Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File: bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier: 5F8/kpbbWkKO4TqZffXjTpXZ/+iZqSYmknKf87LKolA=
Subject key identifier: FA:6B:07:FB:41:6E:92:FB:12:D8:F5:CF:81:5D:69:5C:82:6D:4A:69
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer: /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial: 01958CCE748C668B001DB5A2F7ADDBFB0BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number: 0B76
Signing time: Thu 13 Mar 2025 00:01:35 +0000
Manifest this update: Thu 13 Mar 2025 00:01:35 +0000
Manifest next update: Fri 14 Mar 2025 00:01:35 +0000
Files and hashes: 1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: wRLjgNHf9//2R+oTioXgPncBS5V8VS3bwi5y645uXQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:74:8c:66:8b:00:1d:b5:a2:f7:ad:db:fb:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Validity
Not Before: Mar 13 00:01:35 2025 GMT
Not After : Mar 14 00:01:35 2025 GMT
Subject: CN=fa6b07fb416e92fb12d8f5cf815d695c826d4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:33:65:64:84:4a:89:84:29:a3:be:bf:be:
36:ed:3e:c5:ed:12:d5:c3:8c:5a:37:85:74:b4:e4:
bb:50:7f:1e:77:7e:65:89:3d:0c:a6:ac:47:12:b2:
c4:ee:0f:d0:6b:d6:94:67:28:fe:d7:d3:85:08:b7:
89:89:bc:c0:31:c7:73:01:06:9f:f5:dc:d0:7b:a7:
36:eb:80:e1:6a:83:82:6f:ce:b6:a6:bc:fb:7a:c6:
79:64:a9:2b:30:32:bf:b0:24:e9:2a:6d:42:7b:1a:
ac:62:3a:7f:fd:57:c7:ef:06:9c:66:8d:ac:29:ec:
da:47:7c:8e:b4:02:42:8d:a9:67:08:b3:4c:fa:4b:
c5:81:95:10:c7:96:c3:88:bc:62:98:7e:21:0a:75:
68:55:5e:9c:aa:33:08:34:57:55:06:4c:a2:09:81:
25:6c:26:48:f2:17:3f:02:00:3c:1c:56:f4:3d:48:
91:b8:22:a9:da:a5:d2:d3:66:dd:99:5f:9c:9f:7b:
78:a4:54:b7:7a:8d:9d:a0:fd:cc:05:66:21:2c:f5:
dc:05:f9:b7:5b:ee:c6:36:91:dc:6f:24:ef:0c:1b:
a3:86:0f:c3:7d:61:8a:c7:c6:d4:0e:c1:79:07:c0:
e7:ed:c0:0a:21:d1:50:9c:9a:ec:5c:89:f0:9e:a1:
24:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:07:FB:41:6E:92:FB:12:D8:F5:CF:81:5D:69:5C:82:6D:4A:69
X509v3 Authority Key Identifier:
keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:d6:bb:6b:4b:06:64:8f:9c:fa:91:ca:4b:73:eb:cc:8d:
ae:39:ae:1b:a1:ef:fc:57:a1:79:17:cc:5d:49:3a:d7:54:94:
c3:73:ad:19:46:cd:b0:4b:ac:fb:79:1a:bb:20:11:5f:da:26:
d2:f4:c9:f2:60:2e:d7:7b:f6:09:d2:3a:d3:9a:22:ef:a1:5b:
3c:95:b0:b4:d4:8b:81:11:5a:5d:f6:53:49:bd:0e:23:f5:9a:
bc:92:dd:95:50:4b:9c:e4:8a:7d:77:7a:88:36:0b:cb:53:12:
0c:28:04:d4:d4:89:50:85:be:70:7b:33:1f:d3:42:bd:b7:5d:
c6:d1:b2:c0:ba:83:ea:aa:b9:e2:f1:ea:49:75:20:91:38:f6:
7d:f5:a9:99:6b:9d:5c:f0:11:7c:79:3f:37:c7:71:b4:b9:72:
e9:b0:bc:d3:8e:48:a4:3b:75:d1:5e:5c:1a:73:72:c3:5b:96:
38:54:e5:83:38:f3:75:12:de:5e:76:9f:b2:1d:f0:3b:03:d9:
82:f7:8f:e4:20:d1:b2:a0:20:64:2b:95:d8:83:06:07:9b:89:
bb:c0:2e:8f:f7:27:d3:ab:cb:ae:3f:af:94:f3:6c:77:f0:d8:
4e:a8:8e:ad:8c:85:60:77:f4:49:21:29:29:2c:eb:6f:e9:a0:
25:07:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:09:13 2025 by rpki-client