Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: ZN7oahCHPRKvn1Qeap4TwPSImCzPiuEiU6RVf+OAdR8=
Subject key identifier: F0:A7:B7:C4:AD:44:A3:41:A5:8A:FD:8A:BF:57:A1:8F:94:23:A1:6C
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 0194BABB93D502A35AE6648575F4605AE955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0ABE
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: vVf5xYlFtw1u4UEbbf6XrhVGs2XX7Bg7X7VkQ8I4zos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:93:d5:02:a3:5a:e6:64:85:75:f4:60:5a:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=f0a7b7c4ad44a341a58afd8abf57a18f9423a16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:00:b5:16:ac:ec:60:45:60:67:e6:ee:21:
62:fb:d8:e0:4c:2c:dd:82:e3:6b:51:95:4d:0a:b3:
6e:fc:f6:5c:ad:24:f7:59:84:a9:25:c0:02:03:21:
af:10:b6:25:29:ef:1a:6f:c7:31:c7:a7:a2:46:f2:
25:cc:57:9b:16:65:7b:db:25:83:89:ca:f2:97:cf:
a2:51:5b:03:f1:a3:3b:8a:24:04:09:52:d9:12:4b:
fb:51:20:fc:ff:84:e4:1d:8b:0e:1e:44:31:a7:a4:
dc:70:9e:05:2d:2a:a2:4d:3c:9b:02:8d:22:f1:93:
c1:04:85:39:e3:e5:15:83:a3:04:e7:f6:03:f0:2f:
70:d3:ef:ae:e3:e8:80:b8:72:66:e8:57:61:75:6e:
e3:47:df:a5:ef:67:38:42:e5:b5:30:06:ce:f6:b3:
60:33:d3:95:49:4b:3d:bc:07:44:07:3d:72:91:62:
f5:fa:f6:c1:86:ef:65:71:aa:fe:a8:26:fc:f3:62:
b6:c9:1c:c5:f9:2f:33:c0:e8:95:c2:f3:e9:a5:1d:
09:52:dd:eb:e8:31:14:d0:36:86:0e:da:ae:73:35:
b5:65:0b:3e:e6:57:ae:56:48:b9:eb:6f:18:45:73:
6d:25:6a:77:28:14:35:22:9d:bd:a7:b1:81:c0:d2:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:B7:C4:AD:44:A3:41:A5:8A:FD:8A:BF:57:A1:8F:94:23:A1:6C
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:e9:ae:44:fc:35:f6:1c:6c:35:3c:42:51:ca:e0:d6:9d:
4f:ca:26:8f:3e:47:67:f9:b9:2b:ba:a6:8b:ba:11:ed:05:0c:
fa:d4:ae:8e:95:22:90:31:3a:b7:39:b6:75:ab:12:23:39:3b:
74:a9:4e:84:d3:6d:f1:64:42:98:7e:2e:9d:49:d9:57:aa:1b:
a0:1d:64:e3:64:0c:bd:64:91:f1:80:9b:56:14:6c:75:17:c0:
72:32:39:50:c5:8c:d4:59:aa:8b:46:86:02:9b:a4:a0:6c:f3:
22:fa:01:4b:30:7b:79:f8:94:3a:72:0f:7b:83:f5:d4:6d:b3:
f0:6b:f9:b7:42:88:fe:1a:28:a5:b9:3d:fc:6a:89:5a:94:8e:
cf:22:ea:cf:e9:74:00:75:1b:96:f7:09:74:f9:84:eb:ef:4a:
61:dc:50:06:15:17:b3:65:19:88:f2:e8:7a:79:97:62:5d:4b:
42:c3:d7:39:45:e1:94:32:8e:c7:11:fc:c1:e0:ed:af:b5:66:
36:7d:e1:1e:05:32:c4:07:3b:f2:2b:bf:b9:20:c6:85:0d:6c:
5a:4d:bf:f9:56:aa:63:1b:ee:43:78:bc:3a:23:ed:ab:b4:39:
b9:64:83:23:d4:25:a8:d9:ac:fc:1d:f9:a3:8d:5d:01:90:58:
5d:b3:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:41 2025 by rpki-client on console-fra.rpki-client.org