Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: MEWHpXPeEGwEcbC2QJdaGwqiCpV6vV6IqdQi6+4Bp2E=
Subject key identifier: BF:22:27:2B:B5:A1:58:13:2C:FD:7A:91:CC:21:8D:D9:10:42:B6:0A
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 0194BB973FCF35C984A5F6E2F6CCF28FFB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 09:00:39 +0000
Manifest this update: Fri 31 Jan 2025 09:00:39 +0000
Manifest next update: Sat 01 Feb 2025 09:00:39 +0000
Files and hashes: 1: 1-OIAlKZkamjD55UMqzWQx8P8ujA.roa (hash: 60FXDRY9jVOvfNl6JHlrniUKuc6zQEI45l9Gv0k62G4=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: jeRfgFKEP0Af39RQKKNeugEnzSAGtg/k/IQLsqkqepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:3f:cf:35:c9:84:a5:f6:e2:f6:cc:f2:8f:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Jan 31 09:00:39 2025 GMT
Not After : Feb 1 09:00:39 2025 GMT
Subject: CN=bf22272bb5a158132cfd7a91cc218dd91042b60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:ff:e2:ad:ed:57:93:cc:04:b7:ed:a3:68:
1d:2b:0a:57:87:8c:36:ec:dc:20:8f:2f:5f:03:63:
4e:be:3a:96:56:ff:76:6c:7a:6a:60:e8:b5:5c:c2:
0b:be:65:dd:37:35:a3:f1:9c:75:f5:84:87:d9:1a:
bb:aa:4d:58:16:9a:aa:00:10:da:02:96:9d:69:c5:
86:80:fb:e4:06:ec:0f:0a:75:65:57:d3:3e:20:29:
5c:86:69:70:26:58:6c:87:47:a4:d4:e1:a7:ac:2e:
75:38:67:80:d6:b6:81:33:fd:55:dc:67:20:cd:a4:
36:4f:50:28:0b:26:1d:fc:c6:56:6c:e2:25:26:6c:
71:b5:a7:32:62:0f:30:a9:83:51:55:03:07:2d:bf:
49:b9:27:15:c8:52:8b:3f:e5:11:e5:7c:33:84:12:
09:c4:00:79:46:a7:d2:9f:56:a1:54:b2:7b:bd:2b:
22:78:a2:b8:cc:e1:1d:50:42:0e:92:a7:a8:c1:a7:
6f:9c:0f:25:cf:e6:37:ea:6c:d2:bb:56:66:2d:66:
cd:01:ca:26:ab:a6:7f:1a:40:f3:e0:76:c5:3b:02:
5a:71:f1:d6:00:56:c0:36:33:90:9b:f5:22:6d:08:
6d:3e:55:51:6d:05:fc:53:10:35:dc:5d:23:2f:a9:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:27:2B:B5:A1:58:13:2C:FD:7A:91:CC:21:8D:D9:10:42:B6:0A
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e4:44:f9:67:0e:4a:85:cd:e8:17:b0:fc:05:60:df:5d:e1:
e0:55:01:e9:fa:b7:12:b2:12:86:09:6b:18:5a:70:2d:8b:a0:
5a:97:63:08:78:1d:c1:0c:10:65:73:4c:6b:09:90:f5:a0:13:
fb:2a:22:11:2c:98:7e:39:36:58:93:d6:19:fa:b7:f8:da:45:
f6:31:0e:22:8f:01:16:ba:19:8c:11:86:89:f3:4a:b7:25:8b:
a3:f8:d5:a1:8c:95:0e:40:a9:79:33:bd:5b:72:5c:a8:24:11:
07:03:f9:77:d4:5b:45:57:71:7d:26:a2:d3:c1:aa:6b:c2:bb:
95:df:05:01:68:10:8c:19:d2:d6:6b:70:cc:0e:92:fa:8a:c8:
f9:53:33:7f:1b:12:d6:a9:cd:62:5b:0b:f6:e8:39:10:66:a5:
1b:e6:c8:b8:bb:26:2c:a9:5d:0f:e7:29:96:28:e9:f8:5f:27:
b5:10:5a:c7:89:88:ae:50:06:e0:47:52:6e:d5:ba:33:e1:a3:
53:96:95:cc:7a:5e:e8:5e:0a:e6:76:3e:7a:5a:c6:77:c6:20:
c0:1d:85:8f:88:1a:d3:a1:ff:d5:11:98:6e:80:37:c5:90:a6:
5a:aa:9c:5c:7c:0e:7a:06:96:6a:38:f4:d6:63:10:ab:ee:ef:
7b:a5:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:15 2025 by rpki-client on console-fra.rpki-client.org