Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: QeF+BtlhQLlkBWJ1rijifSgmxZIeSlz7y1mnpJVz1Kg=
Subject key identifier: 9D:A6:7E:5B:2E:CB:86:C7:54:47:62:8C:6F:04:F8:93:17:FB:73:FD
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 0196564A2CB4223D1D6FE508483CD1966C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 07D2
Signing time: Mon 21 Apr 2025 03:00:23 +0000
Manifest this update: Mon 21 Apr 2025 03:00:23 +0000
Manifest next update: Tue 22 Apr 2025 03:00:23 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: Jp1dVBozsyMYx57jeSh7UlLbsYZaqRYB1b+vAy3IXvc=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:2c:b4:22:3d:1d:6f:e5:08:48:3c:d1:96:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Apr 21 03:00:23 2025 GMT
Not After : Apr 22 03:00:23 2025 GMT
Subject: CN=9da67e5b2ecb86c75447628c6f04f89317fb73fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:db:44:0e:03:57:81:88:f2:c5:84:a4:6f:
56:72:8e:c9:a0:90:50:08:a7:18:f2:9a:90:f1:b9:
66:d2:90:b6:b1:d3:f6:9c:90:8d:14:d4:d8:8b:69:
e9:29:f9:b4:f2:7a:91:eb:53:e3:bc:ff:d7:66:39:
16:30:94:64:e9:4d:1a:5c:16:08:e9:b8:52:2e:6a:
61:33:5e:8b:1a:23:53:46:0f:cb:0b:11:1c:21:fe:
88:81:b5:3d:81:3f:43:4d:b3:cb:7c:74:e4:be:e8:
f8:0b:06:c2:25:a2:10:fd:7d:71:43:82:b2:f3:e5:
70:5a:aa:8c:88:b1:1d:e3:1f:c6:d9:88:68:4b:79:
4d:ab:ce:03:aa:53:8c:c7:91:90:f3:3c:6f:62:58:
b3:be:85:8d:48:f6:e8:48:85:39:83:2e:3f:a5:4f:
4e:12:41:a3:86:84:54:29:2c:d9:c6:12:b4:65:cb:
99:4a:82:41:cc:ba:8f:ae:d9:60:93:c9:e7:c1:70:
27:c7:5c:8f:6b:04:24:4c:2a:72:12:ce:75:20:42:
04:05:ef:db:c9:51:fb:12:9b:83:75:13:3a:ec:11:
3d:9e:8a:01:96:5b:1e:20:f4:dd:2f:c7:3e:a9:b9:
8e:de:2e:26:c3:a8:94:d0:1e:6a:12:fe:ea:c2:2c:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:7E:5B:2E:CB:86:C7:54:47:62:8C:6F:04:F8:93:17:FB:73:FD
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d7:5d:7b:93:9c:8c:58:2a:a0:b7:f5:49:e8:14:45:04:dd:
05:90:35:92:19:aa:81:69:16:8a:1f:91:e6:61:b6:4b:05:a9:
0d:99:11:a6:42:ca:5f:ca:fd:a7:f5:71:2f:5c:a8:9f:ad:16:
96:22:f3:64:ae:6c:e1:3e:bf:e5:45:75:7a:e0:b9:1d:25:61:
5e:a7:a9:2d:06:4c:71:0d:bc:1c:32:1c:3b:7d:15:8e:b8:21:
a9:0c:b5:1f:4a:db:72:0b:28:28:25:44:c7:19:eb:c4:5c:a5:
bb:d3:35:92:a8:19:ad:72:a9:e3:51:20:24:6d:31:36:b2:54:
ad:58:60:c7:e8:f5:bd:d5:fb:9a:47:43:09:75:48:30:44:7e:
84:3a:c5:25:9d:22:f2:d7:8e:7a:fc:59:7e:2f:14:bc:8a:0a:
54:22:6e:f5:1b:af:87:4a:e6:85:5a:38:39:ee:dc:bc:3a:da:
f3:7d:e7:fc:f1:c7:ee:1b:26:15:e1:da:11:62:a9:29:3e:3b:
10:77:ed:15:a1:80:39:46:c3:bf:de:56:24:ba:cf:88:e5:29:
de:2a:e3:75:5e:8a:86:70:71:2a:55:00:83:58:bd:ad:dd:55:
67:c8:ce:64:5d:91:5d:5a:fb:cb:2b:a6:0e:ed:ef:38:9a:48:
3f:0a:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:08:58 2025 by rpki-client