Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: GRXTmlin21EDEGVS3vMae5wTtzyRGhXTb0FVuxhsVLQ=
Subject key identifier: 54:19:C7:3A:B1:70:32:E4:AE:EA:F1:44:E6:43:0B:7A:5E:64:80:4F
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0195127E115E8A8225312A8F72147DC1E57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 06:00:06 +0000
Manifest this update: Mon 17 Feb 2025 06:00:06 +0000
Manifest next update: Tue 18 Feb 2025 06:00:06 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: npa3rM5dZu7FMetPj6D4rY6grEzo8bIRvixhK9YJ3QY=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:11:5e:8a:82:25:31:2a:8f:72:14:7d:c1:e5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Feb 17 06:00:06 2025 GMT
Not After : Feb 18 06:00:06 2025 GMT
Subject: CN=5419c73ab17032e4aeeaf144e6430b7a5e64804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:d5:54:2d:81:4d:c8:59:6a:48:de:2e:f5:
01:f9:90:24:72:a4:72:77:6f:a0:2a:15:33:39:77:
6c:f2:1f:3f:9a:3a:24:74:3e:d8:b6:c0:4a:e0:a8:
0f:60:98:a4:2d:ca:5a:8b:09:ff:e5:46:6a:bc:52:
bf:5c:b9:9c:4c:31:b6:a1:d8:ba:af:9f:93:36:d2:
c6:59:2d:10:6b:d8:9c:90:77:18:7c:3d:66:8a:ca:
34:62:75:f7:1c:48:cf:98:ed:20:c1:04:ec:54:66:
54:99:c3:b2:f8:70:a2:dc:78:84:66:e3:e6:ca:92:
0f:47:7f:e3:f3:c1:c8:5f:05:b7:00:52:3d:86:f0:
41:a4:f7:d8:ab:ca:4e:d4:7f:af:c1:0f:ee:29:18:
1e:88:22:e3:c7:76:e3:d1:e6:67:62:ac:39:72:91:
3c:bf:3c:9e:ff:08:ff:5a:a5:a5:a7:7e:27:1c:08:
4b:95:e2:65:db:98:1f:4a:56:21:fd:75:e8:68:bb:
9e:2b:c2:a8:ce:85:e3:8b:cc:ed:38:43:4c:62:e1:
49:94:e6:5b:89:28:03:cf:77:96:b6:ee:57:50:17:
2d:41:ba:b3:4b:8e:fc:66:f3:b2:22:a4:dd:77:e4:
f3:4a:b2:ee:86:4d:36:f4:2a:a9:13:74:7d:4e:2a:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:C7:3A:B1:70:32:E4:AE:EA:F1:44:E6:43:0B:7A:5E:64:80:4F
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1d:35:30:31:21:89:81:88:e3:3d:45:b4:7a:34:b9:e2:65:
ab:9f:49:ce:24:58:b9:47:6a:48:33:c2:0b:d3:03:29:63:ac:
bf:61:af:01:df:2d:6f:56:20:a0:8b:f7:c7:33:54:d2:66:03:
4e:d7:d8:3e:48:30:ab:5c:29:af:9b:2b:3e:47:77:48:0c:cf:
61:fb:86:4a:29:16:de:b8:0b:64:ae:dc:04:65:36:f7:f9:09:
80:01:2a:da:6b:d9:c5:24:9e:cf:d9:01:52:dd:40:19:08:16:
df:2a:34:82:60:02:33:cf:54:45:c8:5a:dc:d5:2b:b1:83:2d:
dc:15:02:27:fe:d6:93:53:b9:73:39:d5:d2:44:07:a4:3d:60:
81:69:8a:0e:5e:1a:a1:66:79:94:c8:42:2d:ef:5c:d9:8f:81:
aa:2b:f4:ec:2f:56:5d:0f:cb:7b:03:3f:c2:d0:b2:68:41:95:
ca:8b:80:24:af:b0:e1:4f:b7:2b:e0:20:20:c3:b0:3d:28:f4:
ac:06:5f:a2:85:db:66:5b:49:c2:4b:bd:aa:41:b9:04:ab:77:
0b:19:a9:29:c8:a4:24:d4:38:a1:0c:50:9e:fe:67:e2:11:b1:
fe:d6:95:d6:8d:81:fc:ff:07:a9:9a:29:31:e2:75:37:16:56:
b3:04:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:48 2025 by rpki-client