Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: 6WbmD5/hKtndyKYq4XVux00joiDq0cdRKVUY7oj5Hfw=
Subject key identifier: 2A:E0:42:4E:E3:3A:E9:2B:2A:C5:A0:58:B6:70:FD:D6:5A:2A:C1:E7
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019637D20C17F559CD0CB1C94D4CF3F8BB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 1414
Signing time: Tue 15 Apr 2025 05:00:34 +0000
Manifest this update: Tue 15 Apr 2025 05:00:34 +0000
Manifest next update: Wed 16 Apr 2025 05:00:34 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: G/2dMcq0hFyWcRYwyVrnBhqdfLaSRQNqnAFbj/4r8hA=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:d2:0c:17:f5:59:cd:0c:b1:c9:4d:4c:f3:f8:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Apr 15 05:00:34 2025 GMT
Not After : Apr 16 05:00:34 2025 GMT
Subject: CN=2ae0424ee33ae92b2ac5a058b670fdd65a2ac1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:3d:bc:e6:f8:ce:95:d0:30:76:ca:63:51:
13:f1:bb:fe:d1:71:6f:b3:d3:ea:fa:cb:19:ff:b6:
29:50:7f:1a:d8:e2:70:f8:b1:23:d3:ae:11:f4:fa:
16:41:82:c0:a1:f9:31:03:6e:8a:55:f0:ee:11:33:
a9:1e:6c:8c:13:51:7d:ae:df:8f:84:40:8f:fd:1a:
63:c3:1f:e3:d8:74:0f:a0:c8:d1:04:3b:da:06:ab:
99:99:7b:35:3b:c5:3f:53:f5:20:6a:0f:3e:fa:e5:
82:47:61:f7:cd:e0:7c:c2:a1:e6:78:6d:76:70:85:
33:5e:b8:15:4a:a9:69:ab:11:23:0a:85:41:f9:82:
b6:c6:7f:e8:37:06:dc:fa:7b:26:be:78:a7:eb:3e:
de:d4:0b:fb:49:8f:6d:8d:61:57:7f:8e:3c:dd:8d:
b0:10:b6:64:ac:90:ff:21:5a:73:c5:82:fa:7c:8a:
5b:dc:06:81:31:80:62:83:7f:94:20:b7:9d:d3:8b:
7c:82:8b:0e:2a:99:c1:2a:3e:f4:3a:26:f9:f6:90:
18:da:5f:16:66:6b:34:93:a3:0f:23:f1:b0:cc:3f:
d1:bc:f4:90:6b:04:9d:60:5f:fe:12:df:1b:8b:5c:
bc:8d:db:50:8d:2a:16:5a:82:70:c1:d1:04:b8:40:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E0:42:4E:E3:3A:E9:2B:2A:C5:A0:58:B6:70:FD:D6:5A:2A:C1:E7
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:de:a0:2e:d8:93:ea:85:cf:22:bf:70:be:e8:ad:e8:c4:
fe:23:72:e6:47:a0:15:7f:c8:7f:2a:87:a8:a8:d9:53:0f:f5:
03:63:80:a7:d1:94:54:73:7a:25:79:b7:23:e1:49:30:e1:c8:
19:6c:6a:98:59:d4:54:99:4b:46:18:47:92:e2:6d:e6:92:92:
7d:17:61:db:fe:75:29:47:cb:f6:52:3d:74:14:4f:26:0a:44:
5d:52:26:78:87:bf:3a:e0:2c:33:36:ff:83:0c:ff:79:da:63:
46:ee:2e:04:94:ba:d2:f5:79:63:fc:1b:c3:72:c1:bc:74:0e:
71:b7:63:d8:80:2e:cc:82:d9:3c:1f:6f:6a:f8:f8:c9:ae:16:
ec:56:20:f3:12:1e:de:a8:74:6e:b9:9a:76:9b:89:38:a1:2f:
75:27:97:2d:27:f0:03:3d:11:65:a9:e1:a0:9d:af:7c:1b:66:
43:a1:20:e0:75:87:ee:56:68:08:5d:1d:a1:52:a8:a4:00:0b:
11:2e:12:c1:42:59:5e:a4:4a:de:1c:d8:68:f3:b8:85:27:a8:
f0:ea:65:46:50:b0:b7:c4:ef:23:f8:0e:83:1a:fb:7c:12:d4:
96:15:9e:7f:5b:4b:b1:3e:d5:e3:60:49:ef:59:eb:45:bd:d9:
ae:e8:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:41:22 2025 by rpki-client