Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: cjoiyq7wz18Vef5EtZehwVOn9B8+RCqdix1Fqk/fnkA=
Subject key identifier: 98:06:0C:70:2B:CB:83:38:35:B6:B8:D4:75:28:BE:FE:C6:AA:A5:B5
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0194BB5FFCF13D9F82630BCB5F15A860F6D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 08:00:17 +0000
Manifest this update: Fri 31 Jan 2025 08:00:17 +0000
Manifest next update: Sat 01 Feb 2025 08:00:17 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: JMzs5dTndRDCE1po1vz+dmWJZ4VUAKVVSus87wEdnqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:fc:f1:3d:9f:82:63:0b:cb:5f:15:a8:60:f6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Jan 31 08:00:17 2025 GMT
Not After : Feb 1 08:00:17 2025 GMT
Subject: CN=98060c702bcb833835b6b8d47528befec6aaa5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:b7:6a:4b:14:c7:3c:70:b3:32:0f:9b:be:
5c:7a:a9:c8:b1:1e:a5:8e:4a:67:94:9d:66:38:6e:
d4:05:18:e4:6d:9f:b7:39:8d:ce:cc:59:df:e4:03:
59:01:70:d7:27:40:ef:92:00:ec:0e:07:bc:86:9f:
94:d3:c8:ff:a6:53:ee:a7:7c:a1:d9:c8:9d:30:b4:
ea:10:1d:8c:74:2b:c9:1f:55:b1:ac:a8:0a:9d:98:
ad:28:4a:49:09:6e:07:d7:f0:23:93:d7:f1:8e:12:
ad:d5:3e:43:b8:6f:46:a1:74:1b:c2:1b:4c:30:51:
fb:d7:49:1e:f8:1b:63:a7:e2:91:2f:63:b9:2e:de:
ea:60:82:c6:bf:df:3b:7f:d3:4f:56:6c:14:ef:b7:
ca:a8:85:64:46:f7:f5:ff:e3:76:99:2e:4c:ea:40:
69:07:3c:41:aa:fc:3d:57:82:45:69:a4:01:b6:f9:
3b:95:a2:27:b8:fc:c0:f8:0c:39:15:dd:b0:90:f9:
99:f4:61:1e:62:6e:29:76:cd:a1:ec:c8:f3:a1:ef:
01:21:29:c7:96:37:b9:1c:d7:16:66:ab:c0:df:3e:
c1:99:87:1d:7e:62:89:a1:70:18:5f:cd:c6:38:33:
f9:f6:b9:c4:bf:6b:35:e3:68:62:00:0d:a4:34:a4:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:0C:70:2B:CB:83:38:35:B6:B8:D4:75:28:BE:FE:C6:AA:A5:B5
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:79:d3:7c:f4:a7:cf:fa:f2:be:fa:fe:db:45:3c:16:92:
65:cc:09:2c:ee:17:5a:8a:4c:ae:79:40:a4:c2:38:02:1d:6b:
f1:ef:0d:d5:e1:1b:67:58:e1:a3:2a:23:34:fa:2c:45:7e:1d:
0c:5d:7d:66:d7:8e:05:e2:d2:0d:99:a0:05:bb:2f:f5:e5:f0:
88:f3:ea:4e:e6:30:2a:79:1b:43:56:10:18:f4:d4:c0:ed:89:
e2:84:28:a9:16:36:7c:8a:b5:8f:31:5d:7e:60:92:05:bc:48:
13:63:ba:eb:1b:15:1c:b2:91:35:17:39:24:e6:f9:ac:fd:a2:
12:5c:d8:30:3d:55:9c:27:92:60:92:47:c6:fd:26:02:a2:be:
24:48:9b:73:ea:15:f9:6e:fc:01:ec:ce:61:74:cc:c1:3e:d9:
63:33:06:5b:7c:e3:61:9f:db:68:0c:c0:96:f7:e6:3a:b1:2b:
41:f0:f2:4d:bb:61:c2:4c:e7:8f:5e:ec:9c:50:03:de:c7:fb:
0c:ac:14:e2:76:36:0e:51:44:c1:ea:c2:90:67:79:d1:2f:09:
89:9b:1b:4a:aa:b1:0d:b4:9b:70:99:a3:7d:08:10:37:7d:a5:
77:8b:e7:67:7d:ae:21:b5:19:29:e2:b4:3d:7b:e8:12:d3:01:
be:6b:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:22 2025 by rpki-client on console-fra.rpki-client.org