Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File: Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier: PgRYn6UYyXUieYol2QvwOu6k3j6It5SQTZr1xnD0BnA=
Subject key identifier: 26:D6:CE:48:DD:43:40:A1:18:3B:47:8C:E7:4B:7E:D1:49:53:FE:66
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer: /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial: 0194BB972643B9741B7044E2264EA8596847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number: 0BCF
Signing time: Fri 31 Jan 2025 09:00:32 +0000
Manifest this update: Fri 31 Jan 2025 09:00:32 +0000
Manifest next update: Sat 01 Feb 2025 09:00:32 +0000
Files and hashes: 1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: FzK7MsgTlBrhwJ8w/ln8Ni8higjt5/fCRhtxB6tHtiM=)
2: noBL3J3r3tsM2aoB7sMnaFXK45A.roa (hash: 1slbvNJzht+Braw0JbEJxueE4i9IP1ZbfhD3OHI5Tsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:26:43:b9:74:1b:70:44:e2:26:4e:a8:59:68:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Validity
Not Before: Jan 31 09:00:32 2025 GMT
Not After : Feb 1 09:00:32 2025 GMT
Subject: CN=26d6ce48dd4340a1183b478ce74b7ed14953fe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:74:09:e1:44:8b:17:53:83:9e:14:92:ce:
3a:ee:0d:c1:3f:23:e6:73:ff:53:de:50:52:8f:5c:
40:e5:32:15:58:69:a0:14:b2:6b:1a:a5:b4:05:c5:
de:3b:77:37:ac:9a:c2:45:90:16:33:97:c9:48:37:
0c:14:03:70:c8:cb:f6:bd:2d:97:fe:eb:1d:62:55:
69:8a:c1:38:21:59:48:92:1d:ac:d9:9b:08:77:4c:
f6:f4:48:98:e9:d3:01:64:09:87:f8:98:82:9f:95:
3e:18:82:1a:06:0b:40:f5:03:18:cf:ec:a8:a1:2d:
0b:44:f3:71:7c:6b:7b:cb:28:7b:0d:ac:29:62:48:
a8:e4:79:29:a2:db:56:03:12:41:d6:66:ec:de:1a:
30:cb:13:b1:1b:9b:17:c6:08:98:53:34:0c:4a:18:
55:a3:fd:7e:f6:e0:2c:75:24:7f:f3:d2:50:70:9c:
73:94:69:bf:e3:17:54:db:d7:e5:e2:f4:35:f8:28:
00:15:e4:59:ae:bf:fb:01:e8:71:b9:84:89:dc:02:
ac:d2:2c:57:aa:d1:29:2c:02:2b:5a:67:41:af:57:
e0:47:dd:1d:98:5a:a3:2f:4d:5f:e4:10:a8:d3:ba:
b9:3e:01:1a:ec:fe:96:c0:76:6a:92:eb:7d:ca:96:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:CE:48:DD:43:40:A1:18:3B:47:8C:E7:4B:7E:D1:49:53:FE:66
X509v3 Authority Key Identifier:
keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:3f:32:a6:a4:df:f9:a5:44:8a:ca:37:7b:3b:d5:db:6f:
e8:ee:9b:3e:04:81:b3:bf:39:84:17:8a:7d:7e:69:4e:02:7c:
a8:0a:66:4e:80:e3:c4:fe:ab:7f:0f:2c:73:82:9a:cd:10:7e:
17:41:05:5b:1e:0f:b8:7d:7c:2a:df:0d:95:99:7d:dc:06:1b:
08:ce:2c:49:8e:22:4e:3a:02:7a:ea:98:fd:c1:3b:67:ce:29:
80:72:a0:d6:6f:13:76:c3:3c:c0:ab:51:76:ec:e1:6b:01:d5:
b1:55:4e:b1:b1:5a:11:8a:60:12:f7:20:00:73:52:00:7b:e8:
9e:9a:85:b2:e0:78:a7:13:3d:b3:42:40:7e:70:d6:c8:66:bc:
4f:64:a2:c7:63:7a:eb:17:47:59:e7:cb:77:dd:75:e9:f8:17:
e8:af:84:49:a0:08:88:f2:9f:05:96:70:70:84:71:74:5b:48:
c5:a9:e0:fb:d2:de:e2:da:0f:97:ac:1b:ee:12:bc:b1:f5:7d:
d9:88:5c:9d:46:3c:ee:fd:c2:e0:85:d8:3d:02:4e:cf:19:4c:
bf:44:02:c9:20:37:6c:28:d4:a5:8e:35:24:05:fb:f8:8f:16:
28:d2:b2:bb:f1:52:66:d6:ad:be:fc:8c:8c:fc:fe:88:87:b3:
f3:76:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:07 2025 by rpki-client on console-fra.rpki-client.org