Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: LboBIEM8kPIlMFyp4qOH2AEo2LQEl62O4ZcGH2262l0=
Subject key identifier: 4A:43:B5:2C:98:A3:E9:E1:F6:D2:C4:B0:29:7E:E0:A7:58:D7:A9:3A
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0194C5080AE7171C24B9F3F9CB172CCFE01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0BE3
Signing time: Sun 02 Feb 2025 05:00:26 +0000
Manifest this update: Sun 02 Feb 2025 05:00:26 +0000
Manifest next update: Mon 03 Feb 2025 05:00:26 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: UFPtU8a+mILdAX4+CiXhmtxh0NGSLMrTiFk7+Q0uBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:0a:e7:17:1c:24:b9:f3:f9:cb:17:2c:cf:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Feb 2 05:00:26 2025 GMT
Not After : Feb 3 05:00:26 2025 GMT
Subject: CN=4a43b52c98a3e9e1f6d2c4b0297ee0a758d7a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:98:2a:7d:9d:c4:16:f1:e1:cf:dc:c3:e3:
bf:6b:86:d0:6d:4b:9d:e1:56:3c:42:c9:05:f8:98:
a0:a0:5e:96:63:76:6d:0e:78:36:70:5b:b9:d3:3c:
89:88:2c:4e:86:b6:e6:a0:08:46:4b:07:f1:4f:70:
e7:d5:17:79:8c:9b:f8:66:1c:e9:b6:03:6f:84:24:
08:fa:9b:39:8a:bd:bf:05:e7:5f:e9:39:e2:6b:95:
7e:6a:bb:aa:15:90:5d:08:71:3a:71:92:cf:1d:fa:
37:95:ee:67:67:30:9c:01:c2:95:83:f8:a8:51:87:
7b:95:a3:a4:84:5d:30:81:26:b2:09:db:b4:77:db:
fb:40:ae:51:e1:2a:2d:e3:5a:14:94:61:2c:7f:e6:
7a:61:8a:6e:1b:25:2d:da:03:96:11:88:84:56:3d:
84:98:5e:47:be:d7:f1:af:b6:9e:0b:ea:b2:db:7f:
42:21:56:ac:d2:a7:f3:9c:a2:ba:fb:dc:c9:d7:c1:
27:a1:dd:d3:66:65:2c:cd:80:8f:df:37:36:b1:27:
6d:1f:7d:71:a6:01:6c:20:ee:e4:27:d1:cc:f7:89:
45:27:c8:a8:11:b7:3f:79:8b:5c:34:d5:55:9f:d2:
25:f1:03:ee:b1:d7:d6:a9:cb:90:67:1d:7b:49:f1:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:B5:2C:98:A3:E9:E1:F6:D2:C4:B0:29:7E:E0:A7:58:D7:A9:3A
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:52:0e:77:f1:a8:b0:81:ec:1c:e9:ef:9a:1f:05:2f:5e:
b0:4a:cf:96:c0:9f:d2:cf:cf:ef:a5:a1:dd:1c:59:55:86:12:
74:97:59:57:98:83:51:91:9d:df:62:cd:81:5a:1a:bf:48:31:
32:03:2f:3d:f8:c9:5b:e7:e3:73:cd:66:cd:eb:dd:df:c2:43:
2b:32:77:22:fb:93:50:f9:0a:88:c3:cc:86:d5:5e:94:c3:ee:
63:a3:22:fc:3a:4b:ca:da:71:24:f8:27:f8:8e:52:ce:ed:ac:
1f:ec:2d:23:45:b4:75:48:39:42:a2:2b:ba:ab:35:67:9d:c8:
dc:55:08:d6:0b:c0:6c:5b:53:c4:80:8f:e6:cb:5f:15:33:8b:
05:1a:2d:70:c2:86:e5:00:21:ab:dd:4f:ea:7d:ef:0e:d8:12:
8c:6f:c3:ea:0b:37:8b:8a:1f:2b:c4:97:cc:9f:64:af:6f:2b:
07:42:b1:04:98:47:ae:da:95:72:a7:53:67:9d:c1:74:94:9f:
03:a6:5a:72:0f:8e:9e:44:28:06:7a:9e:3a:0e:4e:c8:dc:9a:
ac:84:59:96:bb:ae:7d:ff:a7:29:14:67:88:a9:c2:d4:c1:88:
49:3c:ae:ec:a5:be:81:2f:4a:ab:65:ea:35:64:8c:08:c7:77:
92:ea:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:12 2025 by rpki-client