Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: TZBpjuV66zPiQIXVsOc+nT5AYuug1MIN2G9vzF96RIs=
Subject key identifier: 01:B0:9A:B8:4B:0C:B0:BF:F4:CD:05:0E:1F:02:88:02:C1:3F:AB:D8
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 0194BB292C74475141E39500E237F3CCEC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 0CE8
Signing time: Fri 31 Jan 2025 07:00:24 +0000
Manifest this update: Fri 31 Jan 2025 07:00:24 +0000
Manifest next update: Sat 01 Feb 2025 07:00:24 +0000
Files and hashes: 1: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: AP/dFfrIHXWu6KffzR0T50lLRUGRL6F2ui3XZetVjA8=)
2: FrqlWltvg2IIueyy45ogVbfzXOI.roa (hash: I5FtBNSL1o5XSBQN3V8eqj4CiYkfCwGhk95ch/7f1y0=)
3: w7QCmizrQXeuidochTL3wPaTPwQ.roa (hash: H6wbvBF9uFQ8IN4rm+CScPncC9WaN8oR2hYLVqdaZWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:2c:74:47:51:41:e3:95:00:e2:37:f3:cc:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jan 31 07:00:24 2025 GMT
Not After : Feb 1 07:00:24 2025 GMT
Subject: CN=01b09ab84b0cb0bff4cd050e1f028802c13fabd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:9b:d7:3c:b1:bd:32:89:1f:41:20:a6:99:
6b:4f:6d:2b:42:16:56:42:07:51:42:69:f6:53:cf:
00:50:0e:82:8b:9d:cc:84:e4:72:ab:af:70:79:e6:
ee:28:e8:6a:4a:53:fc:fc:4c:34:8e:f2:75:96:be:
af:41:3f:8b:66:ae:1b:ec:4c:a0:38:fc:6e:4c:2f:
32:60:ba:92:ae:96:81:9f:57:ae:4b:34:10:b3:f1:
58:d9:c7:54:a3:cd:d4:35:c7:0b:8b:ee:c6:ee:2a:
a4:ca:c8:e9:a6:06:16:c9:e2:f4:92:e8:85:be:4c:
e2:46:32:f5:ba:b4:8a:cb:f5:76:a2:dc:2a:50:db:
7a:46:e6:11:ab:5e:09:91:b2:10:f6:9c:7a:af:1b:
c0:1b:4a:33:66:13:03:d4:3b:78:1d:fa:f9:54:52:
c1:a5:27:08:f9:d6:12:a3:27:dd:15:77:13:62:b2:
4d:7a:77:53:a2:40:67:b6:bf:59:4e:6a:95:2c:04:
e4:ce:bf:b5:b0:d3:dd:f0:ae:28:47:7e:74:57:d3:
4f:b5:fa:7a:88:00:a1:f0:c3:45:c4:60:9c:5c:b2:
9d:b8:41:f1:50:3b:05:7b:f4:fd:a8:da:b6:81:9c:
c5:b5:67:9e:84:59:75:83:77:30:77:81:67:41:f9:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:9A:B8:4B:0C:B0:BF:F4:CD:05:0E:1F:02:88:02:C1:3F:AB:D8
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:2e:8e:77:db:fe:99:b4:b1:76:5e:f7:a9:b7:e0:4e:77:
cb:a4:fd:80:f0:bc:2d:99:c1:5c:fb:f6:c2:a9:08:39:c0:b3:
ca:3c:59:1f:04:1b:64:57:0f:9d:5f:74:8a:f5:b3:c0:b1:fa:
17:17:50:15:bd:78:8d:66:41:f7:61:db:31:4a:43:1e:fe:86:
16:f1:b9:a9:09:43:93:8d:16:80:ab:7a:0e:9f:ae:e1:8a:44:
14:9c:82:af:00:b1:2c:32:3d:06:7a:90:88:08:d5:65:84:a5:
2b:d6:bc:10:18:21:6e:d7:81:0f:59:26:bf:ec:fe:b2:0e:fa:
c0:74:15:f7:05:0e:e9:73:2a:42:10:98:d5:5c:7a:07:c5:25:
c9:27:cc:7f:99:bc:56:4b:ab:fd:94:dd:37:ce:f9:f5:7e:0b:
33:4d:db:c3:52:46:9a:e0:3b:8d:23:7a:0d:90:d8:f9:0e:5a:
49:f1:bf:67:20:47:17:60:11:61:d6:e2:30:da:31:98:79:43:
70:c0:aa:19:67:5f:f1:9a:84:d7:23:fe:a7:3b:e5:d3:1a:c4:
2b:d4:2c:0e:8d:51:dd:9e:e3:65:43:c6:7e:6a:67:03:10:d4:
d7:a3:00:4a:e0:0e:7f:10:a1:2d:35:3e:80:cc:0d:42:07:4d:
82:3e:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:26 2025 by rpki-client on console-fra.rpki-client.org