Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
File: BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft (raw, json)
Hash identifier: ROVWYbVV91K+PHndSgiX/Vu0Wj10PwwEDdKRrAFaHl4=
Subject key identifier: DD:66:B5:DF:8A:AE:70:0D:E7:B0:AB:00:1A:25:F4:48:5A:DA:DC:E7
Authority key identifier: 05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
Certificate issuer: /CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Certificate serial: 01965D28601A10F2454E2EEADBC6A3E3F28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
Manifest number: 150C
Signing time: Tue 22 Apr 2025 11:00:49 +0000
Manifest this update: Tue 22 Apr 2025 11:00:49 +0000
Manifest next update: Wed 23 Apr 2025 11:00:49 +0000
Files and hashes: 1: 74ie5YhiWCpEdYw1osP6lOLENo8.roa (hash: AISylC4LJSWYY19JWF/C07coR9FQEVOV3zwowa8Jq8A=)
2: BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl (hash: PG/WYgXbWJHkOtMthzgpFbaVxKFgIV7k9HHcY3np70Y=)
3: CFOEQzJpDfyIX_oaNWeu5lzrryg.roa (hash: IIn5PGhc9iJknynMgMeEVyICP0S0I656B95iMkmFmVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:60:1a:10:f2:45:4e:2e:ea:db:c6:a3:e3:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056ad2f4ffc5872e35a429e53ef179925ff4215e
Validity
Not Before: Apr 22 11:00:49 2025 GMT
Not After : Apr 23 11:00:49 2025 GMT
Subject: CN=dd66b5df8aae700de7b0ab001a25f4485adadce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:69:26:0b:14:73:a5:90:4e:70:b9:3b:09:
f2:5d:33:c4:6d:7a:ac:e9:dd:66:17:f1:ae:a0:49:
20:9e:94:f7:fc:4f:fd:02:b3:c4:f1:01:75:15:86:
cc:e0:ea:d6:3c:c9:15:76:01:69:dd:6b:79:f5:34:
0f:1f:99:70:09:46:51:30:d4:fb:92:e5:a3:a8:b3:
f2:b8:78:e5:40:6b:e6:55:cd:97:bf:80:98:a5:cb:
2a:80:ab:e6:91:a0:5a:3a:88:b7:15:81:0b:eb:11:
72:2d:94:20:83:8c:9d:9c:9f:04:f6:4e:45:c8:3a:
35:46:3d:08:87:af:77:5d:88:d1:b5:82:4d:54:c0:
35:d3:e4:28:60:fa:56:7e:2c:fa:aa:9d:8e:20:e0:
92:7c:c5:a5:96:82:06:2a:1e:40:5e:d9:a9:38:e6:
fa:52:91:d0:1a:95:57:73:9c:82:c8:05:54:dc:6e:
17:c8:f9:33:66:8c:0d:b5:17:bb:8c:3b:9d:76:fc:
b5:ba:af:6b:07:dc:9b:cb:09:d2:ce:e0:89:b6:5e:
db:ed:9f:db:33:7b:81:03:e9:a8:de:b0:ee:2e:58:
be:6b:07:67:d7:6d:eb:98:37:64:87:a4:9d:88:f5:
fb:d5:5d:a5:5a:e4:7c:f2:83:26:d1:85:1a:6f:c5:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:B5:DF:8A:AE:70:0D:E7:B0:AB:00:1A:25:F4:48:5A:DA:DC:E7
X509v3 Authority Key Identifier:
keyid:05:6A:D2:F4:FF:C5:87:2E:35:A4:29:E5:3E:F1:79:92:5F:F4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWrS9P_Fhy41pCnlPvF5kl_0IV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/4330fe-dbfc-481f-8fd9-1e4fcb1c60cb/1/BWrS9P_Fhy41pCnlPvF5kl_0IV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2c:bc:c8:cb:eb:33:a5:ec:b9:2a:c3:3c:31:b3:36:27:14:
22:30:08:c8:2a:23:6f:1b:75:ea:6e:d0:96:5c:66:1f:e0:96:
88:5e:b5:9f:75:77:08:91:cb:2d:74:f0:1f:fb:6f:5a:f9:04:
90:5b:c4:8f:73:4d:61:68:60:2b:bd:85:47:f7:95:75:61:dd:
6b:b8:dd:e5:6e:bb:f2:86:28:8b:c9:ff:be:24:17:12:38:1b:
9c:13:16:11:30:84:3f:a0:a5:80:59:fb:b6:9a:35:2d:9f:84:
ec:f6:c3:aa:ac:d4:db:85:c2:85:bc:16:f7:5d:36:3e:8e:ca:
55:68:ec:3a:0a:ed:50:db:b8:9b:2e:07:47:29:85:ce:e0:52:
b5:b6:70:24:2e:40:80:8f:d6:eb:22:5f:6b:0b:6f:b1:94:a4:
3e:17:20:c6:85:4b:a9:3d:85:90:5c:1d:76:29:51:62:5b:40:
d3:42:1c:07:0b:2c:a4:57:f1:8c:14:65:18:46:a7:9c:27:91:
90:47:62:68:09:2c:b3:f7:02:7d:2e:d6:22:38:63:18:e3:07:
de:18:a9:aa:2b:81:14:70:39:35:3d:6e:8f:94:a6:e7:fd:5d:
4a:20:95:66:01:c8:b4:3e:40:8b:e0:82:24:43:36:31:34:65:
c3:df:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:42:34 2025 by rpki-client