Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: kBSQBdwfH37PsxjgvxhgtG7v2K3q9C4BGmP5HhvB3qI=
Subject key identifier: 13:F9:BF:86:A1:25:6D:99:E1:ED:BA:B5:BB:6A:87:56:A6:7B:C3:BF
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 01951210B9293B4A29B461E1C69B3CE62BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 10A2
Signing time: Mon 17 Feb 2025 04:00:40 +0000
Manifest this update: Mon 17 Feb 2025 04:00:40 +0000
Manifest next update: Tue 18 Feb 2025 04:00:40 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: fG8zcZac/Ak2q77++1l58XbODWPtuQBX95j2VFM3fcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:b9:29:3b:4a:29:b4:61:e1:c6:9b:3c:e6:2b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Feb 17 04:00:40 2025 GMT
Not After : Feb 18 04:00:40 2025 GMT
Subject: CN=13f9bf86a1256d99e1edbab5bb6a8756a67bc3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:59:bd:78:96:b1:a8:e5:4f:8f:24:87:4a:
85:1c:1e:c7:14:ba:bc:38:ed:f7:6e:23:0b:21:42:
9d:d6:3c:e2:74:87:8e:15:43:ae:ad:d8:fd:ca:1e:
30:54:dc:b7:db:a5:7a:5a:db:60:28:a5:7d:80:13:
fe:47:e6:1b:0e:7b:ed:44:b7:b9:ad:62:45:3b:1c:
d6:85:9b:75:a5:dc:9e:b4:ce:f3:04:be:9d:ef:fd:
ba:c3:f4:99:5c:c2:e1:20:32:86:43:30:4a:5d:ee:
34:fa:4c:b7:19:bf:65:60:f5:48:0d:9d:d6:32:b3:
6a:d0:4b:ca:6a:c0:d7:90:e3:52:42:ae:d2:58:87:
27:19:7a:24:00:49:31:8f:3d:84:6d:d7:c3:25:50:
08:b0:cb:06:cb:74:35:7f:3a:43:8a:d7:2c:65:83:
32:f5:b0:fa:1e:7b:2a:08:f2:50:b9:30:44:6f:71:
c4:0f:f1:34:7a:fe:f1:af:6e:76:09:28:d2:68:42:
9b:34:76:2f:60:e1:ab:88:e6:f0:4a:41:1f:b7:e0:
0f:0f:c7:a6:ad:13:fd:54:ac:96:11:2c:af:50:a2:
51:90:92:eb:af:c1:29:d4:57:22:e9:7e:41:06:71:
91:bc:8e:30:8c:c8:2a:c2:f0:da:1b:4d:3d:f0:5d:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F9:BF:86:A1:25:6D:99:E1:ED:BA:B5:BB:6A:87:56:A6:7B:C3:BF
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:55:d2:5a:5c:bb:4d:14:f3:00:63:24:dc:b1:04:dc:94:94:
49:95:30:a2:ca:24:da:0d:d9:9a:e5:fc:b1:23:45:46:c3:fd:
15:3c:8a:61:da:0d:a7:f6:ba:5e:d3:f0:2d:21:9d:77:51:01:
c9:dc:67:8f:e3:04:6b:f8:74:57:b9:fa:35:6f:b7:08:33:cc:
36:5f:ca:0c:5c:5b:d4:18:a3:f9:97:20:a9:a1:f8:66:a4:0a:
aa:52:e4:ba:33:88:9f:f4:10:94:83:1a:cf:63:c4:ba:0d:59:
87:42:d6:1e:d2:fe:41:7d:6c:af:82:08:c8:bc:1f:ea:3d:6d:
94:24:3e:9e:27:09:29:b6:6e:0c:56:a3:58:7e:a3:ec:24:2a:
ac:3d:da:09:b9:bf:48:e6:6a:bb:57:ce:27:9f:89:0e:e7:e7:
f2:43:24:dd:ff:78:93:bd:7b:47:78:b1:76:8e:74:50:87:e4:
7d:f6:11:01:5f:69:7a:d2:dd:f6:72:3e:5d:c9:68:57:5d:9e:
06:9b:7c:18:95:e8:a8:7c:b0:d2:f4:5a:36:fc:19:8a:12:4c:
48:32:39:d4:7a:46:d6:da:52:fa:58:2f:f0:06:71:46:c0:55:
60:a4:93:d3:9d:fe:45:b8:27:eb:b6:f2:2a:f8:f7:80:8b:e2:
e2:97:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:48 2025 by rpki-client