Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: Pft5nAD1inADGjQQKUtTZP4Cvaj+D+9mzZcFzyveh8s=
Subject key identifier: AF:7A:8E:29:33:A7:68:B3:12:CA:0B:68:75:52:1A:42:2B:DE:1E:0C
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 019510FE2CC705B6079F001A9F458B74AF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 13E6
Signing time: Sun 16 Feb 2025 23:00:47 +0000
Manifest this update: Sun 16 Feb 2025 23:00:47 +0000
Manifest next update: Mon 17 Feb 2025 23:00:47 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: gQPS62n/oE6aSNC0sAqkzjYpvJYmOlRK/9FGhKo1CBs=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:2c:c7:05:b6:07:9f:00:1a:9f:45:8b:74:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Feb 16 23:00:47 2025 GMT
Not After : Feb 17 23:00:47 2025 GMT
Subject: CN=af7a8e2933a768b312ca0b6875521a422bde1e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:bd:0a:b4:43:86:49:08:dc:0e:7c:55:2f:
f4:85:ad:f3:bd:2e:71:e5:7f:3a:26:8e:b2:89:d7:
e6:15:52:47:1e:e1:0a:31:09:2d:32:4b:ea:2a:d6:
55:ca:c4:f1:ef:bf:cd:f2:31:ad:c4:c5:10:a8:76:
7e:9b:25:a0:ae:d1:87:c2:e7:7c:86:1f:7d:4a:8b:
b1:c1:be:b6:78:f8:1e:6d:90:22:29:9c:89:0b:a4:
95:c8:e9:c6:cc:fe:d2:bd:c9:f6:d6:94:b3:23:67:
9e:ac:63:6f:20:8f:51:17:1b:7c:67:fb:94:ee:7e:
24:06:82:99:5c:77:a8:96:04:83:e6:2b:bd:d2:db:
9c:83:ae:5a:2a:0a:20:be:08:86:44:70:87:3b:56:
30:ca:58:c0:5a:d9:98:13:a8:f5:dc:5f:6c:c7:ec:
21:9c:34:85:1d:b5:f5:b6:ee:d9:cd:80:88:39:de:
75:05:e3:ae:af:2a:f0:2c:96:9c:c2:51:2d:c7:90:
4e:79:00:ea:f0:28:08:04:4d:a4:ae:c4:d9:5c:a1:
4e:f8:bb:2c:8e:0a:3b:a8:48:2b:ad:7b:4f:72:17:
a7:bc:dd:e9:7f:2d:14:77:b2:f6:0d:c1:e5:8a:a9:
a1:89:72:80:6b:b4:23:e3:42:07:2b:42:66:8c:d2:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:8E:29:33:A7:68:B3:12:CA:0B:68:75:52:1A:42:2B:DE:1E:0C
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ee:44:c0:cb:2d:7b:d2:dc:91:0b:b9:31:f9:c7:92:26:5e:
3b:da:41:5f:ad:7f:23:f3:1b:46:4a:42:06:5e:65:b7:31:a0:
79:c7:43:16:42:0a:17:57:84:d8:e5:89:87:3c:fa:c0:c1:32:
29:69:ef:e0:56:c2:a7:ee:05:78:c5:5d:6f:f6:5c:61:34:a0:
ed:85:9c:fc:80:e1:75:70:9d:68:76:46:91:7f:f2:3e:2b:5a:
62:82:6b:b7:db:1c:e4:ec:e1:b3:13:64:47:7f:ce:22:8d:99:
9f:98:77:68:c7:71:bf:e3:4d:fd:71:03:95:c8:fb:37:31:19:
7a:56:a6:f8:2a:66:1e:68:91:ad:3e:99:a0:ba:93:20:30:f4:
f6:ab:21:4f:aa:19:55:8b:c2:5e:94:81:3f:95:55:cd:86:5e:
ec:51:90:af:83:fe:11:88:8c:76:fc:02:fb:22:a2:c8:7b:c0:
e0:91:c5:27:a7:48:b2:0a:ea:b0:e8:82:9c:23:2b:0c:cc:e4:
b5:64:68:dc:82:a9:07:ef:e6:b3:66:f1:e6:db:52:90:10:bd:
fc:8e:05:22:42:c8:f5:12:cc:b4:a6:40:58:88:59:0a:f2:80:
fb:9e:51:26:73:27:09:55:3c:d4:49:3b:53:4e:82:fe:27:48:
04:dd:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:39 2025 by rpki-client