Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: ZicLRpBcq4fw44qdJav3iL7dliUfU+B0ThQfTVS3+mA=
Subject key identifier: 4A:A4:65:3C:1D:3F:BB:FC:56:33:9A:FF:0E:D0:93:D4:62:63:F4:B4
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 01965B39D5DBF57E37E6A67ACD4BBE832B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1505
Signing time: Tue 22 Apr 2025 02:00:39 +0000
Manifest this update: Tue 22 Apr 2025 02:00:39 +0000
Manifest next update: Wed 23 Apr 2025 02:00:39 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: dL8lE4D/1V23pjMcVFbFrs6WbXEB6zKxzwga6l4i8EA=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:d5:db:f5:7e:37:e6:a6:7a:cd:4b:be:83:2b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Apr 22 02:00:39 2025 GMT
Not After : Apr 23 02:00:39 2025 GMT
Subject: CN=4aa4653c1d3fbbfc56339aff0ed093d46263f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:fb:b0:4c:86:fc:e5:35:11:63:79:47:cf:
6e:d3:17:da:bd:7f:d2:36:bf:df:f8:ac:ae:8c:20:
0b:81:3e:2b:23:f5:18:45:40:be:5c:70:74:80:1a:
30:d8:2f:b3:ea:b0:23:cc:1a:64:a3:8d:85:ff:04:
89:be:3e:87:63:74:dd:35:c0:60:a7:5c:3e:13:9e:
42:6d:7b:ef:c4:0a:13:a8:22:3e:3e:93:fe:9e:9e:
8b:9d:a2:38:c7:d1:c7:03:d0:3a:47:e8:26:ce:12:
3b:84:36:ae:50:0e:c3:81:0c:40:c0:b3:75:83:3c:
53:ce:e3:ab:66:c7:99:08:a8:ea:c8:f7:1d:68:00:
ff:a5:6a:ec:3b:fa:17:d5:e5:90:6a:c1:03:2c:1e:
21:e2:33:59:31:37:6b:79:1a:7e:db:d8:52:c1:a2:
34:33:31:dc:92:88:ae:41:c7:7a:3f:43:c3:e3:c3:
18:71:4d:bb:96:d0:08:1e:71:df:22:f5:48:e7:4b:
87:6e:df:15:f0:2a:69:7b:4a:19:8e:eb:ba:28:36:
93:22:bb:61:57:d7:a8:52:c0:7f:88:a1:41:83:35:
1a:9b:35:fc:8a:33:b5:9e:17:c2:f0:ee:b3:1e:06:
5a:28:27:fd:5a:3e:d9:a3:98:b1:fe:89:fc:b2:79:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:65:3C:1D:3F:BB:FC:56:33:9A:FF:0E:D0:93:D4:62:63:F4:B4
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:04:38:87:18:95:99:f5:ba:ea:87:f4:e1:45:8d:03:8c:7b:
1e:13:53:1c:f8:ca:52:c4:25:14:b1:ba:23:b7:08:8d:2d:4e:
ed:c9:00:8b:1f:64:f3:fc:e0:ac:ed:3a:fe:64:6a:5c:96:d4:
ce:01:6a:2e:e0:62:aa:3b:04:52:94:75:a7:f6:a9:0c:97:87:
5e:50:f6:bf:c2:3d:94:96:e4:b7:f3:9e:9f:15:0a:ef:3a:1a:
ac:dc:29:1f:1f:91:23:b9:8e:19:78:d9:8a:37:1c:12:51:12:
fd:d4:8d:be:b2:1c:94:99:2e:ad:c5:ac:83:5e:12:96:7e:2f:
d8:d6:72:72:d2:9c:e3:50:ba:82:d7:21:2f:92:ca:0c:d8:b7:
18:60:99:4f:dc:18:e1:fe:ab:1e:5c:70:7e:28:ab:52:3c:8f:
3c:41:4f:51:15:85:dd:d1:3f:b7:8f:89:4b:d8:35:38:6e:f2:
a0:46:b4:a9:24:a0:62:a3:bd:cd:c5:c3:e9:51:e1:37:e9:dc:
b8:ab:cc:6c:b5:93:c3:51:d7:1f:c5:ad:a2:c2:0b:2d:dc:53:
27:94:37:40:fe:d7:16:0e:4a:a8:7b:3c:46:88:91:47:d7:e0:
db:4d:b8:e8:bb:e7:1f:cd:59:ea:be:5c:68:6a:ee:b0:02:d8:
ce:be:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:19 2025 by rpki-client