Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: DL7Q1zLJJbElbatZVGt+0C7L5yeqh4dS3u4bBFkDAyk=
Subject key identifier: 79:0F:C0:CB:62:18:01:61:BC:24:C2:05:29:EF:89:55:67:78:7E:4A
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0195127E394139F5FCBE317938FD020F6894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 05ED
Signing time: Mon 17 Feb 2025 06:00:16 +0000
Manifest this update: Mon 17 Feb 2025 06:00:16 +0000
Manifest next update: Tue 18 Feb 2025 06:00:16 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: rPqOUm4ruMiYcOqUths5TfBXHAoAKDMII8yy5Wcx7rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:39:41:39:f5:fc:be:31:79:38:fd:02:0f:68:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Feb 17 06:00:16 2025 GMT
Not After : Feb 18 06:00:16 2025 GMT
Subject: CN=790fc0cb62180161bc24c20529ef895567787e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:8e:f0:36:eb:3e:f4:58:6d:44:26:0c:c2:
a4:ec:a7:62:65:d6:45:d5:a7:2d:1c:b1:a7:9f:ef:
1d:55:be:75:0c:7d:1f:72:b6:5f:79:64:9e:04:24:
fa:92:1d:28:3c:cd:a3:2a:28:bd:51:3a:11:89:69:
6e:03:6f:eb:fd:41:77:59:a0:17:eb:55:9b:d2:d2:
4c:f4:3d:cc:ec:ef:8a:48:e1:6b:80:aa:11:c7:53:
32:59:3b:4c:c6:c5:b5:e1:16:dc:e3:f2:18:a5:68:
e7:87:2f:a6:11:19:7d:49:a1:33:78:36:a2:63:aa:
1b:06:19:f5:05:1d:64:a1:ef:a4:61:12:a0:1a:e1:
0f:ec:b7:da:08:a1:88:f8:89:c4:74:b8:a1:47:1e:
86:09:5a:bb:a7:01:ae:34:e6:b2:7f:b9:b8:9e:d6:
f5:88:2e:0d:40:90:4f:d6:28:96:a2:43:f9:91:a7:
ba:7d:9e:dd:fd:88:cd:64:17:90:8c:a6:f3:e4:9b:
e1:c4:f8:d8:fb:5e:33:5b:c9:70:2e:91:f5:68:22:
ce:62:67:d7:6c:e3:95:53:51:b3:b5:a5:8e:40:62:
d2:ce:80:8b:32:3f:01:da:c5:ce:ea:5d:0c:d0:91:
8f:ad:15:55:cb:72:76:cf:cc:d2:22:b3:6f:8d:5f:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:C0:CB:62:18:01:61:BC:24:C2:05:29:EF:89:55:67:78:7E:4A
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:46:5e:2e:80:a0:47:06:01:f3:e0:15:e1:64:73:ae:6d:
a9:b6:29:79:47:2d:cc:81:31:24:2f:86:0d:ff:e5:25:e6:35:
0b:30:99:f9:4d:39:2f:cb:99:0c:ec:ac:dd:d0:79:7f:00:f5:
9d:19:0e:0d:d2:e6:93:6c:79:bc:c0:ce:32:c6:80:9a:57:ed:
a7:66:d4:29:e7:cc:40:e2:90:6d:92:85:8d:92:97:df:72:2d:
c0:85:a7:7d:8b:42:29:a5:f7:dd:c6:46:a1:67:68:0e:24:8a:
99:a8:a8:cd:70:67:f5:55:f4:b7:2d:e2:9a:ed:96:01:36:fa:
47:50:2a:9a:1d:bf:e3:6f:c4:66:85:26:f1:df:0f:e2:ad:54:
25:7c:9c:d7:20:fc:b7:42:da:1d:99:ae:18:c4:6f:fc:9c:9a:
c3:c2:12:cc:e5:dc:b7:0e:88:9d:30:cc:21:91:ee:dc:e8:c0:
00:23:a4:d3:ab:df:4f:e2:45:80:0a:04:03:3b:68:45:22:38:
97:43:f5:3b:40:77:d6:5b:06:7a:94:c5:11:27:89:f9:81:0f:
45:97:0f:92:fe:26:46:f6:98:6a:07:5d:d9:8a:9d:17:0c:d3:
96:de:10:aa:68:ab:a1:40:d8:46:47:ae:7d:09:70:6a:e0:39:
68:f5:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:32 2025 by rpki-client