Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: BrjcxRbV/XCo8u6w2EprvIKjpWfNZf9g7gLHrQxRhJA=
Subject key identifier: A6:AC:0F:92:3C:E8:5E:47:2D:7E:E0:E3:E0:21:61:3C:98:0D:9B:3C
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 01951135324A84F404977B4629A69F785E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 04CB
Signing time: Mon 17 Feb 2025 00:00:53 +0000
Manifest this update: Mon 17 Feb 2025 00:00:53 +0000
Manifest next update: Tue 18 Feb 2025 00:00:53 +0000
Files and hashes: 1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: mVTjagIEdZDnAX7hpdFlS9bAPp9zGfl2i2ziD4VSL8A=)
2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:32:4a:84:f4:04:97:7b:46:29:a6:9f:78:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Feb 17 00:00:53 2025 GMT
Not After : Feb 18 00:00:53 2025 GMT
Subject: CN=a6ac0f923ce85e472d7ee0e3e021613c980d9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:a8:26:4c:0d:ca:5e:d5:32:28:90:35:ae:
64:b3:0f:ea:c4:e9:bb:e6:47:dc:67:4c:2b:54:24:
3f:fd:66:7a:1a:1b:50:b3:08:7e:65:fc:93:04:22:
3d:7c:ac:5f:1b:e8:e0:8d:c2:41:cd:2a:b7:5e:a6:
ab:53:28:7b:83:0e:35:3a:85:2e:bf:52:a6:61:8c:
da:23:df:95:cf:e1:f8:bb:ac:d8:db:12:cd:0a:2b:
7c:2d:4c:77:5e:92:1c:f0:91:a3:e1:a2:5c:8d:b6:
db:43:f7:02:03:93:8c:e2:67:18:c2:8c:80:8d:b0:
f6:d1:92:3f:7a:a5:0a:64:34:4b:ef:51:9e:6d:0e:
07:1a:d4:13:e8:65:07:ce:cc:4e:8c:a1:f7:af:7c:
4e:f5:32:08:cd:f5:22:3b:b8:c0:f7:3d:49:1c:8e:
34:af:e6:46:37:1a:9d:6f:d6:ed:34:4b:ca:05:aa:
17:30:38:72:07:3d:59:59:4a:ca:2a:1d:fe:10:7f:
9e:d7:3c:41:29:d6:7b:5a:1e:e6:da:74:e3:60:3b:
53:b5:84:fd:33:9d:4a:e3:b0:8a:27:6d:ce:21:e9:
f0:e8:49:09:82:1d:e4:a6:53:8b:f7:76:ef:82:2b:
f6:af:fa:2e:f3:fa:44:e8:13:df:c2:29:71:e0:b1:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AC:0F:92:3C:E8:5E:47:2D:7E:E0:E3:E0:21:61:3C:98:0D:9B:3C
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:1a:e9:19:05:90:61:46:23:16:f4:59:e4:be:67:7b:f4:bb:
5b:28:f2:be:07:52:49:11:b0:96:26:4c:22:11:0e:b6:e2:7a:
58:89:67:75:f4:b0:59:22:cd:95:a4:4f:5e:6e:90:db:b8:89:
b9:87:61:52:cf:32:53:90:55:c8:7c:77:08:41:27:d0:14:a0:
99:a7:f4:a8:2b:36:91:c2:b6:ce:e8:73:85:6c:41:40:1b:f2:
98:68:e6:ac:3e:a2:cf:d7:4b:f0:42:bd:f5:67:1d:ca:ff:84:
c2:e2:ba:dc:fe:a9:49:cf:fa:46:15:41:0c:90:27:db:a4:ce:
db:51:67:d0:3c:47:d3:3c:af:d5:47:0d:98:2c:4c:34:75:bd:
e4:2e:86:2f:59:9d:98:fa:61:4b:ca:59:f1:5c:fd:b2:3b:d7:
b9:e5:20:a5:ff:9d:2b:0e:2b:3f:18:25:75:3d:e3:ff:f5:a3:
cd:8e:f0:ca:1d:d0:83:a0:dc:77:4e:bb:fa:e1:3b:5f:13:70:
34:49:d1:62:5b:84:01:35:c2:79:a4:dd:18:ec:ca:2b:16:9c:
e7:51:79:91:9a:5c:ec:37:6b:45:6f:23:b4:fd:84:d6:ae:50:
a5:ef:1d:f0:bb:ef:fd:b9:a6:be:fd:59:fd:0f:0b:0b:6f:c3:
33:17:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:29 2025 by rpki-client