Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: o45knYYLi1H+s2aFptxUb+yDTmOmXIj8av4PTBqBpDU=
Subject key identifier: 08:9A:2D:EC:D8:EC:67:F6:2F:92:DB:3F:A3:20:A7:CD:5C:EF:F4:D4
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 0196488E9A87EFA41DDD497B23C018DAE79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0C6C
Signing time: Fri 18 Apr 2025 11:00:27 +0000
Manifest this update: Fri 18 Apr 2025 11:00:27 +0000
Manifest next update: Sat 19 Apr 2025 11:00:27 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: 94U+NEYz9xZb9wzzU/R0QCkzK/zqkGfcMTVXPG7E42A=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:9a:87:ef:a4:1d:dd:49:7b:23:c0:18:da:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Apr 18 11:00:27 2025 GMT
Not After : Apr 19 11:00:27 2025 GMT
Subject: CN=089a2decd8ec67f62f92db3fa320a7cd5ceff4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e9:6e:25:ae:5a:65:ff:6e:bb:da:42:7a:07:
2e:6f:41:a5:74:1b:86:18:8a:41:12:50:98:b4:a4:
bc:15:bf:de:f9:88:9d:03:e9:39:c6:21:92:28:b2:
1a:4c:f7:80:78:e1:de:c8:e3:b5:3f:85:53:9c:0c:
12:b8:7d:a0:da:b4:37:3a:38:22:76:85:d8:18:45:
a5:88:ee:67:4b:96:c2:43:05:f1:79:e9:5a:33:54:
b4:67:90:9d:c5:a4:97:1f:34:9f:73:d8:96:49:3f:
9a:d6:04:fc:b6:50:c1:bf:2e:88:5b:59:21:cc:67:
bd:d0:5c:16:86:6c:e8:bf:2a:be:06:e9:f1:81:79:
4c:9b:f4:cc:a0:2d:83:28:19:4a:f2:9d:18:ce:0c:
7a:ca:7f:7f:2c:12:f1:b8:41:19:ba:3f:d0:2b:5a:
f0:d1:3c:8e:a6:f2:2e:22:15:d9:6d:ec:b7:25:e1:
8a:77:39:01:3b:3b:ba:18:84:bc:20:5e:ce:e0:fb:
80:99:c4:f7:a3:e3:6d:d4:51:87:c2:61:ac:50:55:
59:cc:a1:f5:14:23:ac:d4:0d:a4:75:ba:c1:fe:37:
b4:bf:8b:78:9e:a8:2f:ce:00:c9:e1:0e:64:2a:4f:
ce:5b:a3:9d:57:77:e9:b0:01:12:48:c6:64:6f:da:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:2D:EC:D8:EC:67:F6:2F:92:DB:3F:A3:20:A7:CD:5C:EF:F4:D4
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c5:50:84:4a:75:bc:7e:f8:f1:47:56:ff:77:5f:4b:4a:b7:
dc:9b:75:6f:36:4f:6c:26:19:83:d7:8c:cf:8c:fc:6f:d1:04:
47:63:90:ba:b5:5d:20:76:d7:2b:e1:3a:39:94:33:e5:3e:4b:
93:bb:db:40:73:02:09:f0:74:c8:0a:0a:c1:e9:f9:8d:21:1b:
51:09:9a:10:67:6e:1b:4b:85:2c:8e:35:88:97:99:f1:09:d1:
c1:98:bd:3c:63:da:ac:dd:40:33:80:23:dc:fd:b8:3e:19:0d:
3b:62:f7:c2:6a:e7:b4:3f:02:8a:3b:83:c6:e2:c6:42:68:b9:
e7:26:ae:5f:39:49:dd:c1:87:cc:c3:3f:1e:c5:77:4c:17:2c:
8c:52:fe:6a:c1:f4:68:ea:0c:48:2f:94:2f:3c:83:78:1c:ca:
da:6b:f5:4a:ae:41:ef:d6:9a:7f:68:1c:9b:a8:da:d4:58:26:
2d:ee:8c:4e:28:4f:48:86:8e:ab:8f:63:15:b0:56:e5:f8:7e:
e4:c0:59:b7:8f:6c:e5:3c:85:bd:a4:87:7d:ce:cc:ad:60:77:
e9:13:ad:cf:4c:22:40:37:44:cd:41:d7:e4:28:90:f7:f8:0b:
e3:86:ff:ed:92:1b:79:7b:4f:9f:32:a6:2b:3a:c3:55:e8:04:
68:40:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:30 2025 by rpki-client