Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: tu1M9v+XIVW4Zgmh1XqYHD1qqjGArLqcLXYpzMwpFdI=
Subject key identifier: 97:C7:2D:BC:C4:95:8B:05:B6:1F:33:6C:15:FB:68:C8:9C:60:20:15
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0194BB96E00EE6B029B26B2A1F050EAFF81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0B0E
Signing time: Fri 31 Jan 2025 09:00:14 +0000
Manifest this update: Fri 31 Jan 2025 09:00:14 +0000
Manifest next update: Sat 01 Feb 2025 09:00:14 +0000
Files and hashes: 1: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
2: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
3: SNbaGUSKCyyqtDaj7btdtZSwhTU.roa (hash: VVX87HM7oDWgI0/NYe2BQt7V8X7puYmbr8bC7y9q1F8=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: NEQ3hEmHogUnSc02ZbQizm1KSpvfMUBCwlgG2odieWY=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:e0:0e:e6:b0:29:b2:6b:2a:1f:05:0e:af:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Jan 31 09:00:14 2025 GMT
Not After : Feb 1 09:00:14 2025 GMT
Subject: CN=97c72dbcc4958b05b61f336c15fb68c89c602015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:75:4f:12:ff:7d:b0:95:5c:5c:48:a9:47:
29:00:1d:d1:c9:8f:bd:f6:c3:d1:2e:e2:d0:65:20:
64:7c:d7:62:c8:8e:4d:2a:5b:ad:8a:65:a7:90:0c:
93:e2:bb:a2:68:67:df:9a:4a:cd:e6:98:e2:b3:f1:
4d:79:a6:63:19:6b:7c:21:da:48:ca:8c:47:31:40:
30:79:af:de:35:e8:db:f5:e2:f3:bd:33:c4:41:df:
1f:7c:fd:1f:65:f0:1d:0b:a9:b9:9c:b4:3d:29:cf:
03:7d:cb:24:db:de:48:3d:97:d1:20:c3:1e:71:62:
2e:47:5f:8c:63:d4:36:ba:7c:b9:b8:c4:24:68:7e:
e6:03:f7:8b:89:4a:c5:6b:c2:e3:f0:d8:59:9e:b5:
8c:23:3c:2c:49:3b:26:04:ab:5f:4d:95:36:89:bf:
22:1d:ee:1f:b3:e1:93:a7:77:b4:aa:10:6a:28:7c:
1b:83:1d:72:6c:3a:9a:25:e4:72:ee:3f:f0:44:78:
1d:72:3d:5d:46:ce:a7:ac:40:87:55:07:7e:db:8c:
7a:8e:74:c9:2b:8e:15:93:74:37:9a:b0:19:ba:a7:
9a:ac:d4:fe:ac:7b:eb:04:16:fb:40:64:a0:ab:6a:
2e:b0:70:f8:8d:7f:e7:b6:3d:f7:7e:af:05:76:01:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:2D:BC:C4:95:8B:05:B6:1F:33:6C:15:FB:68:C8:9C:60:20:15
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:e2:c1:b2:1e:89:70:73:3d:89:8d:22:40:96:9c:0c:36:
8c:40:4e:b6:7c:f9:ef:d5:26:80:a7:54:75:7e:9b:08:f4:f8:
f0:2e:2d:6b:51:d2:92:70:fa:9f:82:bc:81:b5:38:c0:de:1c:
f1:3f:0f:86:68:55:a4:89:96:9e:14:e9:b1:ee:7b:25:4f:e2:
b6:32:70:f4:85:19:ec:bc:e7:1c:57:a2:76:c3:8a:53:73:83:
b3:2f:ad:04:e8:3f:e9:b2:bc:7b:1e:db:7a:be:04:1f:77:67:
d8:ac:44:97:3d:d1:c8:cb:d1:1e:3d:5d:71:1e:a5:4b:4b:4f:
76:11:7d:7f:cd:02:a2:f1:10:75:ee:bf:37:94:6c:39:de:43:
20:89:fd:83:e2:d0:a6:a1:9f:8a:fd:e6:38:6c:85:92:ae:21:
77:33:c2:02:ca:b0:b6:49:69:fe:30:73:1a:8b:98:00:7b:19:
ed:f9:a3:1a:9a:d1:60:7b:1d:cf:a7:e3:1f:f2:3b:66:54:22:
cc:5c:3a:76:52:d8:d7:7a:2b:32:af:cc:78:98:01:b4:3c:6a:
c1:9f:5f:40:68:96:e9:7f:22:cf:6d:5e:b2:a3:ec:cb:8d:e9:
ec:8d:13:72:0e:42:30:27:32:4a:01:91:9d:3b:1b:9c:51:ab:
c3:ab:ff:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:04 2025 by rpki-client on console-fra.rpki-client.org