:a4:7a:c7:19:05:0d:7d:7f:04:64:5b:a5:8b:a1:e1:
8d:26:a2:bf:38:05:e0:32:a6:41:20:8a:bf:47:f3:f9:26:c5:
7a:22:4f:4b:df:5c:cb:ad:61:7c:42:a7:93:c7:6b:b7:03:31:
64:58:32:25:cc:2d:ff:88:a7:f1:59:6a:9b:f6:c7:62:30:06:
8c:d4:00:82:3a:08:59:6e:74:b3:32:54:25:ca:b5:f8:60:2e:
e2:52:1c:7c:d7:0f:0c:9a:42:8b:d2:25:fb:eb:a3:19:e9:01:
14:ef:84:59:7f:8f:e8:37:54:f1:bb:22:01:ac:dc:ba:5a:b1:
e0:fd:80:78:cb:20:29:bd:d3:b1:9b:29:6b:f8:d6:ec:cc:39:
ef:94:5c:74:02:5f:d4:97:27:d2:5a:00:ba:9f:45:a9:2a:c8:
a4:5d:6e:97:dd:72:27:3c:f2:b7:42:07:f9:57:c1:b2:9a:ea:
73:56:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:01 2025 by rpki-client on console-fra.rpki-client.org