Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: 8RTVd6YDRY8I3VCYOzOrbNAQwhZCQmqgSYVKu5PW+cs=
Subject key identifier: 8E:3C:BD:3A:D5:BD:BD:4E:7B:E2:5B:E9:51:05:D4:25:6E:85:6F:95
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 0195113534643086C589A5D8C3B2E1692E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 0EF9
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: /N/DwN+si3gKPjE/g8TvRUWPTXrReL1ifItsYOgLRdQ=)
2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:34:64:30:86:c5:89:a5:d8:c3:b2:e1:69:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=8e3cbd3ad5bdbd4e7be25be95105d4256e856f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:9b:3a:3c:65:e5:49:d3:ab:c7:34:41:53:
c5:47:12:99:1d:2e:c9:b0:c4:77:b0:ef:72:81:06:
cc:24:9b:dd:36:cd:70:50:a8:9a:67:a9:0f:16:9c:
e6:f0:40:57:8f:39:96:95:03:9c:ba:13:0b:6c:7f:
c4:96:0f:87:b4:a7:12:ba:66:a9:2a:a0:4f:12:b0:
bd:74:c9:cd:dd:4b:56:4d:69:5e:9d:b1:7c:83:ce:
7a:e2:74:31:25:bb:84:27:9b:ea:89:56:ce:a9:b4:
b7:52:82:a0:28:4d:a7:09:cf:fc:7c:c8:d0:29:99:
19:f6:ac:9d:9b:8b:da:34:3f:a5:d3:9f:f6:93:47:
a5:4d:80:57:b4:b9:38:76:ef:dc:72:b8:c2:01:d4:
83:52:a1:87:70:6c:34:70:8d:ae:c6:de:3f:3b:95:
e2:62:1f:cd:c7:ac:33:76:bc:e1:f2:91:0a:21:65:
6d:9b:04:c2:c0:0d:17:7d:68:e2:36:db:f5:a4:bf:
e1:56:d8:ff:67:5a:f3:e4:14:13:03:9d:99:4d:e5:
79:4a:a6:6b:ac:8c:80:6a:27:70:7d:fd:63:5d:89:
e4:52:9c:c8:b0:f4:11:ef:53:4e:35:f3:e5:4c:e3:
e8:7f:3b:db:11:3f:e1:a4:30:ab:f6:7f:81:50:d7:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:BD:3A:D5:BD:BD:4E:7B:E2:5B:E9:51:05:D4:25:6E:85:6F:95
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:55:81:90:21:18:6a:33:92:cd:7c:1f:0a:7b:27:14:24:f5:
26:d8:b1:e1:a4:f2:ea:4a:f8:04:02:cb:22:a8:70:a5:1d:7e:
c9:d6:fb:92:82:60:71:5f:7d:a7:23:44:a0:e6:43:55:d0:78:
fe:ea:62:12:4b:08:39:d8:92:70:57:09:6a:ba:29:ce:f2:9a:
b4:a1:f1:82:f8:07:c5:b6:96:7b:a3:3e:00:90:aa:78:c8:63:
ed:a4:ac:23:1b:ed:63:95:a8:85:24:d7:3a:77:f6:95:86:bd:
1d:1e:78:37:22:bd:2b:ef:69:cf:da:e8:24:a8:f4:46:d4:73:
e1:ba:7e:48:59:7a:17:2e:ef:f9:46:55:05:f4:42:56:94:f9:
06:e8:ca:41:20:06:d1:40:be:c0:15:e9:e3:b6:1f:26:1a:4b:
c2:6c:e4:b4:52:13:54:29:29:12:e9:e0:d9:59:7c:da:c1:53:
69:2e:8b:84:41:df:8e:a9:f7:b3:6d:d0:33:e9:e8:41:d4:67:
6b:be:9b:8d:29:89:1b:30:2a:ef:bc:13:31:e2:9c:3f:9b:28:
0a:f1:9c:c9:20:4a:a7:07:8a:d4:a9:8a:b1:a9:e9:3a:0e:ec:
7f:70:ac:35:39:86:be:eb:b9:93:2f:20:77:1f:92:45:34:8e:
3f:89:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:26 2025 by rpki-client