Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: k8TuO8SHfcvmg/qLfB4AES8Hlx/vJaZIl2yeEYbqOyI=
Subject key identifier: D9:E4:A0:0D:44:EB:45:B9:8B:F4:AD:8F:A2:61:48:BB:6E:A2:5E:81
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 01965DCCF395417471B4BC07A01F524ED61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0579
Signing time: Tue 22 Apr 2025 14:00:34 +0000
Manifest this update: Tue 22 Apr 2025 14:00:34 +0000
Manifest next update: Wed 23 Apr 2025 14:00:34 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: G4F1HTzm1t4eMkIlsYt+65CSMwihuc3CcvYO5XFbqg0=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cc:f3:95:41:74:71:b4:bc:07:a0:1f:52:4e:d6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Apr 22 14:00:34 2025 GMT
Not After : Apr 23 14:00:34 2025 GMT
Subject: CN=d9e4a00d44eb45b98bf4ad8fa26148bb6ea25e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:14:de:90:90:bf:5e:1b:9b:37:1a:0a:a4:
9e:d9:e5:22:46:3c:ef:30:72:5e:0c:c5:18:f2:00:
a5:48:2d:9d:42:02:0c:f8:f8:66:cf:0e:16:52:87:
cc:ec:22:0e:4f:ed:da:0c:13:e4:49:e0:87:0e:42:
3a:d9:e6:57:08:36:7b:86:5d:e2:a6:87:4c:5b:b0:
35:3d:09:2b:82:90:1b:9e:3c:e1:9e:0d:a1:29:90:
13:24:79:7c:54:b7:a3:0d:c0:7b:c7:ec:a6:6d:6b:
65:9a:51:da:f8:5b:16:7e:52:72:33:f2:b2:37:10:
54:20:d2:a2:2a:7e:5b:7c:d3:6d:9b:52:41:b9:0c:
11:c1:bd:72:86:ea:57:ec:c5:7d:d9:ea:b5:e8:74:
ff:e3:72:e4:25:06:a4:93:ad:a0:ce:a8:a8:4e:3f:
31:af:eb:36:6e:2e:a0:42:47:1d:31:33:1c:9d:56:
e5:98:eb:45:a3:2b:a0:7f:4c:fb:07:80:ad:c8:4b:
fa:e4:cb:48:91:d3:0d:89:6d:0f:cc:e9:b8:af:f0:
79:25:18:bc:d8:19:92:43:c9:3c:68:86:5f:85:5b:
69:74:59:d5:0f:80:d6:d2:6d:a7:82:b1:b4:20:ad:
c4:92:f2:7f:9e:30:77:52:aa:1a:1e:ac:da:74:9a:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E4:A0:0D:44:EB:45:B9:8B:F4:AD:8F:A2:61:48:BB:6E:A2:5E:81
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:b1:5f:66:5e:70:d3:00:af:ad:3d:77:8d:ae:f4:55:d8:
1b:1d:c9:1d:3a:af:fb:c5:a2:14:c7:99:8b:63:36:8f:cd:61:
bc:b3:97:75:cc:32:65:76:3e:5c:cc:1b:8c:49:20:d3:a1:2d:
e1:03:49:6c:3a:f4:91:8c:b6:66:89:e1:33:03:a2:f5:d9:de:
f6:80:4d:90:07:7d:8e:86:7a:7c:66:2b:bf:e0:e7:f3:b9:8c:
dd:05:d9:25:1a:84:aa:a1:1a:15:37:ca:08:24:f0:73:b3:07:
e9:e2:26:8d:0f:51:58:33:8f:b2:b1:eb:be:9b:8e:0e:be:9c:
4d:cb:e2:c1:f5:01:c8:d0:c8:ad:05:5e:3a:9c:fd:63:f7:8f:
dc:bf:29:02:5c:aa:73:e0:f3:1d:28:88:94:a9:f9:ca:bb:3a:
06:60:45:84:76:8d:47:e3:6a:04:35:4a:59:df:d6:60:d4:3f:
c8:37:90:c9:5f:54:a5:2d:37:19:8a:a7:0b:a3:e2:0a:ae:d2:
75:bd:82:4d:a4:5e:0f:2d:da:44:5e:f9:a6:c5:a3:21:da:09:
7e:e7:7d:7f:db:d3:cd:3c:50:5f:ba:83:cb:18:6f:4a:d7:a6:
4d:f2:12:e4:55:cc:9c:80:2f:ef:4c:ed:c3:ee:9d:17:20:eb:
4e:a4:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:30:14 2025 by rpki-client