Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: IPXisRv0j67HqaO0CUMwIW4pXEnAsODMq5KmgvM6mUk=
Subject key identifier: 6E:BF:16:2D:E3:A3:6E:80:09:4F:1E:80:AB:E0:8F:42:EF:7D:78:E9
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01964CA21BAB2AB0913EAB5587484AA660D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 06A5
Signing time: Sat 19 Apr 2025 06:00:14 +0000
Manifest this update: Sat 19 Apr 2025 06:00:14 +0000
Manifest next update: Sun 20 Apr 2025 06:00:14 +0000
Files and hashes: 1: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: olznpgytDVeNaxNJiwtrA7RI9pCKnV8x6oTtm4qZsX8=)
2: dCB4YZJSisBMGI9Gka6oZ1pddoY.roa (hash: xw6pibbp+5PMAJyrwS7VeHcyM1PCsmWnDTSaDLnPh9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:1b:ab:2a:b0:91:3e:ab:55:87:48:4a:a6:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Apr 19 06:00:14 2025 GMT
Not After : Apr 20 06:00:14 2025 GMT
Subject: CN=6ebf162de3a36e80094f1e80abe08f42ef7d78e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:f0:f5:ec:22:52:31:68:f4:7b:c7:6d:c4:
3e:60:7f:72:df:fa:a7:23:26:d9:d2:57:a6:50:93:
1d:fc:11:77:f7:56:35:99:c1:a4:d5:c2:d7:93:f0:
cc:08:e9:c2:92:ac:a1:6f:fd:10:ab:80:1c:92:82:
a0:27:da:63:fe:e2:50:00:f0:78:24:53:79:4b:c3:
dd:d4:c5:67:37:c2:d5:98:47:79:c4:38:c4:2a:93:
5e:98:61:ff:bd:fd:3a:65:b3:35:4f:7e:bc:ef:2a:
0e:ea:f0:d3:85:62:f4:06:c0:50:6e:61:39:45:77:
d3:a6:41:72:25:dd:12:5f:f5:b5:1d:2d:37:fb:bd:
c7:e2:fa:09:90:bd:ca:46:05:d8:98:41:54:1e:ec:
2a:60:0a:92:b0:d0:7c:3d:f6:7d:6c:10:58:9a:31:
41:d5:b4:81:39:c2:74:88:6e:4c:9c:60:df:9b:3e:
f6:3f:1a:c3:c4:26:13:c4:44:2e:09:ac:70:96:ab:
ca:eb:f1:9c:1f:2f:6e:eb:8e:02:d9:06:fa:66:48:
42:23:5f:37:c0:63:c1:5b:3f:98:d8:33:1f:0e:91:
74:02:c0:01:2e:de:31:59:73:d4:19:93:34:66:43:
3b:7c:ea:65:c7:dc:31:be:05:4e:9a:5a:74:54:f2:
46:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BF:16:2D:E3:A3:6E:80:09:4F:1E:80:AB:E0:8F:42:EF:7D:78:E9
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4f:23:aa:d1:ce:e2:5c:60:d2:97:08:7b:d2:d8:dc:5b:04:
08:b2:39:54:c1:37:be:a9:7a:f4:7b:4d:ce:07:d3:67:15:af:
9d:5e:fb:1b:16:56:e5:fc:69:ac:14:1c:3e:69:b3:bf:d9:84:
1f:1d:ec:3a:f7:f1:1c:73:97:d6:54:df:1d:ec:39:59:8e:ad:
11:3b:89:0e:92:25:cb:74:44:b5:78:6c:a5:4d:ce:2c:07:96:
61:b3:34:73:fe:fc:24:4b:b2:56:29:87:06:8e:85:da:ab:74:
89:f0:8d:18:1d:7c:e9:7f:c0:d8:e9:a9:0c:f6:ec:5a:5e:f4:
99:0d:e4:a2:1f:c8:a3:ab:52:98:4e:f1:0b:6a:62:ec:b4:21:
39:5f:04:51:e9:c6:d5:b6:c4:8d:de:b5:99:25:65:a3:eb:fe:
a4:68:a1:a5:96:24:25:11:7e:53:da:de:2d:39:fe:34:d5:a2:
40:cb:88:0d:3a:2c:bc:e9:66:01:58:91:bd:44:5b:4a:3b:4e:
36:8c:72:2f:6e:5f:2b:42:ae:fe:77:09:0e:83:44:db:54:b6:
94:15:80:ab:d3:a5:21:55:f6:e6:00:60:41:17:db:97:1a:41:
97:b7:c7:25:31:c6:dc:e3:48:a2:a1:75:c2:68:74:10:b0:00:
60:cf:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:53 2025 by rpki-client