Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
File: BZ9RaALCYTCaYQSHcubq_VhnqZA.mft (raw, json)
Hash identifier: aWkwrcS6JzZdF4wqHOGGjAwewObV1urJqkEfKQMQW8M=
Subject key identifier: FC:B7:9E:BB:D7:E9:E2:65:89:54:85:F1:57:9E:59:B8:65:F9:F2:5B
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 0194BAF25B59D7B76F2BCB76C0FBA3D168E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
Manifest number: 12E6
Signing time: Fri 31 Jan 2025 06:00:32 +0000
Manifest this update: Fri 31 Jan 2025 06:00:32 +0000
Manifest next update: Sat 01 Feb 2025 06:00:32 +0000
Files and hashes: 1: BZ9RaALCYTCaYQSHcubq_VhnqZA.crl (hash: H/oFokfhX/HyOYyAtCCuLxlNDneaN/8KJLWAAU2kgXk=)
2: RyM0TaDcy3MATcF4kZgnomIhcSc.roa (hash: u1hwu96g0Ti3Leptf/8mOz/le6P/VB383vy/UE8/YqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5b:59:d7:b7:6f:2b:cb:76:c0:fb:a3:d1:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Jan 31 06:00:32 2025 GMT
Not After : Feb 1 06:00:32 2025 GMT
Subject: CN=fcb79ebbd7e9e265895485f1579e59b865f9f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:99:24:f7:40:38:6d:ce:37:8b:52:c5:93:
bb:c3:96:41:8b:19:7a:db:2d:9a:d0:3c:4d:cf:d9:
ae:40:84:15:6e:d2:a2:88:4e:e1:af:d1:97:1e:d1:
da:22:a2:fd:1e:a6:f9:a3:9a:2e:4f:ce:c7:d7:a0:
4e:58:3e:f6:02:d7:9e:09:d3:12:6e:3e:3d:d1:53:
56:de:15:05:f2:7a:6a:41:6b:a1:d6:53:0d:3f:de:
9b:a5:6d:f3:51:f8:bc:c8:d9:1e:2b:2f:f9:0a:e0:
46:e5:c5:31:ee:37:c6:9e:22:1f:3a:78:7f:a8:8b:
90:bc:93:b5:29:46:25:93:ba:86:d6:e3:b1:79:5f:
fc:b0:22:f8:9c:01:0f:51:37:f6:e3:fc:ef:4d:f0:
4b:2a:dd:ad:9c:fc:b5:77:c2:ee:ca:e8:e8:49:77:
7a:90:4a:49:6a:7d:78:3e:98:a0:10:f9:d0:48:d9:
bc:7b:ac:34:aa:a4:89:28:60:b2:42:99:8f:e7:6c:
1c:f1:3e:a9:82:a0:15:c0:2b:f6:24:4a:4f:0d:92:
cc:47:06:fc:70:e6:86:b1:a2:14:de:09:b3:3d:93:
5e:47:7a:cf:e6:d6:b0:77:ce:81:a1:f1:17:1e:11:
eb:b4:7b:1a:8d:97:8b:39:59:c7:b9:e6:bc:45:07:
92:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:9E:BB:D7:E9:E2:65:89:54:85:F1:57:9E:59:B8:65:F9:F2:5B
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:91:fc:f3:23:b4:4a:da:00:5f:9c:4a:bd:0c:72:ba:c8:26:
db:02:64:1b:2c:0e:c1:da:12:1a:af:9c:6e:83:22:89:11:1c:
9f:97:c9:e1:ad:a0:94:32:1a:1e:94:a9:89:45:3b:0b:08:a9:
c9:2c:37:9e:17:75:9b:db:a9:66:7a:d1:26:e1:ef:37:5f:d7:
65:4e:ca:71:38:87:1a:c3:a3:aa:31:d6:c0:a2:64:20:79:81:
1e:b9:c7:46:c5:27:37:54:ab:a4:03:ca:8f:2f:4e:84:57:83:
af:f2:da:c4:43:e8:62:cf:d2:11:70:9c:30:a7:6d:47:43:27:
01:7b:4e:9a:f5:40:2c:27:bd:7d:62:4d:05:a3:55:99:89:7c:
db:9f:ff:a9:25:11:a6:e0:21:48:3f:bc:fc:6c:f0:24:ab:ed:
80:96:68:28:31:da:16:3a:22:ee:e8:34:89:2b:6d:27:b9:a8:
5e:c8:5f:94:8a:af:74:5d:67:d7:30:40:19:82:ca:4d:d7:c2:
85:39:15:41:58:5d:b0:b7:dd:b2:84:5a:69:03:52:b9:24:f4:
9f:2e:6d:36:02:f2:ab:34:d2:e6:67:e4:c1:06:60:c1:34:91:
c5:9e:b6:75:f9:42:27:f3:de:5b:48:d5:33:bc:24:0f:bf:20:
b8:4a:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:40 2025 by rpki-client on console-fra.rpki-client.org