Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: vY2eDvnICH1xvjAhZkNn0OrXWGOs/Xvp2PkSwAAmK2o=
Subject key identifier: 71:59:CD:1C:C7:F3:2E:0C:9B:5D:5D:49:5C:68:87:52:09:0A:54:10
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 01965538AAF2210F14AE2FAB682D053DA058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:01:39 +0000
Manifest this update: Sun 20 Apr 2025 22:01:39 +0000
Manifest next update: Mon 21 Apr 2025 22:01:39 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: cz62ZeafuZSxyztoyaKiQ52RHdNQ/ihY6SNAsQ3JFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:aa:f2:21:0f:14:ae:2f:ab:68:2d:05:3d:a0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Apr 20 22:01:39 2025 GMT
Not After : Apr 21 22:01:39 2025 GMT
Subject: CN=7159cd1cc7f32e0c9b5d5d495c688752090a5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:f6:1f:5a:de:fa:b7:cc:97:73:73:1a:71:
e6:3e:86:bf:3b:ab:ed:6e:fb:d3:bf:4f:f9:5a:ea:
67:04:72:81:2a:77:9c:a4:f2:67:53:01:7b:8f:80:
e8:27:60:66:9f:91:45:db:d5:6e:b8:a7:81:eb:72:
e3:80:f4:1e:ef:79:1d:7e:84:e5:04:8d:72:dc:b4:
5e:bf:a8:e3:b1:43:ea:db:88:dc:57:7e:ba:f2:08:
f9:ca:64:40:54:43:55:3e:b7:08:57:29:9a:f4:99:
29:69:64:60:40:e9:94:e8:ae:59:de:6b:ae:69:a4:
01:1d:2a:e7:ba:7c:9a:8e:5e:cb:34:35:b8:ed:be:
47:12:95:b7:9f:8f:fd:26:77:b2:06:4a:8a:69:79:
74:f0:90:87:67:5e:f2:64:82:f3:ac:d3:4a:5c:49:
d8:07:33:7b:f3:e3:5e:14:e0:32:19:20:a2:c4:91:
4f:f9:94:fd:f0:b8:f2:4c:4c:40:b1:23:63:d2:e5:
7d:8c:84:49:bc:19:78:9b:d0:d1:d3:99:cb:10:c4:
fc:b5:28:76:55:4a:15:47:85:1b:e7:8f:35:4d:f0:
3d:b3:d2:86:a9:68:e6:3f:21:14:33:28:9f:30:7d:
08:a2:2c:f8:8d:5c:49:07:b3:c7:57:84:8c:9d:5c:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:CD:1C:C7:F3:2E:0C:9B:5D:5D:49:5C:68:87:52:09:0A:54:10
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:9f:fc:cd:dd:a6:4b:ef:e2:6a:a8:49:bb:f8:ca:99:6d:
e6:7b:84:07:df:5e:ac:b4:b2:ac:ca:03:31:8d:48:c7:2d:f7:
95:c0:f8:72:64:80:1c:58:83:dd:9e:a5:b7:8c:f4:7f:70:09:
cf:73:9d:e4:2b:7c:87:ba:84:5d:bc:0e:1d:1a:ba:76:27:81:
7c:af:68:de:e0:d2:93:32:46:81:d4:e6:20:f4:be:f9:52:80:
c9:4d:c5:3f:9d:4c:16:a0:84:f0:f8:ef:e5:c6:e7:36:a1:41:
94:a4:dd:e2:bd:e5:01:dc:0d:49:18:53:c5:55:59:7c:59:ec:
b4:a6:fc:77:e3:00:b9:4b:77:43:0a:3e:b9:93:1e:3c:6b:d0:
61:65:9d:46:72:0a:fd:87:1b:b3:3a:14:bd:58:61:50:98:e6:
6c:1c:c1:cf:4f:85:a5:d7:96:22:95:80:44:49:57:0c:21:d5:
d8:4d:27:be:a8:d9:ac:73:eb:d1:3d:37:33:41:6d:ea:ae:fa:
14:3a:9b:af:b5:1a:ca:4f:c9:30:30:dd:86:19:79:06:d3:20:
1c:ef:5d:50:8f:fd:b0:31:5a:d4:61:ac:91:88:89:fb:75:ee:
9a:a1:ab:e5:0e:72:9a:69:f1:d7:0a:56:db:a2:da:2d:f6:f5:
b0:54:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:00 2025 by rpki-client