
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: MVZ3ubecccV2epPHrV9U/OzsG+1CeiB6uf6KMURGgPI=
Subject key identifier: 69:04:26:8E:E7:51:A1:85:8A:CE:C3:A4:1E:EF:1A:F7:18:1A:DE:24
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 019654C9AD61159FC65C37315230E3C4C0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 0439
Signing time: Sun 20 Apr 2025 20:00:25 +0000
Manifest this update: Sun 20 Apr 2025 20:00:25 +0000
Manifest next update: Mon 21 Apr 2025 20:00:25 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: xayUNTTF0CqOuNyItzq6o1qg9mloBHQydf40NNa7mgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ad:61:15:9f:c6:5c:37:31:52:30:e3:c4:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Apr 20 20:00:25 2025 GMT
Not After : Apr 21 20:00:25 2025 GMT
Subject: CN=6904268ee751a1858acec3a41eef1af7181ade24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:32:85:49:8d:61:cb:73:1e:80:3f:3a:d7:
b3:5e:80:6f:c5:81:af:bf:80:2a:c7:dc:75:72:cd:
be:05:cd:80:e6:58:0b:d9:a5:bc:f3:9c:83:ff:7e:
db:8b:e5:ba:98:e6:2b:5e:7d:fd:0b:f2:09:e8:65:
ac:15:c9:79:7e:a2:b0:0a:7b:51:30:08:b8:72:1b:
b8:82:fb:fd:bc:9a:e1:c4:0a:14:f5:a9:65:15:76:
70:6f:7b:46:34:59:c3:cd:fa:c2:8c:58:4b:4f:1e:
66:b6:0b:d1:64:c7:4f:4c:74:89:f6:91:40:b4:50:
8d:b6:80:c9:15:e2:aa:95:38:bb:4b:52:d7:62:fd:
fc:4d:52:0c:a6:2d:f9:91:28:6c:1b:a7:8d:df:83:
f8:51:a1:9b:cf:95:c0:d9:fb:bf:a3:05:87:e9:98:
a8:dd:84:0f:7f:75:a4:90:af:d1:d1:47:72:3a:34:
f5:98:a0:56:0e:99:91:22:b6:12:8f:37:01:d5:3b:
8b:a9:a1:15:84:8a:04:65:58:16:66:3f:9b:62:3f:
41:3d:fb:8d:70:71:ef:69:be:92:8e:14:d1:b5:d4:
fa:be:39:bb:36:5c:46:c5:12:f5:2e:24:fb:45:fe:
40:de:8b:05:23:08:0b:85:ac:b8:18:27:ff:81:53:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:26:8E:E7:51:A1:85:8A:CE:C3:A4:1E:EF:1A:F7:18:1A:DE:24
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2d:d3:57:c1:21:e5:f2:03:d8:4f:55:fe:83:2b:19:07:5b:
1f:49:18:87:fe:90:00:1e:97:1d:80:3e:3b:ff:4a:e3:f4:68:
48:13:52:20:35:ec:14:21:88:28:e0:75:0d:46:5e:00:aa:ca:
bb:4e:db:89:7b:59:95:ec:c1:51:bc:50:a5:76:53:4e:4c:dc:
5e:40:6e:8d:3e:4f:59:d1:92:4c:0e:7f:58:64:47:41:f0:0d:
71:fd:15:bb:51:c5:60:95:fa:08:a9:79:b8:3b:cb:84:78:71:
87:fc:bb:78:66:58:c7:cc:94:a7:db:5d:d9:fb:17:04:63:79:
92:ae:7b:b5:d7:40:4c:8a:2a:ff:78:e7:bc:df:43:bc:46:d2:
1d:e9:02:58:b0:87:7a:b5:1b:0a:59:f6:41:57:bb:53:47:48:
0c:d2:e9:27:57:3d:fa:0a:80:e2:e9:9a:20:d8:68:1c:1e:05:
92:f4:02:91:86:1f:07:a8:65:92:cb:13:b4:04:14:a4:ad:35:
41:10:c8:34:26:66:98:0c:e6:0d:2f:03:6b:51:04:cb:93:20:
b9:42:2b:44:57:da:aa:3d:3f:80:ff:10:c6:a2:02:87:fc:13:
0c:fa:58:44:ce:bc:81:51:ed:51:5f:14:4e:d2:7f:33:63:d1:
25:59:ba:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:38 2025 by rpki-client