Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json)
Hash identifier: /ymLeUcnkqLCEbPJlcZTABxI4x/bCk+QWlFi1CORKC8=
Subject key identifier: 90:86:9C:03:DD:46:92:EA:66:44:14:16:A1:F7:80:BE:B3:A4:F3:0C
Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Certificate serial: 0194BB601EF6BF0122A6114DE843C31D7D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 08:00:26 +0000
Manifest this update: Fri 31 Jan 2025 08:00:26 +0000
Manifest next update: Sat 01 Feb 2025 08:00:26 +0000
Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: zu2A+gf4rp5a9HS8JKg1XKD0geQ8+jgqelaqWYoopL8=)
2: N7TBLk6ijg60Rw5drnJxmPzvOok.roa (hash: Gzj1MrzdxuXElz1N9UYhs6KigXCuOfoYMXiwL2fVYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:1e:f6:bf:01:22:a6:11:4d:e8:43:c3:1d:7d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709
Validity
Not Before: Jan 31 08:00:26 2025 GMT
Not After : Feb 1 08:00:26 2025 GMT
Subject: CN=90869c03dd4692ea66441416a1f780beb3a4f30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:f6:b8:ec:08:1f:83:d5:80:23:71:71:c3:
58:91:c6:5a:7b:e6:90:33:d9:fe:35:fa:9b:d4:aa:
98:fa:1b:e3:35:5e:b0:e7:39:8b:7f:90:b3:56:96:
13:5d:59:bb:0f:f9:35:52:de:22:dd:b0:29:8b:c9:
21:4e:b8:8e:f5:d1:4a:8f:10:75:dc:ec:3b:b3:f4:
13:46:73:b6:3a:0b:1e:0f:86:27:c3:48:a9:01:b0:
67:33:13:40:8c:1a:52:4e:76:b8:3c:0b:72:0d:4a:
77:4d:6f:a8:ca:d4:75:29:ec:f1:45:77:db:84:f7:
67:37:2f:b0:fc:ea:54:24:5a:7d:8b:32:b3:af:ef:
42:53:83:89:6f:90:68:6a:26:39:0a:b8:81:28:ee:
78:42:b1:85:65:b0:01:06:61:0f:94:a5:d9:2f:32:
4a:aa:f5:f1:73:ed:b2:2a:8f:b5:4e:b8:57:78:e6:
52:4a:51:43:fe:be:13:a7:d1:5d:98:a5:9d:0c:92:
19:fb:fc:38:42:41:eb:71:23:dc:5a:fe:e6:df:03:
de:94:d3:0d:88:ac:00:24:2d:74:ca:e2:3d:13:c8:
7d:2b:12:1b:13:27:94:50:c7:d3:04:5f:95:fc:12:
ab:61:7c:1f:a6:b9:21:ed:3d:84:94:aa:db:bf:7a:
15:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:9C:03:DD:46:92:EA:66:44:14:16:A1:F7:80:BE:B3:A4:F3:0C
X509v3 Authority Key Identifier:
keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b5:af:55:ab:08:b7:54:6f:ea:1f:90:fe:5c:8d:68:ce:cb:
ee:ff:f7:39:ff:70:80:3d:96:eb:fd:d0:4f:7c:c3:9f:18:45:
c3:f6:d8:78:8a:62:75:6c:7f:98:fb:45:d0:b8:bf:b2:e3:15:
19:57:1c:5e:ca:73:0c:74:cc:da:ac:bc:c6:51:0a:32:8d:cb:
1d:00:2b:5c:fb:fd:ad:99:2f:55:89:de:ba:31:23:b3:1d:d8:
53:71:cf:59:36:6a:d0:82:59:3e:3b:6f:13:8f:08:43:16:26:
e4:c8:1a:48:40:a6:ce:50:e0:e3:25:1c:30:6c:c8:70:19:e9:
38:cc:75:73:a7:39:6c:f5:52:3f:c8:a2:00:a3:8c:c1:51:f6:
46:90:09:d3:74:4e:4f:3a:95:8f:cb:d6:8d:ac:3d:a3:d5:f4:
ad:3f:96:36:a8:22:24:a2:bc:93:91:8c:04:34:9a:b9:94:84:
f3:ef:3c:ba:03:10:c1:4e:48:b1:50:59:8f:16:17:4b:d1:af:
1d:81:46:57:f3:66:9c:39:2c:15:52:08:4c:61:78:0b:10:e9:
f6:8d:6d:c1:4f:26:8e:67:6e:1b:7b:77:78:13:42:48:06:61:
19:ce:0f:e7:19:78:4b:c5:ed:91:4d:18:27:79:4e:6c:e2:f9:
ea:40:0d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:10 2025 by rpki-client on console-fra.rpki-client.org