Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
File: bxCL1a3fq_FR2QeePT00Emlmb6c.mft (raw, json)
Hash identifier: sfMpoOPNVbD1nqTbVU2IUGCMQITijbO6eYA4TQE2F/Q=
Subject key identifier: 8F:0D:9D:56:49:7B:29:68:A8:A3:31:FE:39:24:05:2D:5A:32:DD:99
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 0194C388703931AF9C3B33D9411B5A26FD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
Manifest number: 05B0
Signing time: Sat 01 Feb 2025 22:01:26 +0000
Manifest this update: Sat 01 Feb 2025 22:01:26 +0000
Manifest next update: Sun 02 Feb 2025 22:01:26 +0000
Files and hashes: 1: SVN8chXXLiylZ6iSzxPfIxpS6Wc.roa (hash: S3c0fzdOzI2koB/V4F0MudazfO5SBRZZKt7wV9ucqpI=)
2: bxCL1a3fq_FR2QeePT00Emlmb6c.crl (hash: +cdYeh80ECLNyu2pLgfzJdHefjEjgR6r//IvVWtbeh8=)
3: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (hash: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:70:39:31:af:9c:3b:33:d9:41:1b:5a:26:fd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Feb 1 22:01:26 2025 GMT
Not After : Feb 2 22:01:26 2025 GMT
Subject: CN=8f0d9d56497b2968a8a331fe3924052d5a32dd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:c9:6b:90:1a:ec:39:1a:e3:cf:40:19:a9:
c5:22:1f:d0:d4:8d:02:97:d4:b6:f5:84:e1:0b:36:
d5:1c:c6:77:c8:37:10:50:89:08:06:a2:7f:2e:2d:
36:a9:fa:d8:ff:a8:1c:03:4b:c8:39:8a:79:9e:7c:
22:a8:c0:c1:20:b5:61:1d:99:d0:1a:76:e7:f3:cc:
cb:21:2d:31:1f:8a:b0:e6:62:97:d7:97:07:7f:82:
f8:2c:42:14:62:8a:cb:fc:f2:2d:54:40:02:93:6e:
46:5b:4b:3b:66:3c:80:97:be:9f:a9:11:e8:9b:4d:
4f:40:8a:1e:1f:e1:8e:cb:c2:a3:15:0d:1b:e7:11:
be:02:a4:8e:f2:a5:50:87:5d:2f:cb:0a:13:d7:0e:
5e:ce:d6:50:8d:33:bc:c5:1e:cd:68:60:2d:b0:e9:
60:56:1d:53:7a:86:b8:ba:26:44:42:65:30:e2:33:
33:7f:00:03:09:5b:11:fc:32:57:d9:36:6b:74:13:
85:c4:43:11:d2:83:4f:30:80:93:11:8f:9c:50:98:
ea:56:02:ae:e6:54:73:6a:3e:d8:c9:ea:66:b7:c3:
b4:5a:ab:b4:3f:fc:67:b0:9d:d5:21:fa:c0:1e:26:
44:31:fe:49:cb:63:9b:fd:3f:34:1a:62:e5:99:46:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:9D:56:49:7B:29:68:A8:A3:31:FE:39:24:05:2D:5A:32:DD:99
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:79:8c:ce:82:6f:a6:a3:e4:44:95:84:3a:ec:b4:f1:2b:
eb:0f:70:b6:ee:81:32:aa:68:79:7d:1a:24:ee:70:1a:3d:3c:
2b:bc:f5:67:ac:90:6a:1b:26:7c:e1:5f:a4:e3:2c:10:7b:e3:
78:a9:51:40:27:25:cc:6a:92:55:48:c7:80:14:cd:a5:c4:7f:
9e:bd:61:e2:69:04:b9:a6:5d:d0:2e:ac:a1:94:92:0a:66:9c:
2f:4b:a1:8a:36:ac:d6:07:60:f8:78:6f:e3:75:b6:5b:df:7a:
a6:2e:fa:bc:05:2f:b8:3a:7c:44:24:b6:38:dc:a6:97:28:09:
b9:12:74:e6:1d:87:67:ed:1f:b1:b2:78:26:38:e3:72:d3:ea:
42:4b:b0:2b:5d:a9:ee:de:40:80:db:55:8f:3e:12:f6:a0:29:
11:38:fb:80:e0:c7:72:fa:65:45:3f:3d:bc:dd:82:a5:e0:49:
a0:3b:13:41:fd:9d:7b:06:1e:a0:b5:a6:7b:b5:5a:3e:53:c4:
36:d3:38:88:87:c9:86:5e:3b:aa:d8:19:fc:4f:6f:e2:3c:0c:
d5:c8:8d:9b:92:cc:77:10:14:eb:08:d0:1c:f4:e6:e7:71:83:
40:41:7f:ba:e9:58:a3:ba:3d:50:d2:0e:5a:e7:56:a7:a9:5c:
19:05:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:06:21 2025 by rpki-client