Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json)
Hash identifier: ZwpbVRRmkW6I2zJzh1DKt+XHOqrDI4Wv3I/RX8WDtDE=
Subject key identifier: 11:EE:E3:C1:95:91:02:B0:3D:A4:9A:3F:DA:F6:C8:AC:00:6E:5F:EF
Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Certificate serial: 0194BABB4772B6722ACAC39AE48DF5FEEBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
Manifest number: 0F29
Signing time: Fri 31 Jan 2025 05:00:23 +0000
Manifest this update: Fri 31 Jan 2025 05:00:23 +0000
Manifest next update: Sat 01 Feb 2025 05:00:23 +0000
Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: nkSRYOSXa8lPtWDUEObWtMK1/FYK2jos+c4/RvBY6sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:47:72:b6:72:2a:ca:c3:9a:e4:8d:f5:fe:eb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67
Validity
Not Before: Jan 31 05:00:23 2025 GMT
Not After : Feb 1 05:00:23 2025 GMT
Subject: CN=11eee3c1959102b03da49a3fdaf6c8ac006e5fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:e3:22:30:df:33:d9:c9:b1:1e:ff:3f:42:
cb:81:ab:8e:cc:dc:86:ad:ae:c2:3f:d8:3b:a4:e9:
2f:09:d2:e4:b2:b1:ec:ae:63:22:7a:62:8b:92:21:
24:89:45:22:be:76:f5:ad:c5:31:ac:8e:61:af:dd:
cc:e1:88:75:63:09:86:81:a0:34:60:8c:fc:12:df:
3c:ea:91:64:cf:c9:98:e2:9a:bf:88:ce:40:f1:38:
28:d1:39:31:e8:ea:b4:8f:49:c1:d2:5b:c4:2a:91:
c0:2a:cd:fe:08:2e:52:0b:bb:9e:26:ab:f2:ff:19:
7b:ad:e5:9f:e3:21:12:41:b1:3c:bc:60:94:40:66:
cc:b7:13:71:db:82:5a:ef:3f:2b:2c:6f:9b:e9:07:
95:fb:66:08:b6:6d:64:f2:33:b3:37:e9:fa:13:9b:
64:e6:c5:d0:d6:93:a7:90:69:20:4c:b8:66:ad:7e:
3e:82:6d:1a:a8:eb:1d:90:de:c6:45:4c:86:a3:a9:
eb:a6:98:76:4b:93:45:dc:23:e7:6d:c1:6c:e0:3c:
63:2a:bd:6d:6c:33:ce:7c:51:b5:9c:83:08:4a:e8:
68:9a:f1:2b:b1:96:65:e8:87:6e:b6:3d:d5:b6:ab:
ac:e8:f2:d6:f1:8a:b5:d8:76:4b:7b:d7:a1:c2:24:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EE:E3:C1:95:91:02:B0:3D:A4:9A:3F:DA:F6:C8:AC:00:6E:5F:EF
X509v3 Authority Key Identifier:
keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3b:f7:e2:c5:cd:61:b6:20:60:9b:2e:75:7a:25:3b:5d:c9:
21:67:de:4d:2b:dd:3b:e5:b7:a6:2d:bb:27:2f:16:e2:5e:62:
b7:e0:32:18:ac:c1:19:5f:51:49:31:bb:58:50:39:79:5d:3d:
b4:11:c4:71:99:f4:c1:a5:4f:b7:a8:86:f8:1c:5e:ad:de:93:
c7:12:de:81:1e:28:fe:22:ba:29:d3:5e:97:44:1c:cb:17:b6:
f8:0e:3b:64:69:c4:bf:2d:68:b8:da:ba:58:1f:32:53:ec:11:
4c:17:a0:87:ad:00:c7:5a:d2:5b:db:c1:fa:70:19:37:4d:02:
24:72:ec:6b:39:d8:69:16:01:78:25:b0:45:b1:6f:2e:0d:74:
44:c8:bc:86:7a:eb:7e:bb:2a:d9:6b:8f:da:e4:0f:91:8e:e7:
13:11:7b:3b:3b:84:53:1c:30:20:61:6e:22:80:24:28:34:c0:
43:60:47:42:c8:30:24:8c:2f:dc:b2:e8:5c:3e:41:c6:95:7c:
c0:39:aa:52:4c:61:31:37:92:df:96:76:5b:d4:b2:41:04:70:
e0:62:69:35:66:c2:c2:fc:99:4a:52:5f:bd:9e:cb:fd:df:07:
9c:ad:03:9e:29:e0:fa:65:31:80:d8:a4:e4:e3:73:a9:b7:40:
30:f3:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:36 2025 by rpki-client on console-fra.rpki-client.org