Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
File: b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft (raw, json)
Hash identifier: VliFI8KKtws3xNqsRl5ic9TlGswyG5OYD+tx4Kq1adA=
Subject key identifier: BF:58:3F:4F:A7:23:55:EE:6E:7D:2F:98:B1:9E:FF:55:67:1A:8B:B5
Authority key identifier: 6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
Certificate issuer: /CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Certificate serial: 0194BAF250A0829FB42A75FF3EEAB684C8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
Manifest number: 0FB9
Signing time: Fri 31 Jan 2025 06:00:29 +0000
Manifest this update: Fri 31 Jan 2025 06:00:29 +0000
Manifest next update: Sat 01 Feb 2025 06:00:29 +0000
Files and hashes: 1: K1yirsr-iaS7nREQciotspB8RVo.roa (hash: hy+JqcAOeQKytaM3EAomiIfLy4MHrS39bRFVCLNpTzc=)
2: b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl (hash: pkKErr+ejnJDVO1YW9RmDJHJl81gJMSOmrmL4gmXZz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:50:a0:82:9f:b4:2a:75:ff:3e:ea:b6:84:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff9ca5c76bb35a9353e9b13e3fce80f36316180
Validity
Not Before: Jan 31 06:00:29 2025 GMT
Not After : Feb 1 06:00:29 2025 GMT
Subject: CN=bf583f4fa72355ee6e7d2f98b19eff55671a8bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:ef:09:8b:df:6a:bf:2e:56:1d:9d:16:cf:
ee:41:69:54:16:f2:c0:b1:b0:dc:61:7e:29:84:47:
62:4c:f6:fd:12:a0:33:58:1c:99:99:23:dd:30:58:
61:d0:78:c2:1e:94:59:89:69:7a:c0:f4:94:c1:3b:
0e:ab:fd:91:2e:29:78:ce:6a:fe:de:f8:f2:28:f0:
78:52:0c:42:45:c6:f2:9f:a6:8d:86:a4:bb:91:7a:
fa:cf:a4:6e:4f:7c:4b:e4:09:8c:55:3f:09:91:42:
bf:20:07:60:d8:b8:50:aa:a5:b2:1f:0b:eb:75:c8:
32:96:c8:7a:de:df:b5:6a:7f:5a:61:50:fa:ad:f7:
52:c4:41:f5:e0:66:33:c6:73:15:ae:c0:be:b5:03:
22:46:6b:30:11:a5:5f:68:c7:1a:16:2f:c7:33:e9:
11:8f:e6:75:d6:1f:6a:f6:61:5a:63:cd:80:8a:4c:
00:cb:3b:22:6c:5a:6a:9d:f2:f6:0c:3c:99:e5:f4:
36:89:98:23:93:f5:5a:27:9d:db:79:49:fc:1a:21:
3b:ed:49:39:c5:e1:b7:36:2c:f8:b5:e3:26:94:f7:
e1:d0:93:86:a4:81:85:b1:49:5a:b7:7b:c4:4e:7c:
23:df:3c:b8:10:df:e9:f1:27:45:55:5d:b9:4f:02:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:3F:4F:A7:23:55:EE:6E:7D:2F:98:B1:9E:FF:55:67:1A:8B:B5
X509v3 Authority Key Identifier:
keyid:6F:F9:CA:5C:76:BB:35:A9:35:3E:9B:13:E3:FC:E8:0F:36:31:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_nKXHa7Nak1PpsT4_zoDzYxYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7f3546-4a87-4627-a019-341b9d64645d/1/b_nKXHa7Nak1PpsT4_zoDzYxYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:da:a0:37:17:17:dc:86:de:fd:59:3d:51:76:fb:19:39:95:
8e:67:56:d4:dd:02:c0:01:0f:7d:98:6f:d0:74:cd:37:57:18:
2b:06:57:3c:83:d3:1f:8e:61:f5:11:40:8d:34:c9:96:24:ef:
7d:62:c3:6d:35:1d:c2:51:75:37:21:62:b8:0d:52:3e:42:7b:
43:b5:7f:04:97:e4:18:62:ca:3f:2f:79:6d:8d:be:3f:8b:ec:
75:2a:49:f8:e7:04:29:46:3e:c0:bf:df:a8:3c:d8:9d:39:4d:
41:49:4c:ce:5a:6c:f9:79:e5:47:a0:c5:a4:73:16:a7:c8:c2:
94:b9:e2:a3:05:cf:fc:43:37:b4:85:d9:42:a8:9e:61:1e:d2:
39:82:87:ee:4e:56:97:fe:98:1f:fb:f7:d1:b3:b7:93:be:4d:
d0:00:12:39:dd:ec:c0:6a:96:c1:77:dd:5c:10:88:5d:94:8d:
ba:0e:2c:09:bc:b0:2b:37:ce:1b:e8:c1:e7:32:4d:e6:8e:13:
21:df:10:4f:af:ed:cf:20:50:7d:f1:ad:f9:ab:5d:2b:16:dd:
ca:fe:e4:94:13:31:18:a3:d6:f2:40:8f:94:c2:a4:b4:8e:30:
84:5b:74:ab:d1:ee:b5:55:35:ea:ab:1e:0b:00:fc:4a:24:a7:
de:c7:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:16 2025 by rpki-client on console-fra.rpki-client.org