Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: tJs4E0uwXOMbOFc4VsrKJzTjw6MbSTXDD4+EToVd7Ic=
Subject key identifier: 11:4D:61:FB:CA:76:AB:47:46:E1:58:40:B1:13:48:2D:7C:52:82:C2
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 019512472F6EA09F2D7E50D6E6148DCDD197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 129D
Signing time: Mon 17 Feb 2025 05:00:09 +0000
Manifest this update: Mon 17 Feb 2025 05:00:09 +0000
Manifest next update: Tue 18 Feb 2025 05:00:09 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: PTXiyyZwh/vKsU7Tj67V89kZjPgGIPCwLM1/fMiLOa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:2f:6e:a0:9f:2d:7e:50:d6:e6:14:8d:cd:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Feb 17 05:00:09 2025 GMT
Not After : Feb 18 05:00:09 2025 GMT
Subject: CN=114d61fbca76ab4746e15840b113482d7c5282c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:86:27:98:58:dd:63:ae:90:1c:81:d6:51:
55:3c:05:97:10:77:e1:81:06:04:3f:bd:23:03:32:
2f:4b:f7:49:fd:8a:2e:5f:6f:2a:92:77:24:06:d1:
61:c9:0c:24:0a:a6:99:a4:1c:d1:7d:98:60:3c:4b:
df:ab:17:07:89:89:01:3f:1c:31:e3:79:4d:71:66:
b3:9c:7e:d7:8d:f2:94:37:3b:c3:1c:9f:95:f2:7f:
77:5e:2c:2d:a0:7b:f4:96:7f:d9:92:52:4c:50:bd:
67:99:db:94:b2:e4:d8:72:bc:a2:fd:8a:33:31:f2:
55:a3:7b:d3:bb:b8:dd:24:11:10:14:7c:fc:79:36:
cc:a2:f3:cb:e9:df:ba:ce:55:7b:b7:98:25:63:34:
06:a5:0d:e8:6f:f7:9e:98:09:a9:0b:23:98:86:0a:
95:09:82:5e:92:d3:75:32:0e:05:f6:10:21:5c:36:
e6:8e:77:3b:0b:f0:98:45:87:e0:2e:40:04:55:ea:
26:b3:85:c2:2f:d3:40:1b:68:a0:5b:51:7f:00:36:
b8:a3:84:f6:46:b7:89:2b:59:ec:06:6d:17:d9:21:
68:c0:70:e7:85:3c:40:dd:ed:09:71:d7:ba:fd:5f:
a1:5a:2e:ea:34:42:f6:29:78:6f:ad:3e:ce:ca:b6:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:61:FB:CA:76:AB:47:46:E1:58:40:B1:13:48:2D:7C:52:82:C2
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:7b:fb:33:e9:e9:66:5d:c3:ed:91:e7:82:e4:f9:97:bc:
b8:eb:63:c8:98:a5:51:db:d0:ab:60:fc:f7:bd:bb:c5:64:6b:
10:8c:6a:c9:0a:50:40:04:88:41:73:6b:f9:6a:56:dd:c7:19:
79:70:b6:23:02:31:71:8f:56:34:89:3e:0e:d8:a0:36:d4:23:
63:86:80:4d:de:03:f2:9a:2d:55:d8:f2:90:37:d8:d6:2f:aa:
b0:0b:bf:89:55:66:63:84:44:b8:b8:52:42:d3:01:13:cc:1f:
71:59:15:8d:07:1b:ce:ba:50:a1:46:1f:cb:4c:ec:70:69:ee:
c9:9a:07:28:0f:70:15:00:85:d7:86:dc:0f:8e:3f:13:a5:ab:
b8:58:04:16:08:3d:fb:63:1f:c3:bc:c4:4f:0a:80:6d:b8:c0:
17:e1:77:95:50:50:01:ec:ed:27:6e:30:31:5e:fd:e5:4f:de:
37:28:dd:6c:4a:ab:04:47:39:ce:a0:3c:70:f8:4e:5e:a0:e1:
a9:69:f2:21:f3:d1:f4:dd:f8:b2:f9:3b:8e:d0:8a:0a:c5:09:
8d:bc:ab:38:46:42:e0:25:20:ab:b2:3a:29:be:e0:3e:47:67:
de:4a:fd:ad:78:c8:74:0e:8f:44:f2:93:c8:91:36:77:8f:f8:
f7:cf:55:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:29 2025 by rpki-client