Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: c5lE4QRJC9RO3twMBCsBoXrphV9/RHneyuElinBqgrY=
Subject key identifier: C5:09:57:3E:8E:AB:75:1F:54:21:0E:60:23:4E:F8:90:87:21:4B:4E
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 0194BB296006CB99D196CA17F592C3E7FB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1152
Signing time: Fri 31 Jan 2025 07:00:38 +0000
Manifest this update: Fri 31 Jan 2025 07:00:38 +0000
Manifest next update: Sat 01 Feb 2025 07:00:38 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: QDkWHSLqtQFa7GRHLyWmmCDRoQdKOqhEEDN9Mgyqn60=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:60:06:cb:99:d1:96:ca:17:f5:92:c3:e7:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 31 07:00:38 2025 GMT
Not After : Feb 1 07:00:38 2025 GMT
Subject: CN=c509573e8eab751f54210e60234ef89087214b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:15:94:66:d4:88:01:21:ca:01:14:ee:71:
82:e4:34:dd:97:9e:19:ba:2f:81:7e:44:7a:f0:03:
d9:ab:2c:38:88:f6:4b:d5:f1:84:00:a2:83:df:b7:
64:00:86:71:3d:fe:ca:35:06:0e:69:85:6f:f7:a1:
5b:a1:fc:ca:23:71:eb:50:28:94:86:e6:e3:46:a2:
d1:c5:35:c8:f2:d4:50:d5:57:96:59:1b:cc:f6:24:
44:35:48:8a:72:94:60:56:cd:56:bb:a8:6c:c1:5b:
5c:dc:52:52:70:1d:af:3d:de:15:4f:35:af:96:d1:
0e:18:74:48:f8:94:63:fe:27:a3:fd:30:a1:61:c4:
45:1b:8d:19:85:ba:2d:e3:dc:f2:91:29:63:13:56:
07:05:c1:f1:8d:ce:81:6e:26:57:a4:9f:42:bf:5e:
a3:1d:38:e0:6e:2d:43:24:1f:c9:e9:35:ea:66:f5:
98:8d:b4:a2:5e:bf:a9:8a:ad:5a:9d:44:92:08:95:
17:cd:05:74:92:26:75:60:b9:c2:fb:9e:d4:3f:1d:
e4:32:dd:87:7f:03:5d:9c:67:56:1c:75:da:b6:e4:
65:99:63:e7:47:79:81:f5:e2:6e:d3:c2:ac:bb:f6:
24:74:9f:fd:ee:12:50:5c:b0:36:fc:74:22:00:cb:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:57:3E:8E:AB:75:1F:54:21:0E:60:23:4E:F8:90:87:21:4B:4E
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:ac:38:df:b9:bd:08:d9:45:9c:d7:76:fd:98:2b:51:ce:
f4:ea:8e:97:f4:ae:b7:fc:e4:71:37:47:a0:f7:57:1f:61:84:
59:f4:3c:59:aa:bf:34:26:02:57:1e:18:47:fe:e1:0c:1c:a1:
53:95:ac:c7:b0:ed:6b:f5:f8:f8:c5:7f:2b:c1:6e:66:f1:de:
32:5d:fd:e4:3e:c0:1b:a8:75:66:47:3e:c0:4c:eb:fd:61:c6:
5f:04:5b:27:b3:70:84:55:c6:ca:51:e9:ab:0f:be:ad:3a:5d:
7d:38:62:6a:76:d0:38:08:b7:76:66:31:fe:7c:1e:82:ca:fd:
6e:ea:85:5d:00:fc:cb:f5:2a:17:eb:d7:b6:35:0d:eb:da:2c:
60:e3:42:87:1f:c0:58:09:f8:11:8e:80:d8:0b:5d:b6:85:ac:
95:01:0b:e8:99:a6:f8:3a:64:30:33:0c:af:2e:17:d4:1f:26:
e4:9b:e5:c4:3f:74:6a:49:7e:38:9d:35:07:2a:c4:c6:d2:0b:
99:62:37:0e:6c:81:39:4e:dd:e0:b1:6c:05:b4:56:96:4a:1c:
c8:df:d9:7f:69:2d:ba:16:8e:50:be:da:5a:37:ba:34:ff:7f:
73:be:f0:ad:0e:67:e9:7d:24:b6:d2:ca:d8:d8:6a:fb:d8:53:
4e:77:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:55 2025 by rpki-client on console-fra.rpki-client.org