Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: s6Ah8UIvu1k8n2zBvltHJmbsSHI0Zo2QU0TshYDUO6w=
Subject key identifier: 1A:E5:FD:1D:29:77:E8:14:44:35:01:E0:0D:B5:A4:3C:63:74:99:09
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 01958B4D592B4908FD6372E0C2816A062D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 03C9
Signing time: Wed 12 Mar 2025 17:00:56 +0000
Manifest this update: Wed 12 Mar 2025 17:00:56 +0000
Manifest next update: Thu 13 Mar 2025 17:00:56 +0000
Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: +MMaomyE/Eda8RqrFf4UJENoKJ8GcBvFMt+AcxGDWS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:59:2b:49:08:fd:63:72:e0:c2:81:6a:06:2d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Mar 12 17:00:56 2025 GMT
Not After : Mar 13 17:00:56 2025 GMT
Subject: CN=1ae5fd1d2977e814443501e00db5a43c63749909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b1:ad:0c:fe:f1:67:c9:1b:f5:39:8d:40:38:
08:7b:ae:83:1b:87:75:2e:f9:4e:98:70:2e:9a:a8:
62:f5:b9:a1:18:fa:df:d2:a9:12:22:f1:ad:61:aa:
56:63:7f:3d:8c:bb:34:19:44:50:ae:41:b6:03:da:
83:11:c7:4b:f8:89:11:3e:c3:ea:dc:88:a4:d5:2d:
bb:d8:22:a9:ea:59:2b:d8:a2:2b:c6:d6:d1:75:a5:
66:20:2d:10:86:23:82:e2:e0:31:01:e0:5a:10:cc:
cb:a3:e2:b1:a0:48:64:3e:f0:15:95:d1:12:80:37:
da:ba:30:6a:70:4a:3e:27:3a:34:7a:64:36:8c:b9:
a5:1f:67:7a:3b:25:33:ab:a8:4c:5a:c3:1a:d9:15:
13:57:62:96:3b:8a:6d:e3:cf:ea:20:ab:a4:ce:06:
7f:9e:0b:98:75:41:bd:d5:29:24:09:4c:6d:4b:e0:
72:21:d4:60:4d:fa:4f:dc:75:97:21:e8:f9:25:6a:
7f:0e:39:63:3a:c5:da:c9:12:b2:f6:42:be:c9:1d:
69:4a:a5:2b:f4:a2:e9:d1:28:c4:fb:c7:32:f6:12:
78:6a:71:0b:57:2c:6d:76:a9:96:78:02:0d:27:05:
cc:a8:68:d6:f3:37:e9:b7:b7:b1:1e:b9:27:bf:12:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:FD:1D:29:77:E8:14:44:35:01:E0:0D:B5:A4:3C:63:74:99:09
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:47:46:b8:0e:08:a3:90:4e:cf:61:5f:d3:7f:f4:f4:e5:b9:
6b:1f:23:40:da:70:ec:7c:ac:12:1f:c5:46:77:0a:5f:df:8c:
fe:b3:88:b0:88:5c:0e:94:cf:56:85:9d:3d:6a:5c:2a:61:6c:
a0:84:27:1f:aa:cb:f7:c6:3f:25:eb:10:fd:81:1a:4d:95:5e:
95:d7:36:eb:5e:17:26:fc:17:30:13:fa:db:49:45:e9:3e:f7:
d2:85:87:fe:81:1a:08:54:2f:bc:78:79:af:32:3e:bd:8a:0a:
1a:da:10:52:08:eb:5a:9e:77:dc:d5:a3:46:16:b0:31:f7:b2:
6e:e7:a7:7a:58:ed:71:2d:ac:0b:a5:6a:48:8e:b0:cd:56:d2:
04:f3:39:2a:87:dc:cf:64:7e:94:4e:c7:fe:a1:dd:10:cc:8d:
ea:b0:e1:c6:b3:df:1f:82:7b:8d:8e:82:2d:fa:3c:ce:4e:c5:
06:dc:fa:ba:89:25:90:75:2b:50:6e:ea:51:09:7f:0f:a1:e7:
47:c3:aa:50:f9:af:5f:03:43:4f:e4:7a:e9:76:41:90:77:0a:
f0:e4:1d:e9:30:f6:fa:7d:e1:6f:5e:5a:99:71:44:0a:50:9a:
cf:42:58:0d:5f:d8:86:3a:fd:71:96:fa:41:11:90:4e:80:c3:
21:80:3a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:26 2025 by rpki-client