Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: ZEJnYx/SqfGMkvjB2wWHvfeGaTDlqTLWok04rjNXMNQ=
Subject key identifier: BF:77:C4:3C:06:DB:05:41:BE:76:32:CF:6A:FA:87:96:B0:4A:92:32
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 0194BB2928BFB8DA5B2AEA9DDFA57B3BCBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:24 +0000
Manifest this update: Fri 31 Jan 2025 07:00:24 +0000
Manifest next update: Sat 01 Feb 2025 07:00:24 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: Bxhc9/WB0WjG0ldVf9J+p8rQ2L7+9sA7q+6WxWwffpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:28:bf:b8:da:5b:2a:ea:9d:df:a5:7b:3b:cb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jan 31 07:00:24 2025 GMT
Not After : Feb 1 07:00:24 2025 GMT
Subject: CN=bf77c43c06db0541be7632cf6afa8796b04a9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:da:37:ce:ee:8d:c5:63:0e:22:d9:fb:ad:
ea:1f:97:07:53:81:e8:0b:42:3c:51:b7:e8:0a:01:
e9:75:03:e5:63:4f:cd:77:be:5f:c2:44:8c:c8:d5:
38:0b:57:49:70:28:70:fd:e5:44:96:db:93:2c:e5:
30:01:6e:d3:49:1e:71:f4:3f:f3:71:e3:b4:92:f7:
f0:04:ce:63:78:c4:a0:f2:32:7e:0a:9e:32:17:6e:
91:c2:88:3a:8e:cd:e2:e3:fa:be:12:bd:1f:6b:81:
5f:68:79:85:fa:c3:33:85:2a:f4:97:6a:74:cf:04:
98:e5:69:f9:7f:e2:ea:1f:3e:52:54:fb:cd:47:c1:
ba:82:35:60:7f:c0:ef:34:07:60:1d:e3:e7:9a:3d:
41:dc:62:ae:61:02:02:21:48:aa:2d:aa:21:2f:0d:
13:8d:68:e0:62:3d:4f:04:b3:86:d4:57:c4:16:94:
21:bf:90:5e:8a:fb:46:5e:66:cb:4d:47:ab:79:72:
c9:a6:7c:8d:87:0c:f1:be:23:46:52:1d:dc:46:20:
c0:e6:55:13:6a:10:3d:a5:17:de:28:ce:9a:57:b7:
af:94:bb:dc:88:60:f9:58:bd:6b:fd:54:df:42:94:
c1:f7:ab:0a:28:86:4b:e2:33:2e:08:d0:14:1f:3a:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:C4:3C:06:DB:05:41:BE:76:32:CF:6A:FA:87:96:B0:4A:92:32
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:80:0d:62:61:a4:c1:e5:ca:8d:cf:e4:61:17:7b:70:3c:c7:
61:6f:c0:ff:97:b9:2a:26:22:ca:94:17:b9:7a:ae:4b:4e:4c:
59:3f:dc:2e:5a:bd:74:e1:ac:2d:a0:4d:95:5f:66:fb:b8:d2:
29:b6:8d:62:87:2b:9f:89:21:c5:5f:f3:c4:82:75:f8:83:47:
d0:7c:4b:af:a1:2c:fe:54:7e:22:2c:6a:40:26:ce:01:b8:60:
e0:82:cd:6a:b1:77:bc:25:76:66:d5:a7:19:ff:ae:60:4c:08:
3e:fb:9d:76:8e:9a:92:32:c2:37:1f:f8:30:af:b8:ab:e8:73:
01:03:18:40:46:66:05:63:e0:57:d3:0d:29:e9:16:dc:28:63:
91:5c:36:a4:64:7f:6c:3c:d5:40:0d:e4:93:8e:db:e6:07:a1:
0c:b4:24:39:7d:4e:22:5f:25:f2:13:a7:d3:e8:7a:9a:99:a1:
ad:21:96:e5:a1:09:8a:46:89:07:de:e0:9f:d7:93:02:09:b1:
af:39:2d:28:5f:ce:43:37:55:78:87:16:0a:c6:3f:09:71:25:
4e:5a:12:0d:6c:67:e9:7a:43:65:96:8c:de:78:5a:eb:09:f3:
e1:0c:b0:f0:cf:9a:fe:2c:f3:a6:58:6e:a7:b4:d4:fd:12:7e:
00:20:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:49 2025 by rpki-client on console-fra.rpki-client.org