Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: cTOLQfe23Z+7w5qsqUNP6PNU0XGEe8NWv/lQggqMPjw=
Subject key identifier: 9B:AB:64:07:E9:AB:B4:43:32:3D:F7:50:94:F1:98:E9:0E:CA:6C:26
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 0194BA84A69CD6BAFE98E76E67A71D40CFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 04:00:43 +0000
Manifest this update: Fri 31 Jan 2025 04:00:43 +0000
Manifest next update: Sat 01 Feb 2025 04:00:43 +0000
Files and hashes: 1: HoMgEifDpVQ65AHqBFCCx_7uMoE.roa (hash: MZgT/uxhPiKd1q/F+OrFW0KnU1po9n7PWWPZxZXmYvg=)
2: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: vUf35iL4Jgq75WiV/wUUyDT7L2X0ipe2CckVXhMrXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:a6:9c:d6:ba:fe:98:e7:6e:67:a7:1d:40:cf:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Jan 31 04:00:43 2025 GMT
Not After : Feb 1 04:00:43 2025 GMT
Subject: CN=9bab6407e9abb443323df75094f198e90eca6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:28:2a:d4:47:41:aa:3f:f4:d7:13:97:71:
4c:78:78:02:ef:8b:a5:51:bf:f4:2a:0d:9f:93:3f:
7e:a1:67:dd:0b:09:89:80:a3:49:e3:b3:96:26:f7:
ed:de:58:fe:c7:15:c2:fb:86:54:aa:98:96:73:dd:
a2:49:1c:6a:6c:33:66:4e:83:90:f0:c5:63:91:a5:
04:07:21:51:63:99:42:fa:5b:f6:29:d7:0c:2c:d0:
10:23:a8:22:06:2a:72:b7:a3:4e:01:5c:f9:d9:52:
22:fa:e6:7b:fb:c1:04:22:ba:00:52:67:d4:7d:9a:
d5:19:ed:4a:a7:76:15:76:e8:41:4a:ff:fc:9f:a4:
39:7e:19:52:11:e4:e8:c5:b3:60:6c:7f:84:56:e1:
a5:cf:97:54:97:2a:50:16:82:2a:fb:6c:b0:09:67:
f4:05:46:47:72:25:d2:5b:63:db:8d:b9:b9:90:03:
ec:a2:fb:fa:77:df:8b:d0:3f:b2:5d:fe:c6:de:ed:
a6:2f:3b:cb:dc:67:63:17:f1:59:de:51:b0:34:d9:
88:c4:13:97:ec:ad:9c:c9:aa:42:c9:bd:f1:a4:b3:
fe:78:41:df:0e:b8:96:e7:55:a7:d6:8d:b9:51:c4:
12:0d:12:84:f5:a3:1f:cd:1e:fc:66:ba:ee:5a:69:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AB:64:07:E9:AB:B4:43:32:3D:F7:50:94:F1:98:E9:0E:CA:6C:26
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:36:d0:13:d0:a3:63:97:87:2f:f1:31:8c:67:1b:c1:5a:6b:
ce:4c:e8:e8:0c:3e:84:a2:28:25:ca:89:75:c5:cd:b4:ac:bd:
50:0c:25:84:cf:e6:1b:e2:d1:10:6c:59:14:76:ef:fd:69:35:
4d:c9:d6:7f:84:e8:0b:06:9b:b8:ae:1e:e2:3e:c9:a8:6c:73:
7d:97:f1:fc:cf:a2:a9:82:2f:14:0c:26:8e:29:df:16:52:77:
b9:54:2f:a9:61:e7:6a:ad:9a:ab:b9:43:e6:f1:62:8c:16:c2:
da:0e:4e:59:ef:4a:e3:d0:08:3c:a7:9f:f7:5d:54:5f:e4:6f:
09:c6:89:fb:6f:11:ce:2f:0a:c1:4d:3e:78:47:09:77:63:ab:
c3:8a:09:bc:10:19:9f:5b:d2:4e:27:94:35:7b:d4:63:f4:3f:
74:ec:fe:e7:ee:75:66:05:34:d4:85:9d:22:79:2f:a7:dd:f8:
64:d4:cc:6d:8d:ee:5c:b4:22:63:28:ab:a1:e2:ef:c0:76:d6:
61:f3:e8:c4:6d:e6:a6:6d:cf:f3:a9:ad:e6:5f:a2:a4:98:58:
af:0c:50:04:31:b8:32:7d:ec:69:94:c1:83:15:75:f5:6e:a2:
0f:6c:a1:c9:ba:6a:b8:ad:11:d2:41:a3:ac:00:5c:8d:d0:a9:
d2:7b:c6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:03 2025 by rpki-client on console-fra.rpki-client.org