Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
File: v16_5FjImQcA8EwBsRMuOjdiPeU.mft (raw, json)
Hash identifier: 3/YUQ6LSplYyJ/2TVrZkuyajuEXBEdQqB9P/+WJ0jZU=
Subject key identifier: 20:2F:71:B1:7F:D5:15:52:4D:07:A2:A6:34:E3:02:89:3D:5B:26:42
Authority key identifier: BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
Certificate issuer: /CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Certificate serial: 0194BB292106245127B169868E89E0C157FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 07:00:22 +0000
Manifest this update: Fri 31 Jan 2025 07:00:22 +0000
Manifest next update: Sat 01 Feb 2025 07:00:22 +0000
Files and hashes: 1: i6hB2IahOI67PvpUTSQc2nj4R3g.roa (hash: d+MeIEX0oXT1ILgVQ/KLqsvbNLNFr38pDADmv1QHEqI=)
2: v16_5FjImQcA8EwBsRMuOjdiPeU.crl (hash: 0rLP/fiykPwXVoR//3PfJzISK7obPMHUz4mZlDwP07U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:21:06:24:51:27:b1:69:86:8e:89:e0:c1:57:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5ebfe458c8990700f04c01b1132e3a37623de5
Validity
Not Before: Jan 31 07:00:22 2025 GMT
Not After : Feb 1 07:00:22 2025 GMT
Subject: CN=202f71b17fd515524d07a2a634e302893d5b2642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:34:6c:1e:bf:de:81:96:3f:bf:06:78:f0:
99:e7:1d:78:2b:90:3e:45:ec:f0:91:52:a8:c1:a2:
4c:dd:64:cc:13:02:25:49:5f:82:bd:fd:1b:2f:5a:
b2:fd:8d:ae:d4:49:ef:99:42:f6:7b:24:1a:e5:cf:
c8:f5:21:d1:fd:d1:5c:75:88:94:c3:3a:e5:81:3b:
01:18:5a:7d:c7:e7:b7:fd:ab:ce:36:6e:e0:72:bd:
c3:06:80:1e:ce:cc:a7:2f:18:a0:7c:a8:00:fc:21:
a7:39:47:e1:e0:4b:7e:43:89:32:91:1b:42:ca:36:
bc:e8:69:bd:d8:79:54:6d:8d:47:65:da:80:36:4f:
93:7e:c7:5c:1b:92:5e:b7:4a:28:10:5c:68:78:f6:
3d:fd:ba:7f:ec:be:43:5b:f0:d6:b8:c7:27:2b:a8:
8b:8d:02:da:86:2d:cf:f8:1c:bc:67:ea:f1:38:17:
cb:9d:8f:85:f0:81:89:d8:bb:c9:f9:11:a3:94:28:
1d:82:b8:5f:42:ea:bf:92:31:4b:27:fd:ce:1b:9f:
ee:0e:a7:41:b2:49:51:11:de:51:e8:22:78:01:95:
de:69:97:71:8a:5a:c2:33:d8:ed:d6:e7:2a:a6:0e:
19:72:08:2d:db:b4:fa:67:a6:a2:70:4f:90:a5:5c:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2F:71:B1:7F:D5:15:52:4D:07:A2:A6:34:E3:02:89:3D:5B:26:42
X509v3 Authority Key Identifier:
keyid:BF:5E:BF:E4:58:C8:99:07:00:F0:4C:01:B1:13:2E:3A:37:62:3D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v16_5FjImQcA8EwBsRMuOjdiPeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4040ee-07bd-43c4-8508-0583941eea71/1/v16_5FjImQcA8EwBsRMuOjdiPeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3e:7c:35:38:d7:83:59:e1:2b:29:98:d2:1e:ea:eb:53:b1:
c9:30:c4:2a:2e:e9:16:a9:94:d6:e2:59:f2:79:46:bf:24:2b:
5f:56:a3:55:97:ea:7e:3d:25:40:7d:43:04:54:f3:7e:7a:74:
2d:7c:86:02:70:e0:36:b7:ae:f5:3e:57:96:6e:a3:50:cc:25:
0a:81:14:56:f1:50:27:6c:35:b6:37:08:a1:b9:46:ae:13:4f:
73:dc:62:eb:08:fb:ab:ba:2e:1d:c0:0d:96:f9:78:7c:df:7c:
af:d0:13:b0:56:38:55:4b:8a:d1:2d:23:70:0c:e8:52:4e:bc:
eb:c9:ff:c6:cb:97:86:1a:18:01:0b:9c:19:42:c7:5f:58:82:
b6:3c:63:9f:6d:6f:bd:4f:93:a4:2a:f8:fd:ff:94:a9:f8:bb:
f8:b5:6c:69:6e:21:06:96:c6:70:b0:64:5d:40:12:09:67:98:
ca:00:39:51:67:82:24:6e:8c:82:0c:cc:53:7a:8d:24:84:95:
29:39:60:7d:68:95:42:f8:99:19:7d:eb:1f:a1:72:6c:8d:94:
ff:71:c8:ae:67:42:6a:bf:9d:7c:e3:c0:8e:00:84:0d:e6:99:
6b:de:a8:3d:86:0b:ea:51:5f:b2:72:c2:d1:86:dd:f1:09:c3:
5a:b7:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:43 2025 by rpki-client on console-fra.rpki-client.org