Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: HoH0k3JEBa7svQS2ge5nXG/1ubyrSPQhEeooa1i6dLc=
Subject key identifier: 6E:62:02:22:49:AB:C2:9C:86:18:BE:AD:F5:1E:52:78:0F:3E:D3:42
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0194BB291700419E2A392A63D5D5BE387750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 07:00:19 +0000
Manifest this update: Fri 31 Jan 2025 07:00:19 +0000
Manifest next update: Sat 01 Feb 2025 07:00:19 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: m3sbm4MnyWXlOt2Ov2o+kmMwsgiyt7qAVp6tyyB7qJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:17:00:41:9e:2a:39:2a:63:d5:d5:be:38:77:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jan 31 07:00:19 2025 GMT
Not After : Feb 1 07:00:19 2025 GMT
Subject: CN=6e62022249abc29c8618beadf51e52780f3ed342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:f8:e9:30:48:d1:af:54:85:77:cb:80:e2:
f9:84:e5:19:cd:55:f0:f7:36:d7:03:59:fb:29:a3:
f5:38:47:e2:42:bc:04:15:26:bb:c5:aa:c6:10:0c:
85:a5:c1:97:f2:d1:6d:69:c1:7c:e4:d0:3e:c8:32:
7a:33:73:cc:ef:04:95:d6:b4:40:06:d4:cb:98:c9:
40:c8:10:6c:fc:18:8b:32:93:7a:77:6e:51:26:94:
91:33:3f:db:1d:34:21:6e:11:36:8e:6b:45:48:55:
52:78:f7:c6:57:e9:18:33:1c:ca:d3:61:64:bd:24:
8b:b2:7a:ac:f0:b0:ff:41:97:82:55:69:62:30:ee:
82:88:c6:74:e3:ed:d4:f7:46:d5:c5:8e:f0:28:dc:
f0:29:36:8c:87:94:18:46:cb:24:35:3f:04:ee:ea:
ee:98:83:23:b6:98:1e:3d:66:21:1b:d8:71:10:b7:
09:b7:2e:ef:1a:60:51:78:d3:67:62:ee:5b:e9:29:
75:35:33:f0:2e:80:2b:d3:2d:e9:03:68:27:cb:f5:
73:c8:7e:b9:9e:b2:74:bb:7f:3d:30:36:82:9f:75:
da:c6:a9:bc:3c:3e:65:8d:be:e3:74:70:ac:db:dd:
68:b6:50:c3:d2:d6:1f:66:e9:a6:d8:b6:83:5d:8e:
8a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:02:22:49:AB:C2:9C:86:18:BE:AD:F5:1E:52:78:0F:3E:D3:42
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b4:46:29:2d:ae:c6:58:02:d6:67:3f:89:79:e5:72:2d:9e:
0c:89:26:70:69:f7:47:fe:ff:88:12:04:d5:7b:aa:48:8a:2c:
47:05:a1:5e:03:35:46:d6:51:0c:7f:c7:9e:6e:52:a8:69:fa:
da:c5:03:da:bd:9c:ec:6f:db:9b:6d:c2:1d:3e:ad:cf:99:f6:
35:6e:3f:7d:be:9d:57:5b:31:53:16:6f:ea:60:75:3d:ce:0d:
ec:f2:0d:ae:aa:55:ba:52:b6:24:13:12:29:4a:e0:9d:bb:de:
0a:b0:b6:f3:f0:36:e5:aa:a0:fb:05:79:0d:55:53:f2:f6:f3:
49:bb:4a:1b:a0:5d:11:f6:5f:6b:fc:ed:9b:85:2c:ea:94:fb:
27:6a:16:2e:9a:7d:53:73:19:6e:73:da:7e:27:8b:f1:2c:2d:
13:4a:5b:3c:09:59:de:43:21:f3:32:16:76:42:82:50:45:ea:
2e:47:33:a0:eb:1b:c8:50:29:21:30:2c:00:19:a8:0c:ce:1b:
46:8c:24:d9:cf:b5:e6:c8:5e:15:11:a4:d7:b8:e2:92:02:bf:
1c:08:33:e5:cc:91:2d:55:46:ea:a7:c7:51:ed:9c:93:db:40:
a8:e2:9d:e8:be:65:1e:03:62:4b:68:ef:7d:3b:8c:fd:a9:ad:
cb:72:20:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7KRcAQZ4qOSpj1dW+OHdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj
ODllZjkwHhcNMjUwMTMxMDcwMDE5WhcNMjUwMjAxMDcwMDE5WjAzMTEwLwYDVQQD
Eyg2ZTYyMDIyMjQ5YWJjMjljODYxOGJlYWRmNTFlNTI3ODBmM2VkMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspL46TBI0a9UhXfLgOL5hOUZzVXw
9zbXA1n7KaP1OEfiQrwEFSa7xarGEAyFpcGX8tFtacF85NA+yDJ6M3PM7wSV1rRA
BtTLmMlAyBBs/BiLMpN6d25RJpSRMz/bHTQhbhE2jmtFSFVSePfGV+kYMxzK02Fk
vSSLsnqs8LD/QZeCVWliMO6CiMZ04+3U90bVxY7wKNzwKTaMh5QYRsskNT8E7uru
mIMjtpgePWYhG9hxELcJty7vGmBReNNnYu5b6Sl1NTPwLoAr0y3pA2gny/VzyH65
nrJ0u389MDaCn3Xaxqm8PD5ljb7jdHCs291otlDD0tYfZumm2LaDXY6KHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5iAiJJq8Kchhi+rfUeUngPPtNCMB8GA1UdIwQY
MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt
ZjVhZDE2N2Q4NDk0LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0
LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7RGKS2u
xlgC1mc/iXnlci2eDIkmcGn3R/7/iBIE1XuqSIosRwWhXgM1RtZRDH/Hnm5SqGn6
2sUD2r2c7G/bm23CHT6tz5n2NW4/fb6dV1sxUxZv6mB1Pc4N7PINrqpVulK2JBMS
KUrgnbveCrC28/A25aqg+wV5DVVT8vbzSbtKG6BdEfZfa/ztm4Us6pT7J2oWLpp9
U3MZbnPafieL8SwtE0pbPAlZ3kMh8zIWdkKCUEXqLkczoOsbyFApITAsABmoDM4b
Rowk2c+15sheFRGk17jikgK/HAgz5cyRLVVG6qfHUe2ck9tAqOKd6L5lHgNiS2jv
fTuM/amty3Ig7w==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:22 2025 by rpki-client on console-fra.rpki-client.org