Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: ZyvyqARyEYGfS3IJJDGsV4fLqIuKwsHCw3vjyIq8HA4=
Subject key identifier: 15:6D:17:77:AF:67:26:D2:C8:8B:EE:85:85:6B:0F:6A:DA:D5:92:BC
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 0194BAF2127C063CF3E488E771B8E9A69524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 025F
Signing time: Fri 31 Jan 2025 06:00:14 +0000
Manifest this update: Fri 31 Jan 2025 06:00:14 +0000
Manifest next update: Sat 01 Feb 2025 06:00:14 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: 68YfEbtShpGRifiChkxkS77GPPd/u9p/JggIZThd5bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:12:7c:06:3c:f3:e4:88:e7:71:b8:e9:a6:95:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Jan 31 06:00:14 2025 GMT
Not After : Feb 1 06:00:14 2025 GMT
Subject: CN=156d1777af6726d2c88bee85856b0f6adad592bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:e2:eb:8f:e4:a7:51:92:c4:64:e6:47:18:
60:68:19:94:fc:19:78:48:ef:44:45:82:b8:2c:f8:
fa:df:8a:55:fa:cb:34:88:76:0a:ed:c6:a3:ae:ec:
2e:a7:88:be:06:9b:0d:cc:4e:8a:d3:43:52:22:07:
a5:0b:53:53:c5:81:38:9d:36:7e:32:1c:1d:bf:b8:
9f:f3:cf:b4:12:27:69:17:2c:69:d7:ed:70:66:df:
f1:f8:33:52:68:71:ee:0c:5b:bc:1b:6e:9d:06:e4:
ce:5e:43:52:12:aa:49:1f:11:cd:76:fe:ff:32:11:
17:77:c6:0e:bd:4c:99:95:60:80:22:43:5c:6d:3b:
cf:f2:b8:8f:fc:b3:ca:a1:b0:1f:71:94:2e:e0:52:
d6:5c:3e:f6:6e:c9:f9:c5:4e:03:96:78:08:59:be:
b1:ff:77:cd:2f:8a:a7:17:31:a4:7e:83:17:a0:c6:
6c:e7:d8:82:a8:c7:d3:99:a9:22:d8:2d:3d:c7:8e:
8c:ae:a9:14:b4:d2:50:cf:3f:83:ae:d6:ff:be:a3:
28:da:84:14:77:07:b0:28:6e:a9:6d:93:2a:8d:5f:
56:07:a0:c8:38:68:08:e0:6d:ad:38:f0:87:e6:d7:
72:fc:94:27:fa:95:ba:7e:14:e1:be:f8:1e:29:60:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6D:17:77:AF:67:26:D2:C8:8B:EE:85:85:6B:0F:6A:DA:D5:92:BC
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e1:b9:fd:b1:44:91:38:04:0c:af:87:80:ac:46:1e:f8:da:
6b:fa:a7:d4:6b:39:50:c1:cd:04:21:35:cd:35:60:1c:c9:c6:
7e:db:4e:94:d2:8d:b8:c3:88:5d:3f:d0:e2:e0:8b:c0:5a:6c:
b4:13:41:48:70:32:c5:e9:fc:3e:12:bc:66:e6:a2:1d:bd:ac:
9c:37:69:0f:f3:da:9b:9e:14:67:e0:62:18:a1:74:52:a8:3b:
a8:ff:7e:97:8c:e4:ac:85:6f:2c:02:06:46:e3:6e:1b:31:d1:
3c:d3:73:78:76:3e:89:e4:a8:cc:62:9a:3d:71:79:37:24:6e:
58:a6:24:5b:48:d3:80:be:69:63:93:b8:b3:95:ce:f9:50:b0:
e7:4c:b0:22:73:59:16:9e:aa:b2:a6:15:41:94:dc:1f:7d:0c:
9a:9a:5c:fe:7a:43:a3:49:66:a0:5a:47:8c:42:2b:88:73:5e:
09:bf:32:0a:59:01:84:6a:6a:22:08:bd:f1:41:f6:b6:64:62:
34:3a:79:42:75:11:24:3d:39:cb:a0:4f:9b:23:4c:d8:b5:3b:
64:78:46:36:92:32:30:82:34:92:c8:c5:01:fd:42:68:8e:fa:
20:ad:3f:af:e6:bd:01:1a:cc:7f:ba:ec:b2:bc:52:3c:71:fb:
5b:4d:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:01 2025 by rpki-client on console-fra.rpki-client.org