Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: xG9o0Mcr13Mw4bX/uPoje5QvOh9BxWGrUwjwzNakdG0=
Subject key identifier: B0:10:5E:B0:8B:CA:67:FA:55:CC:63:74:03:E5:54:E5:00:CF:81:C3
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 0194BB607374A0234862A46FCE783B93E41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 08:00:47 +0000
Manifest this update: Fri 31 Jan 2025 08:00:47 +0000
Manifest next update: Sat 01 Feb 2025 08:00:47 +0000
Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: f82eL5DIiubGWQUqNdL3U4DeujklqVcpyVPcurc7DGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:73:74:a0:23:48:62:a4:6f:ce:78:3b:93:e4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Jan 31 08:00:47 2025 GMT
Not After : Feb 1 08:00:47 2025 GMT
Subject: CN=b0105eb08bca67fa55cc637403e554e500cf81c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:db:2b:c7:03:48:61:0a:37:f3:06:c2:85:
e5:35:9b:35:17:17:2f:7e:ef:dc:1b:3e:2f:7f:54:
cf:8e:75:af:3a:ef:5d:11:f3:7f:59:49:81:d0:8c:
b4:3c:6b:1d:1c:23:5b:c7:ef:9f:7d:e4:b2:b8:4f:
45:d2:ee:17:ac:83:6a:11:10:12:f1:64:69:c2:e1:
95:ea:cf:b9:c1:ae:fc:c7:69:07:52:61:36:2b:b3:
2b:00:08:c4:15:2b:de:13:f6:d9:34:eb:ea:71:89:
4b:f5:5f:33:84:b6:f0:d2:de:66:65:0b:46:98:4a:
b1:e9:8b:e4:01:8e:c2:24:07:08:55:55:aa:d0:c8:
53:39:a0:d7:c1:22:03:8f:d5:87:b7:09:38:d8:86:
51:54:73:4b:08:61:d8:a5:5b:8e:bb:3e:03:0b:1a:
78:53:78:98:69:03:ee:c8:39:26:90:1c:12:40:a2:
ee:f2:11:7b:a8:62:84:92:ed:ea:73:e0:d1:34:a3:
91:e0:ec:b1:84:40:f8:da:12:22:78:c2:73:bd:fd:
30:78:e4:5a:bf:d2:75:c7:8f:11:89:45:72:cc:9d:
9e:c1:c6:f1:8c:b1:fc:f1:e5:0b:57:b9:3f:07:87:
f1:5b:31:59:89:2d:00:a0:5f:d7:57:14:41:07:c0:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:10:5E:B0:8B:CA:67:FA:55:CC:63:74:03:E5:54:E5:00:CF:81:C3
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:5f:6e:9a:67:0d:e0:d9:a9:2b:27:a2:55:cc:0a:14:85:
38:91:a2:17:e5:95:4d:06:cc:e0:01:d7:50:1f:01:1c:72:47:
39:14:2b:0d:51:8f:47:31:b8:7c:cd:fa:28:86:87:75:9a:87:
2b:38:e5:2d:0c:d1:7e:19:78:5c:75:f8:3a:8a:25:66:01:26:
45:11:00:08:22:fb:8c:a0:94:92:ec:ca:b6:86:45:87:f6:44:
cc:c3:01:72:bb:7a:49:51:14:ab:3b:e7:0b:4c:42:74:79:90:
24:ef:1d:08:95:47:7e:6a:c9:58:5e:6e:38:31:fb:12:12:80:
fd:60:16:4c:66:e0:24:a0:7e:fc:14:db:48:5f:b8:e3:2a:06:
bb:2f:54:5c:29:55:64:5c:81:b7:82:ba:2c:12:ef:5f:f1:e3:
91:4b:b9:25:32:e2:f1:ea:3b:e3:d4:39:4e:04:f5:8b:49:59:
72:a9:d1:86:5a:c9:97:a7:19:ed:19:98:eb:95:66:12:2e:98:
0c:a8:83:8e:4d:89:f0:6f:9a:d8:4f:08:da:2b:22:a2:d7:63:
e8:1d:25:05:91:15:a2:db:65:09:0f:b9:df:d3:8c:e4:b1:e4:
12:38:60:fe:4d:b7:ad:61:96:8c:e6:2b:f4:b4:9f:24:d8:e2:
78:fa:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:19 2025 by rpki-client on console-fra.rpki-client.org