Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File: BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier: CP+avUQ2sJRVk8eTsAuKwf4D9iXzdQAI5PayVTU9zsg=
Subject key identifier: C9:79:65:A3:83:56:F4:57:4A:B2:F6:19:AC:4B:EC:77:CD:CD:75:13
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer: /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial: 019658A68ED8C8DC3D2A4957FBCC6339C3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 14:00:32 +0000
Manifest this update: Mon 21 Apr 2025 14:00:32 +0000
Manifest next update: Tue 22 Apr 2025 14:00:32 +0000
Files and hashes: 1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: meGaTNDX/nylwL0zw8lvMX9dLfPg+pNMOG4nL7VjPeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:8e:d8:c8:dc:3d:2a:49:57:fb:cc:63:39:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Validity
Not Before: Apr 21 14:00:32 2025 GMT
Not After : Apr 22 14:00:32 2025 GMT
Subject: CN=c97965a38356f4574ab2f619ac4bec77cdcd7513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:bc:d7:8f:a2:c3:98:c5:7a:26:9c:87:45:
02:78:66:c7:4d:e9:fb:98:2b:67:56:4e:c7:d7:91:
fc:38:94:83:f3:b3:2a:88:df:fa:42:c4:5c:94:09:
f2:a1:2a:65:37:5c:1c:1c:22:21:4c:fd:57:94:48:
4f:c5:d9:ea:f8:74:11:02:db:c0:e9:0e:cb:12:bd:
c4:40:28:c8:12:ae:ce:d1:e8:dd:bb:88:a1:0e:04:
3b:a5:41:54:26:bf:8d:c5:40:c9:b8:77:99:22:98:
87:a8:16:b3:a5:92:d8:6d:59:82:b6:74:89:60:04:
2a:9b:ef:24:34:d3:81:9b:54:71:f2:2e:b5:20:df:
03:2f:1b:eb:30:78:5e:7b:2a:71:90:5e:c9:ff:44:
18:d5:b2:60:d9:2a:4f:b2:99:49:79:1d:be:af:c8:
32:2c:64:19:cb:46:40:0b:b3:f0:2e:f0:50:1d:71:
2f:78:e2:b0:c4:b4:22:4f:50:75:ca:5c:ff:34:9e:
1e:8c:6a:05:3c:31:ae:b7:03:45:d0:c2:d0:04:8b:
9f:4f:08:12:ca:1e:97:08:95:9d:79:3a:be:07:a4:
60:68:05:6a:8e:b9:e4:02:e5:23:2d:46:3e:58:86:
20:40:e3:21:9b:86:e9:5a:bf:c1:5f:00:7e:5b:f9:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:65:A3:83:56:F4:57:4A:B2:F6:19:AC:4B:EC:77:CD:CD:75:13
X509v3 Authority Key Identifier:
keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:5a:60:37:78:25:cf:d1:68:76:20:22:d9:be:ad:3d:23:
fb:b2:e9:ec:00:28:b8:a2:fe:a3:1b:e5:9f:70:df:a9:c6:b7:
56:94:d6:44:a1:c5:a7:fa:88:b3:a0:f6:c1:95:93:85:2d:ea:
f3:91:1d:d1:ce:3d:b0:f6:82:b9:3f:2b:94:e8:93:40:0f:d5:
3b:f0:73:52:c0:40:7a:47:7f:e0:97:49:40:b5:12:19:a2:5e:
56:ea:44:cb:ba:7a:32:01:7b:fb:dd:ce:5d:4c:f1:46:af:d4:
b7:8d:8a:1b:96:5c:18:bd:92:64:6f:a0:5e:25:ca:33:45:7c:
06:a1:16:fc:c5:b6:e5:4e:a4:84:71:1a:8c:9b:4d:66:d1:f5:
a4:f0:87:54:6a:ef:82:5b:61:42:f2:9d:12:86:58:72:c8:1a:
b7:e7:9b:db:97:d9:55:a4:1a:bf:6c:7f:9a:b4:7e:68:60:f7:
00:a2:bd:01:34:0d:15:d1:f2:94:18:38:3d:da:96:c7:a8:2f:
9f:97:26:f8:14:ff:a7:21:86:83:3e:fb:1a:8b:2b:8f:de:fb:
11:9a:21:ec:03:3b:74:a0:79:11:4e:7f:a9:04:18:1e:f6:d0:
68:65:cc:76:6b:dc:28:1c:d9:d0:17:2a:0b:80:74:42:61:1e:
be:7f:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:21 2025 by rpki-client