Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: YMvriHyOyNJ2pebqUH5MwJhppN6FxSfog172y7PP/Mg=
Subject key identifier: 90:2C:4D:0C:1E:CB:F3:AC:95:53:BF:2C:42:F2:A8:87:36:0C:41:57
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019579B519C882A9EB4205F3E40EB493EEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0373
Signing time: Sun 09 Mar 2025 07:01:06 +0000
Manifest this update: Sun 09 Mar 2025 07:01:06 +0000
Manifest next update: Mon 10 Mar 2025 07:01:06 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: ojx/atY8nnQG57y7xQY51TmrZxnTSK+e38Cz6loW6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b5:19:c8:82:a9:eb:42:05:f3:e4:0e:b4:93:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Mar 9 07:01:06 2025 GMT
Not After : Mar 10 07:01:06 2025 GMT
Subject: CN=902c4d0c1ecbf3ac9553bf2c42f2a887360c4157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:ad:27:39:25:49:76:ba:9e:82:90:9e:be:
ff:c8:35:65:1f:e0:ba:40:87:76:2d:aa:9d:6d:fe:
49:53:b4:28:db:3c:e7:73:f9:b1:47:74:c2:ee:6c:
e3:40:55:a1:53:b6:fe:b2:bd:5e:0d:70:e1:91:f4:
20:13:81:98:cf:e5:9d:64:83:47:6a:97:9a:9b:3c:
35:47:19:01:86:f3:b6:3e:ff:9c:15:87:47:28:ca:
e4:fd:b7:6d:62:f5:1c:e4:09:f6:7f:73:a2:ca:5f:
fe:61:79:bb:5c:a9:99:df:40:5c:08:42:1f:96:e0:
45:fe:b8:11:f1:a7:17:4c:83:39:25:a9:3b:63:81:
09:dd:b0:42:69:ad:a2:ff:a9:51:de:1d:3f:0a:f9:
17:06:02:f4:62:f0:32:8b:ae:b8:66:3c:82:15:04:
51:55:9f:9d:82:7e:f1:87:41:3c:a6:74:fd:71:06:
34:fe:bb:f6:b1:45:ff:c5:b2:5a:bd:3d:e7:85:10:
a6:d7:a6:aa:b4:38:d5:98:d1:a5:4f:31:fd:1f:c7:
ba:71:81:8c:05:82:b2:73:f3:88:90:e4:ce:c5:7e:
3f:f5:bb:af:0f:12:a3:85:d3:24:7e:bd:fe:d4:56:
32:27:7c:54:2e:c2:63:d7:a8:ef:fc:24:ba:b6:0c:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2C:4D:0C:1E:CB:F3:AC:95:53:BF:2C:42:F2:A8:87:36:0C:41:57
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:bc:b7:c3:56:b7:4f:44:38:64:cc:f1:7e:c3:46:2c:1d:
b1:8c:f0:47:35:0c:a3:db:27:49:c7:fa:bd:d2:dc:07:5c:bd:
96:c9:f2:40:7b:e4:ce:f4:fb:9a:dd:db:f1:c8:50:a9:b7:dc:
d4:e2:cf:9c:5a:bf:69:94:93:6d:0e:6f:10:34:33:76:2b:46:
d2:2c:8c:e7:98:9e:cf:3b:4a:c3:51:29:d2:77:84:21:5b:2a:
24:17:ca:39:c6:ee:6f:d5:10:fc:35:14:11:24:69:df:a6:77:
01:0f:24:76:22:2a:bc:c6:14:f9:16:99:c2:8e:86:0c:a6:d3:
af:c7:35:50:9c:a1:c8:8a:6c:e1:9c:77:c5:f1:6c:7d:93:be:
65:43:44:cf:be:aa:56:0e:6a:f2:b3:75:ee:d1:bd:2f:a8:45:
91:85:7e:48:70:20:53:6d:8f:46:1e:c4:b7:92:f9:dd:67:91:
a7:64:8e:bc:af:7c:ca:86:31:db:eb:65:1f:27:46:62:ad:8a:
75:b7:4f:87:fe:08:db:1c:48:c3:72:3c:a3:50:60:fe:fd:31:
a7:5e:d9:4e:f0:df:a0:49:89:6e:bb:fa:0a:8e:b3:95:6b:d6:
c8:8a:98:a3:96:0e:f8:24:6b:29:5c:92:43:84:0e:ce:d6:41:
05:be:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:45:43 2025 by rpki-client