Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: cpxsJhXZJLvtCeQMQH4hWEGCk3r4SVJiPPqymf3MNww=
Subject key identifier: AB:3D:B4:7B:F2:C8:7C:6E:8D:9C:DF:7F:98:80:F3:F9:78:EE:A4:40
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0194C42C5B9B0227D4C13A5CA578E29915C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 142E
Signing time: Sun 02 Feb 2025 01:00:28 +0000
Manifest this update: Sun 02 Feb 2025 01:00:28 +0000
Manifest next update: Mon 03 Feb 2025 01:00:28 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: 6KUxXw+hTd2skMJALv0aFQ8WttQGR8tdmchNSKD7wBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:5b:9b:02:27:d4:c1:3a:5c:a5:78:e2:99:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Feb 2 01:00:28 2025 GMT
Not After : Feb 3 01:00:28 2025 GMT
Subject: CN=ab3db47bf2c87c6e8d9cdf7f9880f3f978eea440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:76:f2:82:10:fc:fc:e3:8c:18:90:d7:57:
d6:d6:08:93:d5:c4:65:d7:c7:f3:e1:c4:05:5f:c5:
fe:9c:5b:13:e1:20:61:b8:d8:b3:af:ca:3f:48:1b:
35:09:87:cd:03:34:12:97:1c:2b:be:a6:89:3f:1a:
45:b4:92:31:b4:a4:e9:8f:5f:15:81:8f:c8:c5:85:
34:a6:aa:4f:18:cd:92:2d:53:45:f9:ba:21:f7:6e:
3c:04:10:91:bd:ad:fc:a6:cc:15:51:f5:bd:89:eb:
2b:4c:b7:d1:ab:a7:23:0d:a6:d6:eb:d3:10:33:da:
55:6b:ce:63:2f:d3:1c:37:e5:57:76:62:15:04:aa:
19:67:7d:f4:01:f1:f1:29:0f:c8:58:c1:09:de:47:
46:f3:9a:dc:7a:5b:29:92:ce:c0:cc:f3:a4:f2:c1:
67:00:d8:31:59:f2:ec:22:86:17:86:fb:cf:9c:01:
86:94:56:6d:75:31:e0:f4:fb:cd:5e:8a:a5:95:76:
f9:0d:37:9a:c7:16:be:ed:d9:29:50:22:3e:d1:1c:
fd:21:46:20:48:d0:57:d0:2e:c0:26:36:ce:c4:5e:
b4:76:08:37:77:79:2f:b8:cb:e2:c7:05:22:90:9e:
cb:06:ea:e8:a2:80:d9:21:91:a8:8c:51:f7:0a:0e:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3D:B4:7B:F2:C8:7C:6E:8D:9C:DF:7F:98:80:F3:F9:78:EE:A4:40
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c3:8f:6c:cc:6d:02:29:5b:d4:cb:77:ca:96:aa:a1:72:09:
cc:6a:1b:18:55:db:6e:aa:98:a6:10:58:32:d6:41:fb:42:f3:
ac:e0:ad:87:96:05:a2:a4:36:f8:af:14:37:cd:6f:8c:95:18:
14:b4:f6:64:75:24:47:9f:09:c4:da:b2:97:92:56:74:77:05:
0e:c1:80:ee:24:ee:8d:e6:8e:0f:ad:0d:02:2e:2d:c9:14:29:
dc:96:66:4b:b7:a5:9f:c0:da:2a:05:67:bc:30:8a:c0:6b:3f:
e9:e5:d1:67:59:9e:54:31:58:f2:7e:48:6c:c1:96:d7:48:a1:
f4:b6:b1:c2:7c:b3:62:9c:d1:1b:4e:ec:85:67:17:bd:b5:0d:
a6:49:8b:11:5b:72:2b:14:56:59:58:cd:19:3c:74:57:13:69:
60:01:06:03:15:a0:72:49:07:3b:1f:85:41:5e:98:10:a6:2d:
52:e0:ba:9b:74:c2:91:34:09:cd:36:7c:50:fa:44:66:fe:d9:
de:4e:6f:45:19:b2:e8:21:0a:89:8b:52:9b:c6:2e:2d:f7:b1:
32:9e:6e:02:a5:11:8e:2b:f2:1a:f7:95:ec:0e:66:16:93:30:
49:5e:d7:e2:63:92:e8:72:ce:1c:81:eb:92:3e:41:ba:9b:ce:
bb:8f:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:08:36 2025 by rpki-client