Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: 4rt4QzUOydswcn4zDhyKgGy9l39K1MiuTF/Ng4unxE0=
Subject key identifier: 12:EF:D9:FA:6B:19:EE:D0:AF:BE:E3:CD:94:98:E7:45:3A:F0:65:9A
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 01962972868C600685B2E097703AC8515FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 14EA
Signing time: Sat 12 Apr 2025 10:01:33 +0000
Manifest this update: Sat 12 Apr 2025 10:01:33 +0000
Manifest next update: Sun 13 Apr 2025 10:01:33 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 1aSB85a+M6R2pxR9iLlQBRTnEYFNwuNG06M/kQClOkc=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:86:8c:60:06:85:b2:e0:97:70:3a:c8:51:5f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Apr 12 10:01:33 2025 GMT
Not After : Apr 13 10:01:33 2025 GMT
Subject: CN=12efd9fa6b19eed0afbee3cd9498e7453af0659a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:77:e8:7f:96:a4:85:b7:3b:eb:3c:49:c5:
27:9c:8e:36:cf:18:b7:7d:45:24:0f:2f:a2:32:aa:
1b:2c:c2:09:35:61:1e:3b:a1:ff:fd:41:b6:3a:74:
a8:82:74:e5:41:8a:24:6e:be:b9:e1:fa:36:7d:d0:
44:90:0e:f2:f0:5c:a2:80:53:12:32:e2:05:48:87:
51:c3:d1:0a:a1:28:bb:83:82:0e:4a:82:a2:13:12:
4d:d5:33:c5:c1:b0:e9:66:96:0d:95:d9:ec:19:02:
f9:17:11:64:7c:63:ee:25:5f:e0:db:1d:b2:58:e1:
33:0d:3d:84:73:35:39:5e:ca:07:bd:5e:37:84:69:
84:15:ce:79:9b:ea:96:43:3b:7f:c2:37:d2:1d:d5:
77:af:37:39:19:8b:7c:f4:0e:34:4b:89:9b:f5:90:
d4:97:34:88:6b:6c:2a:e2:0f:6a:67:66:a4:55:0f:
6e:a7:0a:dd:f5:62:8e:de:08:97:05:74:99:3e:38:
2c:ce:ad:59:b2:25:11:bd:63:fd:64:60:ac:56:94:
95:cc:86:91:41:5c:49:69:b8:4f:1b:b0:9a:8b:ec:
47:bb:36:bc:9a:7e:ca:2e:46:a4:8b:e3:9a:05:2a:
5a:37:b8:76:3c:ea:d0:21:1e:2f:88:7a:9f:20:73:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:D9:FA:6B:19:EE:D0:AF:BE:E3:CD:94:98:E7:45:3A:F0:65:9A
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:1b:18:e0:7c:8b:6b:e3:5a:f6:24:fd:13:65:a1:62:26:
1b:52:30:37:b3:fb:e0:0f:4e:9b:4a:fb:d6:e4:9d:0b:70:38:
c8:c2:9f:64:f8:8c:78:f3:26:f9:0a:6a:be:19:aa:9e:67:e6:
5a:70:c5:cf:e5:d1:ab:8e:c8:ff:e7:c9:4f:40:39:a9:ae:10:
2e:ed:86:50:d8:e5:e2:8c:18:ab:34:62:ab:e1:7b:c0:66:8e:
06:3d:43:aa:aa:88:73:08:24:27:7c:46:57:d9:e7:32:1d:5a:
f5:4c:94:61:51:83:08:df:1f:96:90:2d:0b:91:f6:b8:3c:fe:
57:6f:c4:9c:9c:35:27:eb:38:e5:61:7d:96:18:e2:1f:3d:7e:
6e:37:ac:fd:37:39:c2:3c:92:88:d8:2d:43:f9:f3:95:8e:9b:
65:3f:dd:45:34:99:79:d9:7b:f9:32:e6:44:fe:e5:8b:96:b8:
f4:a0:ff:24:4f:60:b3:81:ac:04:c0:c4:ef:1b:60:41:e0:29:
25:d0:32:be:39:dd:df:e8:a4:f9:5d:f7:ae:e3:10:dc:26:cb:
09:1b:62:f2:a7:48:79:a3:c7:1d:e9:72:88:14:9f:8f:c8:f8:
37:ec:53:09:4a:c9:ee:47:9a:a8:2a:1e:55:0c:34:54:7a:28:
e0:56:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:55:44 2025 by rpki-client