Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: 10C1QjeX0dAU/d73zzo8PbcTIjFgFN+LEsJ0gNBRZTg=
Subject key identifier: CA:BA:F9:C2:1D:20:4E:46:AB:B8:D1:DD:E7:1F:CC:98:69:E2:F5:6E
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0194BB96E73C254A0E1B260DD372B5C85D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:16 +0000
Manifest this update: Fri 31 Jan 2025 09:00:16 +0000
Manifest next update: Sat 01 Feb 2025 09:00:16 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: QpAZYAMFtG2mlGgCNiJgOXwqgUunFzBlVIs74lNRfsM=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e7:3c:25:4a:0e:1b:26:0d:d3:72:b5:c8:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 31 09:00:16 2025 GMT
Not After : Feb 1 09:00:16 2025 GMT
Subject: CN=cabaf9c21d204e46abb8d1dde71fcc9869e2f56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:28:e8:09:64:e1:5d:90:a6:8c:f4:eb:0d:
68:35:b9:3c:81:98:0b:44:2c:d1:e6:1a:fd:a8:ac:
8e:00:f0:26:62:86:86:4b:7e:12:4e:3d:2d:8c:09:
62:0c:1c:1c:9f:82:a7:c6:03:96:38:6d:ec:8b:30:
d2:57:39:40:4a:1a:89:a6:dc:2f:96:6b:d2:cd:2e:
6d:04:2a:f2:81:d9:a7:8e:33:9c:5e:3f:c0:c7:7c:
84:ed:0d:a2:fe:54:7f:5d:62:c5:d0:c7:e8:55:87:
79:91:bc:bc:c3:1f:97:7f:31:8a:34:8a:27:36:e8:
af:71:d3:e3:f6:ee:91:af:1a:1a:34:e6:ac:d2:2a:
33:f1:a9:41:67:93:76:50:0e:13:d4:42:9c:ed:67:
51:fa:f7:15:b1:4b:98:3f:a1:0f:2f:ec:cb:11:5e:
2d:65:b7:8f:62:93:7d:32:50:2b:d4:af:10:d3:3b:
b7:62:18:11:c2:f9:8b:00:65:5b:fa:dc:87:57:3b:
7a:ab:63:f9:69:2e:8f:14:6a:f3:74:fe:9d:4a:2e:
41:a7:c2:a2:08:3e:e5:63:b4:a3:9e:4d:2d:9b:c9:
ad:1f:f8:32:c8:eb:8f:7f:ed:d8:5f:13:d7:74:62:
2d:e8:9b:fc:91:78:b5:1d:27:e4:20:10:0d:c3:be:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:F9:C2:1D:20:4E:46:AB:B8:D1:DD:E7:1F:CC:98:69:E2:F5:6E
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:86:4d:44:a4:1e:9d:bc:a9:3e:35:69:46:41:3c:b3:2e:1b:
5d:c3:ce:62:de:9c:fe:bc:99:84:04:fe:9f:7d:e9:af:66:7c:
73:fe:1c:40:27:d4:ae:18:68:77:0c:93:54:58:6f:c6:6d:cc:
e5:f6:07:91:fc:d7:a0:b8:83:ec:73:5b:f2:ea:7b:ec:36:75:
8e:56:a9:6f:31:d1:57:f2:a4:06:5d:73:30:b5:77:88:30:95:
45:d5:3b:a7:b2:42:c3:0d:35:f6:ce:a0:41:8d:9f:b1:93:f6:
c1:50:b2:6c:8f:16:8c:db:1f:9a:0f:25:1e:41:c7:a5:6b:03:
6a:ce:b9:30:2e:28:53:bb:18:67:b0:8f:5c:a3:78:0e:d2:77:
9e:ae:6c:34:62:89:9e:41:22:e1:cd:69:b5:8a:05:84:ec:a8:
ae:31:6e:e0:f3:57:17:4b:9b:68:ef:a3:33:f4:4c:23:95:17:
ee:35:4c:3a:9c:bb:21:9b:0c:8a:12:f0:ac:76:35:ce:bb:73:
1f:33:af:20:21:14:8d:a4:3d:3e:b4:c7:0d:28:c2:28:ec:07:
e9:e8:c7:cf:24:64:ff:b5:10:a2:5e:1a:63:a2:94:1c:86:49:
b3:1b:05:79:55:82:d6:13:60:1f:50:fc:37:0b:62:63:b6:62:
79:94:50:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:54 2025 by rpki-client on console-fra.rpki-client.org