Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: A/1zjHTO1LrYJS5hCjTlxA2TcgC66mRyx0a97hMziI8=
Subject key identifier: 4D:92:F9:DB:B1:F3:31:15:43:12:8A:74:90:98:E7:91:72:DB:61:1F
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019659827DD8C8A422C7C73AF152E5751A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 18:00:46 +0000
Manifest this update: Mon 21 Apr 2025 18:00:46 +0000
Manifest next update: Tue 22 Apr 2025 18:00:46 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: 3chBmME8Ij7w44syPVvmBx8YGMe2QOHYN4THPA9mVAw=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:7d:d8:c8:a4:22:c7:c7:3a:f1:52:e5:75:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Apr 21 18:00:46 2025 GMT
Not After : Apr 22 18:00:46 2025 GMT
Subject: CN=4d92f9dbb1f3311543128a749098e79172db611f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:0e:8a:2e:67:f8:bb:b9:a8:26:ce:5a:71:
05:07:c8:2c:6d:54:01:47:d1:e9:80:d9:4c:4e:e5:
1e:b9:40:b8:90:a5:26:2b:ee:89:2c:5f:46:2b:96:
1b:c1:5b:b9:05:d7:10:96:94:fa:54:3b:de:47:e9:
ce:4b:92:9a:0c:8c:28:cd:82:84:7f:58:5d:d5:66:
36:cd:ec:b5:f0:43:2d:65:44:2a:2f:a4:98:31:57:
51:51:76:72:16:e0:62:1f:90:9f:b2:6e:9b:f0:93:
bb:57:8f:c4:e0:fc:a0:07:5f:9e:ff:75:c7:a1:d6:
54:63:fd:21:53:fe:41:04:05:33:80:d3:1e:bc:bc:
71:27:c0:58:fb:cb:89:cf:db:8f:d2:db:95:fc:56:
42:9c:93:24:8a:39:e5:89:68:21:d3:66:a2:9a:fc:
a7:e2:4f:ab:00:df:91:30:db:6e:4f:c1:50:e0:16:
ed:73:d7:02:d1:71:3a:d3:a6:a2:ec:9d:ed:ad:d3:
a8:81:2b:19:95:31:1d:f7:00:ef:35:72:0b:4e:b0:
e8:27:58:c6:5e:c0:13:58:40:64:d6:8e:fe:46:b0:
dc:c1:5d:a1:73:65:fc:aa:e2:ad:c3:c4:ef:ab:ab:
12:ed:c3:76:ef:75:8c:3b:c5:d7:73:88:10:6c:22:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:92:F9:DB:B1:F3:31:15:43:12:8A:74:90:98:E7:91:72:DB:61:1F
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:07:6e:95:7b:20:59:7f:92:bc:fc:9f:3e:7c:ef:cb:ff:5e:
c5:cb:c5:68:cb:ae:e1:3b:86:1d:7a:7e:b9:c3:1d:59:bb:2c:
83:41:67:b6:41:7a:ce:26:b9:92:d2:06:09:60:cc:3c:3f:cc:
04:0c:b9:13:a5:8e:e4:01:76:a6:52:1a:03:44:1a:20:2d:fd:
a8:23:6d:77:53:89:3e:ec:d4:df:da:1a:e5:f5:a6:6a:ff:7a:
bb:c8:7c:df:35:e6:f1:26:00:73:4b:f1:1c:ff:9e:81:7f:72:
3b:89:f5:69:28:48:d3:5e:ac:5b:e7:25:62:69:01:7c:ce:98:
34:ea:c2:98:bb:b5:b9:fc:c3:04:57:a6:37:c1:7d:b4:0c:b0:
f4:4e:6a:ab:29:04:db:57:91:52:b1:3e:e1:74:77:5e:0a:73:
6d:f4:f8:01:d7:d8:61:9b:11:77:15:cb:1e:81:30:d1:41:7d:
8b:a9:d0:55:3d:f5:28:10:3d:98:7f:6a:09:38:ae:d0:54:f4:
0c:8e:b9:fe:0e:dd:a9:f5:21:db:33:10:d7:ca:19:3a:24:a8:
a5:1d:4d:27:36:d4:70:62:31:90:6e:e1:9a:fc:b1:4e:d8:1e:
6c:7f:0a:a6:fc:7d:12:a6:36:c5:c0:dd:b0:0f:7e:a2:54:e2:
f2:08:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:46:16 2025 by rpki-client