Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: 2jEmOMA2qBaNEXyKPTbACoP78zQ8hNHbYUx4JpH4XVA=
Subject key identifier: 70:A2:09:86:74:5A:18:91:75:36:D2:65:CD:94:42:9F:4D:C8:71:A1
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 0194BB2923B9D82FBFFCF90D726B81B87505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 088D
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: M7xrME9/MRSCUJy2iuNU0TtZ92t3AQo9qIPhtKkb/2Y=)
2: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:23:b9:d8:2f:bf:fc:f9:0d:72:6b:81:b8:75:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=70a20986745a18917536d265cd94429f4dc871a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:27:6d:7e:aa:75:42:3e:7c:5a:05:65:8b:
ce:a4:7c:ae:f7:a6:91:a7:cd:d7:98:9f:76:4e:e4:
a2:d4:ef:c4:e6:e5:1e:92:86:ca:77:56:35:e3:37:
85:cf:a7:d6:ca:a5:ce:e3:ee:b8:0c:c6:25:02:e4:
1b:d8:93:0c:6a:82:80:00:cb:14:61:a2:1b:d4:9a:
9c:c7:55:ac:cd:07:93:29:c5:c4:ee:90:00:90:55:
e9:ee:fe:7c:12:26:1f:44:2d:0c:28:a4:3e:1f:9b:
7b:31:09:17:f0:48:aa:b6:93:35:60:7b:3b:59:30:
46:af:b9:fb:17:44:03:9a:2f:1d:a0:73:31:8e:2a:
21:9e:1b:87:01:04:3c:3c:d6:56:66:ac:c3:34:43:
63:2d:4c:a1:04:1a:c0:f5:d4:91:61:db:32:a3:5c:
b8:83:db:b1:77:62:91:b4:1d:b9:aa:e4:e0:92:25:
45:69:9e:ee:a6:35:7d:eb:52:53:7f:9f:fa:2f:da:
81:c9:e2:63:81:6a:f5:9e:18:e9:71:8b:71:12:89:
76:f3:5b:0f:d0:11:57:ad:1c:4c:1f:eb:74:b0:58:
d5:80:61:6f:22:24:37:bc:5f:70:ac:ed:70:6c:f4:
d3:28:55:76:06:60:97:bf:63:44:02:20:f4:0e:a6:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:09:86:74:5A:18:91:75:36:D2:65:CD:94:42:9F:4D:C8:71:A1
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:78:0b:62:ed:77:a1:e6:f4:09:bb:3d:49:9c:0e:ec:22:a0:
66:fa:4f:31:6e:a3:91:a7:a2:43:97:11:93:8d:98:98:0a:96:
17:6a:db:c3:6e:9d:97:71:0d:b4:9d:f2:61:be:f5:33:57:35:
58:e7:f0:da:58:74:95:ac:0c:a1:32:c1:0f:d7:5b:b0:15:c6:
31:4f:b9:07:9c:17:15:51:37:d4:b6:58:27:1d:8e:e9:9b:14:
9c:74:19:28:59:35:0c:d3:dd:e4:da:85:7f:32:ad:0b:c0:85:
58:8c:03:2c:8a:12:e1:d1:82:3d:ee:a8:37:75:11:f0:34:11:
f9:c8:d0:48:da:70:db:46:f1:be:fc:a6:f6:c9:8a:b4:5b:39:
4f:8a:ea:6b:63:0f:70:ae:ce:16:76:f5:62:e8:ab:8c:08:ae:
9e:23:af:79:02:3e:c9:24:9a:3c:f1:c3:bc:c7:90:d1:72:a0:
8c:b0:7c:b7:98:8e:16:69:43:5d:ee:f4:9a:22:c6:6e:79:83:
99:ac:5f:5d:b6:cd:2e:a4:9f:c9:bc:f9:48:74:d6:3f:bf:60:
51:ef:af:b5:27:eb:30:99:40:26:72:c1:1d:e5:18:96:bb:77:
de:27:b4:f7:1c:7a:63:61:60:16:55:29:2c:62:19:6f:e6:4e:
10:60:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:42:39 2025 by rpki-client on console-fra.rpki-client.org