Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File: BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier: QOTc5MyGodaXS2HA/6QIWq1t4CqQoQ5lQYzx7T4gNVM=
Subject key identifier: 66:17:97:CC:03:1F:74:8D:8F:E6:13:7D:6B:A8:FB:E5:48:05:CE:42
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer: /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial: 0194BAF269D37260FB91382E04AAAB544B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number: 0271
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: MB/l8aQjHJ30BR3DZQQVU4ktDYPjr9WcM0SoqQlXSLc=)
2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:69:d3:72:60:fb:91:38:2e:04:aa:ab:54:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=661797cc031f748d8fe6137d6ba8fbe54805ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:3e:6e:6d:fe:0f:cf:1a:1d:71:55:88:97:
2e:3f:88:7d:14:6a:c9:6e:a4:00:d1:b9:7c:ff:5c:
c9:58:a9:0a:33:82:8e:7c:cf:01:5a:f2:59:75:9c:
f0:dd:cf:23:06:99:99:10:f0:e0:e8:f8:bf:fa:b2:
8b:d3:d1:9c:83:4a:88:17:36:71:e7:1c:98:8f:c3:
e8:c5:b4:1b:31:a7:9f:f2:ae:e5:db:2a:1d:a5:91:
f9:eb:1b:32:f5:f3:f4:49:b9:b5:b5:20:83:19:6d:
34:3b:d1:a9:89:e8:b2:b1:3f:d4:69:99:b5:08:07:
fe:1e:a1:5e:8b:42:cc:49:0b:5e:67:4c:ce:44:a6:
5b:64:c3:31:7e:5d:a3:8c:cf:3e:e8:5f:d0:8b:00:
08:a1:25:7b:6a:12:e4:73:1d:a2:40:4e:8f:a1:dd:
ea:13:86:3d:c0:01:d5:35:eb:c6:43:f2:ab:0b:d7:
5a:31:fa:3b:d7:8c:9b:4d:a9:a3:0e:b3:48:37:01:
76:67:01:36:30:a4:b1:ff:3a:04:70:8b:02:28:cc:
e1:c0:46:0e:8b:28:6d:db:9c:3f:28:40:5c:e4:90:
f2:38:72:bf:cc:24:72:19:2f:ca:ba:30:ae:e9:f5:
33:9b:e0:54:29:8a:50:0d:4f:24:01:b6:ac:27:02:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:97:CC:03:1F:74:8D:8F:E6:13:7D:6B:A8:FB:E5:48:05:CE:42
X509v3 Authority Key Identifier:
keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:10:cf:8c:a4:9d:45:d2:02:40:d9:0f:d1:db:00:0c:48:ee:
94:85:23:80:93:2b:1d:65:af:4f:03:ee:5b:24:07:dc:15:57:
63:06:c8:cb:74:a7:5b:b1:4a:b9:4e:45:53:61:cc:e9:0a:36:
e3:09:b4:f3:52:5f:6d:78:60:77:58:57:c6:08:59:3a:bf:ff:
68:30:3f:b1:3d:bf:f2:65:76:3b:fd:b0:f6:01:d9:1a:c3:67:
51:02:f0:63:8d:8d:ca:0a:38:99:c6:27:3e:5f:fb:0d:9a:05:
86:aa:ca:0e:be:e3:23:de:c7:80:f3:81:56:89:f1:a9:e5:db:
f5:bc:6b:25:60:76:25:7a:7d:7d:49:85:d9:a7:20:a5:68:10:
f6:ac:7b:fd:c4:87:73:42:40:b5:2a:ef:c6:a3:5e:f1:20:dd:
7c:77:f2:f1:44:28:62:d1:c0:80:79:17:4e:d8:d6:06:c3:8e:
7c:14:85:90:ab:67:ee:7d:a2:d4:f2:51:a9:cf:87:88:21:5e:
c4:df:fc:18:39:0f:f3:30:30:79:0c:6c:09:b7:25:88:9d:ff:
1f:a1:c2:34:a6:bd:d9:ca:2b:4d:09:19:6c:a9:f4:ce:0f:32:
20:9a:69:a9:95:57:4a:d3:f9:25:85:25:c6:f3:4c:1e:85:1b:
be:d9:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:37 2025 by rpki-client on console-fra.rpki-client.org