Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File: BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier: eydgw0AScvPqXPf6JCYoKK2rQHnIQPzu4R0rFRTzDOw=
Subject key identifier: 4E:16:47:60:54:CC:4D:B7:3C:36:57:51:F1:F1:DD:F6:07:4C:21:4B
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer: /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial: 0194BB602B941DC51AEB76F63B5346EF2E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number: 041D
Signing time: Fri 31 Jan 2025 08:00:29 +0000
Manifest this update: Fri 31 Jan 2025 08:00:29 +0000
Manifest next update: Sat 01 Feb 2025 08:00:29 +0000
Files and hashes: 1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: 6PX/4L+69EHZFPxOAqg83YMWe2/TGM/S8Rl7GDTA/Dw=)
2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:2b:94:1d:c5:1a:eb:76:f6:3b:53:46:ef:2e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Validity
Not Before: Jan 31 08:00:29 2025 GMT
Not After : Feb 1 08:00:29 2025 GMT
Subject: CN=4e16476054cc4db73c365751f1f1ddf6074c214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:bc:ff:e9:39:6e:39:3f:be:1c:dc:61:b7:
a7:4f:70:51:ac:77:41:3a:dd:eb:4f:c7:2c:66:ab:
ca:1d:fa:46:bc:46:ab:c3:36:5e:07:35:06:77:0f:
a7:28:88:1c:1d:9d:85:d6:87:fd:9a:45:b8:28:a1:
14:01:04:2d:39:a4:53:f2:de:e1:30:e2:60:f1:ec:
df:c6:0f:8a:af:c1:0f:9f:cc:32:ed:b8:89:00:a9:
7c:34:4a:83:d7:b3:e0:c1:35:96:76:68:1c:1d:b3:
a1:39:86:da:5f:a2:fc:5e:97:d1:15:15:9c:0d:d7:
ae:a2:34:79:cc:d6:be:26:53:bc:6b:56:ad:b8:29:
76:e5:01:63:d2:6b:a5:2e:4e:ce:0c:ca:3e:6b:e7:
a0:c5:f8:d2:58:2b:73:f6:9e:7c:17:14:15:f2:5e:
c8:50:89:04:5d:e3:80:17:49:d2:5c:d2:2b:72:6f:
d2:05:e7:15:e9:e4:9a:0f:7f:a3:3d:7b:a5:7a:1f:
5f:68:54:42:04:13:df:b3:d3:fa:22:30:7f:3b:30:
c3:fb:f2:fc:07:30:da:18:4f:e1:71:91:f5:60:ed:
75:78:07:32:c9:43:e0:31:42:9e:e0:77:96:43:05:
07:5f:74:4d:c4:46:82:a1:d5:ba:f8:fd:d2:43:5b:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:16:47:60:54:CC:4D:B7:3C:36:57:51:F1:F1:DD:F6:07:4C:21:4B
X509v3 Authority Key Identifier:
keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:db:9e:f2:69:43:4f:7c:dc:0c:39:4c:0e:00:98:de:4b:13:
31:69:15:0b:0d:d7:5a:8b:7e:3d:19:75:1e:ac:7d:bf:eb:9c:
f0:f5:37:59:55:06:2c:bd:38:46:be:1f:d2:96:e3:93:8b:5e:
f3:a5:7d:5b:a5:f8:9c:c1:bf:f6:2c:cf:12:98:96:98:34:0d:
bc:a8:f4:58:d1:8d:d5:73:73:f8:c3:97:dd:ee:48:d0:77:ce:
89:c8:33:49:69:40:b0:ac:bd:6a:04:d0:96:04:9f:11:81:89:
90:c1:e9:9c:e3:d0:da:c3:f6:e4:67:43:b5:63:90:04:59:cb:
67:65:0e:55:eb:19:c5:45:2e:97:bb:13:db:cd:c0:7b:cc:37:
d6:5e:ef:7e:9c:bf:d1:dd:2f:29:d0:7c:fb:4a:a2:29:c1:23:
89:5a:94:ff:ee:18:f4:25:3f:1d:87:4c:ee:90:64:95:df:e8:
0a:27:54:e2:86:ff:99:47:29:f6:0d:c1:40:5f:ca:b3:5b:42:
57:a2:5b:ce:10:91:ee:61:c3:54:30:b6:e7:3a:1f:db:93:0b:
20:cf:11:51:09:f7:09:6e:6a:8e:0f:fd:0d:50:24:15:cb:62:
bb:f0:f5:92:72:a4:69:9a:16:f5:b6:58:78:ed:14:22:87:5d:
f8:6d:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:46 2025 by rpki-client on console-fra.rpki-client.org