Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: VGJxNaRevo8Gjnohy9qzSvr0SFKnSpRuWb1qbZw3cfE=
Subject key identifier: BE:08:EC:E1:65:0F:E7:09:46:BF:23:8B:DF:E0:C6:69:3A:33:9E:7D
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 0194BB96D86BAE2D1CE206E6A1FD3E34F05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:12 +0000
Manifest this update: Fri 31 Jan 2025 09:00:12 +0000
Manifest next update: Sat 01 Feb 2025 09:00:12 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: I9TDt3a2p5Psh4TZ58XiCXgOFgjXBVwMqSzdYiudvq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:d8:6b:ae:2d:1c:e2:06:e6:a1:fd:3e:34:f0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jan 31 09:00:12 2025 GMT
Not After : Feb 1 09:00:12 2025 GMT
Subject: CN=be08ece1650fe70946bf238bdfe0c6693a339e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:17:67:a8:36:49:7d:f2:5d:90:77:d6:c6:
40:db:2d:a1:d0:65:a9:e8:72:57:40:12:00:80:0c:
ad:9a:18:30:ac:b3:6f:a1:33:38:5f:16:bf:f7:0a:
90:e2:c3:fc:50:70:79:63:e1:a3:b6:3e:e1:2c:0c:
5e:d0:51:24:37:2b:31:34:42:ff:1c:0b:97:5d:ec:
ac:74:07:14:25:fd:50:6d:79:7d:9a:37:dd:8f:94:
3b:48:cc:18:3a:20:58:43:b1:f8:6d:1b:b9:d6:03:
98:11:50:75:e8:36:07:30:07:cb:8a:5b:e1:9d:b9:
53:7d:06:3d:4f:1b:b8:d5:63:0c:fd:36:af:be:7c:
cc:1d:d1:5b:0b:77:42:3a:19:c4:41:38:2e:83:ea:
cd:3b:67:50:d6:ab:75:f6:55:0f:12:38:21:15:f0:
3a:96:c5:95:aa:c6:01:ef:af:a4:c9:7a:29:17:48:
7c:e4:bf:f7:bc:72:98:e4:bc:ea:38:ca:5a:98:d9:
f9:63:19:20:d7:84:ff:20:b8:70:29:69:3d:1b:93:
99:f1:8e:ef:bb:01:29:8a:00:7a:83:5c:cc:91:61:
5e:c5:a8:e3:5e:8b:71:c8:c4:cd:98:a5:92:db:f6:
24:74:f8:ac:de:65:63:61:b6:e4:a0:40:69:8d:26:
30:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:EC:E1:65:0F:E7:09:46:BF:23:8B:DF:E0:C6:69:3A:33:9E:7D
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:85:cb:d8:45:4e:cb:3e:9d:be:fe:6e:4f:ab:6a:29:fe:aa:
ef:7a:ef:40:f9:7e:47:aa:65:43:fe:d7:56:0b:70:74:8b:1e:
cc:58:18:84:27:7c:1d:fe:dc:59:b4:71:7c:fc:2e:2e:8f:62:
6b:a6:7c:6b:72:cf:88:28:70:cb:c9:82:2e:dc:f9:4a:f3:06:
02:c9:ec:37:11:b4:4c:7b:f8:bd:ee:46:4e:6c:8a:9b:6e:ac:
93:30:07:3c:41:01:9c:37:fc:d6:16:d7:9e:bd:6d:bd:54:9b:
5c:55:3c:68:54:b4:bf:86:5b:eb:5e:c7:91:98:83:04:a7:42:
74:52:44:2f:b0:3a:61:79:e1:99:e5:bd:da:6a:80:dc:e5:3d:
4b:e6:11:de:81:40:8e:00:9d:77:8a:b7:6c:f2:5d:ee:ab:60:
da:db:42:83:ff:01:3a:ef:05:3e:46:a8:7e:99:02:88:46:99:
8e:9d:ad:65:6a:8a:22:50:57:7b:cb:7e:1c:19:eb:e4:32:56:
20:74:08:76:3c:22:91:18:b6:35:4e:47:97:dd:10:6f:1a:5b:
74:7d:2e:7a:30:ba:75:74:cd:9b:c7:8f:57:10:86:17:fc:53:
67:0d:c5:53:6f:8a:fc:e8:fb:43:53:97:b8:d9:36:ae:67:d0:
cb:c5:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:31:18 2025 by rpki-client on console-fra.rpki-client.org