Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier: oEhFGn3zq2Gm5Sx7FbCyNZDaHvCf51X9draeFG0CQQU=
Subject key identifier: 67:7F:71:36:C3:41:C8:A3:1A:8A:7C:A7:DA:6B:03:4B:DB:9D:4F:26
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer: /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial: 0195121056153BA27E515618699E24BF59F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number: 12EC
Signing time: Mon 17 Feb 2025 04:00:15 +0000
Manifest this update: Mon 17 Feb 2025 04:00:15 +0000
Manifest next update: Tue 18 Feb 2025 04:00:15 +0000
Files and hashes: 1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: wwbtqDV5v7hiLUEN+1L3gH5wBaZX3MND5G3fGm9O164=)
2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:56:15:3b:a2:7e:51:56:18:69:9e:24:bf:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Validity
Not Before: Feb 17 04:00:15 2025 GMT
Not After : Feb 18 04:00:15 2025 GMT
Subject: CN=677f7136c341c8a31a8a7ca7da6b034bdb9d4f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:9f:e9:40:4c:70:fd:be:06:ff:25:fe:c7:
6e:86:52:53:bc:49:97:ff:c8:37:a0:0a:c5:9a:34:
f7:f2:0b:51:bd:f0:59:fd:23:34:a1:35:5b:46:aa:
f5:9b:61:88:93:c3:3e:3b:69:81:81:71:94:f1:c7:
11:e7:2a:59:84:ba:88:24:4f:e9:1f:83:5c:e2:98:
9e:0b:af:6c:95:3d:af:b4:18:6d:65:ec:70:2d:62:
60:d6:a9:e9:20:3f:59:40:9d:fd:d1:d4:b4:f2:c1:
55:06:a3:fe:75:99:40:c0:1f:96:25:f9:45:f1:2a:
1a:2c:eb:55:fd:3d:e6:06:e8:f3:a0:60:29:52:f3:
8a:f2:77:f0:71:9d:a4:b6:2b:6a:85:b6:73:8e:03:
54:4b:ae:f7:83:03:7a:27:80:f8:d9:38:9d:84:22:
fa:e3:06:c4:b3:76:01:a6:2f:23:e2:3b:a3:ea:8c:
f1:1c:14:42:59:10:45:fe:b8:03:84:38:1e:1c:1a:
f8:d3:95:72:62:41:57:33:b3:21:80:3c:cc:46:f7:
8a:a3:04:18:e0:23:30:66:37:76:c0:08:be:8c:af:
70:63:c4:dc:a2:38:fa:fd:37:6f:dc:7d:88:36:a5:
99:d7:eb:4f:d1:51:cd:ec:ed:15:d4:f0:e5:20:01:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:71:36:C3:41:C8:A3:1A:8A:7C:A7:DA:6B:03:4B:DB:9D:4F:26
X509v3 Authority Key Identifier:
keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:ff:31:30:4e:d4:2c:2f:9a:c2:86:c7:23:06:61:f6:24:
df:0b:4e:32:d3:95:e7:de:e8:dc:3b:39:4a:42:a2:ff:56:77:
38:12:85:ca:27:d9:2b:44:92:e7:8d:2d:cf:6e:b2:f1:f0:81:
12:8c:be:bd:42:15:2d:d7:9b:1e:15:5c:25:04:84:fe:1f:fa:
92:93:d6:9d:79:01:00:3a:6d:25:ce:ad:3c:9c:0d:d0:a1:18:
42:c8:dc:4d:15:02:5c:6e:19:51:06:c7:c3:04:4d:54:47:e2:
42:85:08:e2:c9:e4:99:6c:54:db:33:f7:5c:7e:dc:e2:90:4d:
c8:0b:84:dc:54:bb:97:03:69:56:87:31:91:c7:56:07:37:e4:
86:a8:ae:68:47:a6:de:39:4a:7c:05:b8:ae:b7:9f:6a:ae:71:
6c:5e:0c:74:f3:ab:d2:61:83:ae:1b:68:b4:53:17:0d:3d:77:
cd:6d:b9:6d:62:88:85:80:dc:72:da:3b:6f:43:aa:3c:82:b7:
37:53:c7:b9:df:82:91:8d:de:ae:53:f6:82:f8:ea:a8:49:56:
d5:03:df:d7:d6:d6:04:a7:cd:db:c1:14:b7:9a:1d:50:24:e7:
d8:7c:ee:ee:47:6a:ee:c9:c7:43:73:32:7e:82:5b:1d:f7:f1:
09:a0:c7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:59 2025 by rpki-client