Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: Sym+84VicOu5/mcf1nq8C7PBSfGex/u9NiRdzDJi4F0=
Subject key identifier: 01:CD:D8:EA:A6:3F:2D:2C:04:58:6A:C6:2E:28:F0:B1:60:18:AA:72
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 0194C507CA8C4780DE655A1AA779ECC650A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 13C0
Signing time: Sun 02 Feb 2025 05:00:09 +0000
Manifest this update: Sun 02 Feb 2025 05:00:09 +0000
Manifest next update: Mon 03 Feb 2025 05:00:09 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: qjt6BWtQbrH9yXvp6OR6UnieLjTNL68Wxoq/dckPyNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:ca:8c:47:80:de:65:5a:1a:a7:79:ec:c6:50:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Feb 2 05:00:09 2025 GMT
Not After : Feb 3 05:00:09 2025 GMT
Subject: CN=01cdd8eaa63f2d2c04586ac62e28f0b16018aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e1:32:66:26:c4:c2:6c:30:b9:a2:5b:dc:d9:
b1:3a:48:9b:aa:e5:06:30:ff:27:c7:06:7a:10:84:
5b:99:a4:3e:cf:9d:00:7f:30:d3:8c:1b:cd:f2:78:
e4:b9:55:cc:0e:a3:50:c4:04:5c:79:4e:6d:57:5d:
9e:7e:4d:39:dd:7b:c7:68:ca:76:e2:1c:2d:52:5d:
d8:e8:77:10:84:8c:3b:69:ca:d9:fc:81:b1:e3:bd:
9f:ae:ac:c3:4d:c9:b4:15:bd:ec:b6:40:3b:0f:6a:
25:1e:a5:26:26:23:46:5e:73:13:17:df:ab:0e:de:
3c:66:8f:98:fb:33:f8:8e:ab:9c:cb:b5:3d:06:ed:
e8:5b:4b:b4:94:1b:73:9a:f6:0f:59:d2:d4:ac:19:
2d:7a:db:7a:a4:1f:aa:23:86:f4:22:74:9d:f8:fe:
b9:7b:67:09:23:04:c9:f4:6b:f9:98:ec:81:0c:8c:
d2:4f:fb:69:fa:33:b0:d5:1c:11:f7:e8:e4:3d:67:
93:fa:39:a6:fb:2c:bb:ac:c0:99:a9:49:26:c6:f4:
08:9e:d0:10:45:4c:cc:c9:ca:9d:4e:00:9b:c9:a9:
08:a0:91:71:f3:52:b7:14:10:c7:2d:87:23:3b:36:
24:ac:64:28:bb:db:19:e1:aa:11:2f:db:6e:54:37:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:D8:EA:A6:3F:2D:2C:04:58:6A:C6:2E:28:F0:B1:60:18:AA:72
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0c:93:b7:da:18:44:6a:02:45:78:ee:2e:2a:c4:f3:cf:86:
3e:9c:0c:fc:d0:04:a1:bb:fc:19:a1:8d:41:7d:d8:bd:2b:af:
ce:8b:df:40:c7:23:83:dc:49:27:af:77:07:5f:d8:5b:af:03:
25:97:fd:29:49:a1:2b:d2:c6:95:b8:90:11:6e:41:a8:c5:e8:
c8:31:2b:e0:7e:b7:fe:2b:a3:07:ca:72:31:30:cc:ca:36:bd:
ad:de:1d:4f:a4:bf:d1:f6:15:6a:10:18:4c:ad:8a:45:f9:bb:
d7:60:e6:e8:e0:ec:fb:7b:2e:6e:0c:eb:5e:d0:1f:24:57:20:
04:d6:92:c3:d9:e8:de:f9:3f:1e:29:95:1d:2d:39:72:f5:e3:
bd:19:5d:f1:a2:72:7a:49:25:7f:b8:b2:eb:42:3f:38:98:1c:
6d:2d:86:3c:d1:b0:42:de:95:c9:6d:3d:6f:ac:a7:53:ac:ad:
ef:72:50:1e:cb:70:3a:8b:c7:80:36:e9:1b:82:c9:b7:01:72:
c1:39:15:f6:e2:48:56:7e:81:7d:98:5b:53:63:cb:2e:77:fb:
d9:2c:3e:9d:6c:b4:06:d7:d3:89:25:eb:72:ff:8a:ce:ec:76:
21:74:eb:f0:26:dd:61:17:85:18:1d:4b:11:a3:ae:7d:64:1b:
09:ec:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:48:08 2025 by rpki-client