Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: VUEYwN2ieh6kswmKmzNzPp2x9adrED1EBSgHPQE8P4A=
Subject key identifier: 00:BE:39:7B:65:81:0B:EC:02:84:E8:97:02:97:56:86:B2:A4:7F:8B
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 01964EFEA9974D459D053FE8FE16C1C00A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 17:00:34 +0000
Manifest this update: Sat 19 Apr 2025 17:00:34 +0000
Manifest next update: Sun 20 Apr 2025 17:00:34 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: kklmzA7YRdCWlujfCRX+l2tCMCVpBqMsit7t5/Cfy3g=)
2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:a9:97:4d:45:9d:05:3f:e8:fe:16:c1:c0:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Apr 19 17:00:34 2025 GMT
Not After : Apr 20 17:00:34 2025 GMT
Subject: CN=00be397b65810bec0284e89702975686b2a47f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:2d:c6:d9:a8:7a:a4:9c:a5:ff:b6:a7:e9:
d5:8f:fc:56:10:55:97:02:8f:85:6f:33:2b:98:28:
07:2f:ee:86:52:20:0d:47:ce:11:63:59:fc:30:49:
16:f5:4e:6b:e6:15:3b:64:89:71:d6:5c:07:57:fc:
11:18:b4:90:0e:3f:e0:76:aa:e7:6e:a2:73:76:d9:
e7:e9:03:77:dd:f3:79:f7:26:35:b8:9b:ff:02:09:
86:be:c5:5c:cd:0a:bf:81:47:58:32:53:33:67:1a:
3b:02:96:b5:8a:d6:ff:87:c6:77:21:85:aa:3e:00:
ef:0d:96:1d:e6:9e:f0:ad:e5:67:b2:63:ac:b7:41:
0a:30:a2:45:e1:07:3b:cc:c6:85:c5:1a:c9:82:81:
4e:35:b7:46:96:8a:21:d7:fd:43:53:3d:80:e1:d2:
36:cb:07:3b:63:a8:0a:e3:d5:bd:54:70:46:35:2a:
a4:e4:e9:a7:fd:43:36:5b:fd:c0:2a:25:0f:e1:9d:
4b:10:f5:82:5a:01:05:25:d6:c3:ec:ca:ce:35:03:
cd:ee:44:19:05:c8:fe:b9:17:53:f2:17:fc:fa:b4:
ec:ed:6e:5b:a7:82:5d:29:5e:6b:b2:a5:e8:c9:d5:
ed:33:62:18:13:2e:a5:fd:fb:a4:6d:ea:5c:91:88:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:39:7B:65:81:0B:EC:02:84:E8:97:02:97:56:86:B2:A4:7F:8B
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a0:80:b8:4d:ab:f3:b2:79:e2:75:04:43:5a:a0:3b:73:55:
1e:e7:fa:4b:ec:89:1f:91:00:f7:79:56:84:49:e7:52:9f:7e:
e9:88:d2:05:f4:79:0b:87:00:c3:59:71:e5:52:0c:b0:95:b2:
69:db:e4:08:22:ad:9c:de:73:7c:5c:4d:8d:31:38:32:da:f9:
60:81:51:6a:b1:65:b3:31:b1:9d:ce:de:c4:19:f8:cd:e5:be:
19:da:6a:5e:2f:76:ec:cb:1c:8c:b5:7b:82:b8:c2:a9:50:69:
f8:67:34:9e:52:07:d7:30:d5:24:84:02:85:fb:85:23:85:75:
f9:3c:b1:32:55:d7:79:b3:32:72:ac:f1:33:05:80:db:59:5e:
f9:28:a3:73:64:38:23:01:56:80:de:f8:d3:e4:4b:c9:27:59:
1d:ba:4d:41:8a:d2:a4:b8:6d:c3:e7:02:09:0a:9a:43:be:d4:
ce:ef:da:c3:cc:c4:99:51:90:32:27:3f:71:ff:ee:c0:77:04:
7b:81:4f:3e:5f:9d:92:51:f7:27:2a:43:6c:ba:22:71:8d:ac:
d8:15:ca:f1:53:52:ad:89:09:f4:fb:4e:d8:10:68:46:26:d0:
15:c1:42:af:ec:8a:9f:97:b3:57:d7:e0:45:71:c8:53:b8:4e:
f3:2f:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:12 2025 by rpki-client