Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File: BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier: vtNvofc62/k/IcV0v1ixTO8i2+OdrF45oICbr5NABKo=
Subject key identifier: 48:F7:52:C3:36:C5:DE:F6:04:1A:90:1C:4C:76:E7:A1:C7:ED:1C:FE
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 01963809322FE873D4730E9291CB58041DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number: 14F7
Signing time: Tue 15 Apr 2025 06:00:48 +0000
Manifest this update: Tue 15 Apr 2025 06:00:48 +0000
Manifest next update: Wed 16 Apr 2025 06:00:48 +0000
Files and hashes: 1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: OB9sMmBwq/pDshIQZQ4bSTNOt4CO/kH8IBv2P8RgDTc=)
3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:09:32:2f:e8:73:d4:73:0e:92:91:cb:58:04:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Apr 15 06:00:48 2025 GMT
Not After : Apr 16 06:00:48 2025 GMT
Subject: CN=48f752c336c5def6041a901c4c76e7a1c7ed1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:b9:ee:6a:a9:45:84:40:50:9e:aa:27:90:
ec:94:cf:6a:4e:dc:6a:a8:eb:f5:f9:b3:bc:26:3e:
0b:33:aa:e5:e3:5e:6e:59:f8:de:a4:bb:1b:1c:45:
14:c8:81:a9:33:49:6e:6a:d1:dd:03:d7:d1:28:59:
ad:ac:8e:b4:a2:56:ac:e6:97:69:6a:65:c9:68:2d:
8e:6f:8b:33:ae:77:ea:6c:68:92:67:d1:57:40:5a:
98:78:0e:16:d1:b7:cc:d9:14:ce:f9:32:aa:29:97:
ea:fc:a7:d1:2d:f3:29:18:67:89:20:bb:f8:3e:92:
4a:5b:41:be:86:2e:2e:ed:39:ff:5b:54:12:e5:6d:
99:88:a5:46:01:0d:76:6e:31:48:9c:eb:fa:b0:5f:
b9:c7:04:8b:5a:a4:cc:47:d3:ba:98:a6:ce:70:7a:
4e:ed:c8:3d:c9:63:49:ea:1e:46:56:04:48:18:3e:
55:18:99:09:c3:2b:e3:33:14:fd:0d:b5:60:7d:99:
7c:50:10:20:df:01:22:6c:91:dc:19:9e:9b:9e:55:
71:f8:3d:03:32:ea:54:10:16:68:b9:0e:ab:b5:ce:
b2:b9:b3:11:e2:d2:9f:7c:1b:c2:80:8e:71:99:5e:
df:c6:7c:3f:3c:70:c4:d0:fd:23:e6:06:76:8a:98:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:52:C3:36:C5:DE:F6:04:1A:90:1C:4C:76:E7:A1:C7:ED:1C:FE
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:43:fc:22:f6:01:7e:e8:37:ce:40:5c:96:a8:03:91:96:ae:
97:0b:95:b8:32:b9:90:c4:42:98:57:0e:3d:b3:72:9c:00:8a:
28:d9:b2:e4:d9:27:eb:aa:98:07:20:60:ae:6f:47:41:d0:5a:
8e:63:36:f6:a8:61:6c:d1:5e:46:2c:e7:78:47:8c:89:cb:96:
66:0e:35:fb:9d:b9:85:d4:33:64:7c:42:19:67:03:f9:2b:f9:
75:32:66:23:6b:fb:af:cf:b2:e1:84:e0:92:9a:ea:4e:96:c1:
6b:a9:78:ef:e4:3f:a2:ed:a1:01:85:f6:ed:3b:98:df:ba:38:
98:66:25:53:1b:60:78:8e:a1:ca:df:79:b1:f9:a0:b8:21:d6:
e0:4c:a1:e7:23:0a:f9:aa:0b:3b:19:02:80:b9:05:64:aa:69:
6b:e6:f6:96:28:1a:ea:96:bb:02:10:c1:c9:46:55:c4:a7:07:
c7:77:c9:28:27:38:fb:56:5f:8d:22:16:31:c0:0f:88:2f:c9:
da:81:ad:36:4a:0a:16:f5:99:29:3b:13:fd:04:0e:47:92:41:
b2:48:b1:f6:a9:98:8b:7d:bf:0d:d4:69:14:54:78:10:90:94:
62:d7:33:c1:c1:d9:d9:50:7c:97:f5:1a:23:14:01:a6:66:a3:
b1:37:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:04:21 2025 by rpki-client