Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: IBY5jFTt8Lfz7BZUSwWpXYQgDjo+cMG0P89RaddyKr4=
Subject key identifier: 1B:90:EB:F1:F7:FC:C4:4E:95:7B:BF:D5:99:CB:DE:2B:60:9B:40:F8
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0194BA84380EDE2B8F47A16D51CF1E114ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 04B2
Signing time: Fri 31 Jan 2025 04:00:14 +0000
Manifest this update: Fri 31 Jan 2025 04:00:14 +0000
Manifest next update: Sat 01 Feb 2025 04:00:14 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 2wYTpNRE3eIFCYOfxgT99A3/O1lM8SFj1Snucddlsw4=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:38:0e:de:2b:8f:47:a1:6d:51:cf:1e:11:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jan 31 04:00:14 2025 GMT
Not After : Feb 1 04:00:14 2025 GMT
Subject: CN=1b90ebf1f7fcc44e957bbfd599cbde2b609b40f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:0a:90:a8:2b:0c:34:09:bd:f8:eb:1d:8b:
9b:23:f6:c0:2b:24:d9:72:c2:b8:6d:ab:ff:1d:17:
10:fa:c8:2d:97:8a:58:a4:fd:8c:b0:3e:d6:6f:32:
ac:d2:5d:75:5c:70:ee:b0:ae:a8:c3:e8:97:c3:84:
08:8f:74:90:a6:a3:82:4f:c8:b0:f0:f8:59:3b:ae:
f9:62:ae:79:fa:a9:ed:6b:17:37:74:5b:d3:7c:14:
2a:f7:fe:c4:ea:fc:8d:a7:81:42:cd:64:3c:c1:fa:
03:ca:f1:25:9f:50:eb:9a:39:61:05:5c:cc:15:56:
87:86:2d:2a:34:68:a4:f2:c8:82:6f:24:24:8f:44:
2c:ac:39:3b:4b:06:b6:d1:d2:d0:a4:8b:b8:cb:5b:
7d:ab:75:80:2d:a7:8f:21:ce:26:65:74:89:af:6e:
4b:8c:0b:5c:7d:43:ae:73:5b:7a:eb:a3:05:38:3f:
3d:e7:fd:77:0f:8f:71:aa:c8:06:9f:e8:f7:29:41:
8c:16:a0:64:22:5c:03:29:ba:2a:3b:5b:af:4e:b1:
c4:75:7e:8a:b4:2a:0e:3c:d0:93:14:67:d3:e9:3a:
a6:eb:b6:82:47:96:39:ed:05:a6:45:21:95:09:a7:
90:af:ba:a8:9f:77:9c:8a:67:bb:d4:a2:35:3e:2c:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:EB:F1:F7:FC:C4:4E:95:7B:BF:D5:99:CB:DE:2B:60:9B:40:F8
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:35:b6:5e:d8:41:3a:11:dc:19:8e:ab:75:ef:1c:2e:09:54:
30:7e:90:6b:79:6c:0d:a6:79:92:e6:aa:1b:35:a5:82:18:da:
6c:aa:23:3a:1f:16:f7:ec:55:25:35:e4:7c:5e:91:86:b5:66:
ef:4b:fa:03:58:77:16:f7:dc:ee:61:9b:ad:0d:95:5d:58:e4:
6a:02:41:32:a5:49:06:45:2a:c0:97:e1:01:4f:9d:e4:cd:df:
e5:c6:34:94:0a:79:46:8a:e4:bd:3b:1b:f3:94:8a:0c:80:44:
f2:80:e9:b7:47:70:fd:da:d8:5e:3a:5e:4b:8b:77:23:7e:c0:
ef:17:33:14:c0:7c:6d:24:15:01:cf:5e:ba:95:76:46:e7:3c:
6b:36:9e:e8:f2:bd:d6:48:a1:c6:3d:45:22:0c:aa:85:e0:10:
ac:c6:4e:20:47:c4:03:cc:8d:07:71:41:75:55:9e:d8:2e:28:
7b:e8:b9:be:77:44:4d:fb:05:ca:f6:85:07:ac:89:e8:fa:57:
a2:96:b3:d7:7b:88:ac:97:84:ce:d4:de:6d:c8:9c:72:0a:36:
5a:31:9a:0b:86:3b:6f:53:96:a5:39:3a:e1:7d:d7:3b:e7:09:
e0:84:16:4d:0a:86:37:b4:df:50:5a:02:13:22:df:45:5e:ff:
fb:94:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:54 2025 by rpki-client on console-fra.rpki-client.org