Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: cHZe4hL8qj+fA8NhH5ZyHB6O9OzGO4wBulW/X3YZTpM=
Subject key identifier: DC:4A:28:B4:E5:20:6F:9A:FE:BF:CA:67:0C:DF:E8:6E:85:51:9B:E3
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0194BB972A97A23480CA9F840133CB4F0950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:33 +0000
Manifest this update: Fri 31 Jan 2025 09:00:33 +0000
Manifest next update: Sat 01 Feb 2025 09:00:33 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: IoZ27i0uwgJxYNIpg3GP05Kf4qi2Ndw/y+k1XILiLI4=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:2a:97:a2:34:80:ca:9f:84:01:33:cb:4f:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Jan 31 09:00:33 2025 GMT
Not After : Feb 1 09:00:33 2025 GMT
Subject: CN=dc4a28b4e5206f9afebfca670cdfe86e85519be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:9a:dd:06:09:6b:57:cb:fa:d6:b1:fb:6d:
ad:ef:9b:ae:b7:1c:72:27:4e:2d:02:19:12:8a:b6:
1e:5a:c7:05:20:3a:39:1a:18:7f:46:2e:a1:e8:cb:
84:e7:15:e7:65:98:96:f7:bb:b4:2f:8a:c9:50:14:
69:34:0b:d6:6a:47:41:06:e9:3c:7c:51:e7:d2:9e:
60:e1:49:3b:03:39:6e:00:3c:66:05:8d:21:16:79:
73:bc:0e:b6:f8:c4:21:f8:2a:88:48:79:33:a6:9a:
52:61:d6:1b:53:bf:28:50:3e:fd:6d:a5:5c:28:3a:
e9:6c:aa:47:8f:91:f4:c5:62:4d:98:fc:f2:da:8a:
ac:86:25:bd:0e:74:51:b9:ea:fa:ac:53:f7:4f:41:
3e:57:10:7b:5e:40:b9:f3:2d:d5:21:17:fa:c8:b9:
3d:3e:bc:49:49:2f:ec:63:bb:81:8c:a6:6a:6e:03:
ab:ea:cc:00:21:66:03:c4:40:be:41:cd:ef:50:da:
3d:dc:21:8c:71:39:a7:27:b2:c5:b4:64:0f:9a:bf:
9c:01:a0:00:15:49:b5:53:5a:e8:a3:bb:5c:07:19:
46:df:fc:17:4b:ee:b9:03:e1:b6:5b:c6:6e:09:2c:
df:97:b8:d7:8d:4a:de:ed:28:15:9d:6d:82:18:0d:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:28:B4:E5:20:6F:9A:FE:BF:CA:67:0C:DF:E8:6E:85:51:9B:E3
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:62:7e:a9:12:ce:25:9f:59:42:da:d9:bf:68:43:0d:d8:
41:ad:1c:a2:91:64:8e:19:e0:63:c4:b0:f8:3e:47:d4:07:9d:
80:d9:f4:a9:ec:d1:88:c6:c3:f6:f8:a4:31:d6:87:ac:5e:17:
dc:fb:04:11:bb:dc:79:41:a7:8a:b4:c5:e7:5a:e4:d5:88:78:
f6:fd:52:a3:0c:74:5f:85:00:6d:65:14:49:6c:d9:95:5b:fb:
31:c3:77:36:37:5a:6c:c0:51:af:9c:01:80:ae:5f:83:e5:27:
1f:5a:c4:df:ef:49:53:41:43:f0:f6:6a:fa:02:10:86:e1:ed:
4b:ee:0a:54:6b:3c:23:4b:89:d4:0e:43:a9:f7:62:ac:8a:32:
1d:34:30:31:0c:07:34:4e:8e:35:13:99:1b:5e:8d:e9:ad:5c:
73:e4:45:db:26:4e:1b:99:12:36:de:28:6f:44:f8:4a:50:e5:
98:b7:72:7f:e7:25:d1:63:95:02:10:e3:cd:62:55:43:46:18:
0a:a6:22:b3:d5:46:a6:6b:fc:40:b3:02:8d:f8:04:5a:d2:7f:
ae:f1:ef:a3:0a:1e:f3:93:af:84:2a:0e:c5:87:30:97:ad:8b:
0a:83:71:9b:31:dc:07:d2:e5:45:e3:ee:9c:9f:57:6f:30:9f:
3f:85:04:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:23 2025 by rpki-client on console-fra.rpki-client.org