Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: rWjfPTaijLmr8DWKjd/gbKzdef0ibTS2U/UvcdL2BmM=
Subject key identifier: 82:0D:9C:55:F9:9D:55:64:3E:AE:5C:0E:94:F2:34:7B:AE:CB:F6:11
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 01958B4E1BDB9B383CA8E6F625C16BF0BE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 17:01:46 +0000
Manifest this update: Wed 12 Mar 2025 17:01:46 +0000
Manifest next update: Thu 13 Mar 2025 17:01:46 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: QtlldYWDgDx7qptyfpYN3hUC38gci0x9alzkTreLOFs=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4e:1b:db:9b:38:3c:a8:e6:f6:25:c1:6b:f0:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Mar 12 17:01:46 2025 GMT
Not After : Mar 13 17:01:46 2025 GMT
Subject: CN=820d9c55f99d55643eae5c0e94f2347baecbf611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:e1:ab:cb:2e:20:00:54:de:29:b2:34:ea:
39:d1:9a:5a:8e:b3:13:11:9f:32:2c:24:b5:50:a3:
a0:e0:48:e5:db:74:dc:35:e7:a7:06:58:66:54:b4:
8b:96:6a:79:e9:ca:13:72:2a:eb:ce:87:87:5b:f4:
09:69:7f:8d:d7:cb:04:ac:c8:7f:23:9e:db:54:82:
88:01:a2:2f:b3:40:d2:2f:9b:e9:74:36:43:e6:74:
c0:06:62:1f:85:da:3e:5b:8d:18:aa:75:4c:f2:c5:
f4:20:74:e0:0d:a7:66:48:2d:b8:00:9a:e7:3a:ad:
f2:79:87:cb:b5:77:46:e8:6d:13:b7:71:8e:1b:1b:
21:47:92:4a:16:ef:c4:f1:b4:b2:ed:da:ed:bb:da:
ec:90:82:28:30:c9:96:4b:ce:79:f7:2d:45:f0:db:
dc:f5:ba:3d:be:3b:91:8d:db:6a:e2:e7:f9:63:86:
1f:32:a0:7a:e4:ec:27:05:4e:b9:76:62:4f:ab:69:
85:68:b1:bb:4d:d5:7d:06:9d:70:eb:07:d6:61:8c:
19:03:2e:6c:55:68:12:a0:42:4e:e3:df:bc:6a:e7:
3b:71:43:fc:e2:65:b6:d6:72:ae:1e:bf:97:2c:e9:
6d:b3:82:10:3e:c0:02:f1:dd:28:83:7e:7b:a4:a4:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:9C:55:F9:9D:55:64:3E:AE:5C:0E:94:F2:34:7B:AE:CB:F6:11
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:b7:e6:f9:4e:17:fa:e4:f9:dc:46:b4:b6:ce:a2:5a:b3:
d9:b0:9a:cb:16:60:95:85:b3:f6:3e:05:50:b5:3f:10:cb:94:
1f:fd:8e:21:54:71:ba:97:34:bb:e4:71:c3:22:a2:2f:91:80:
e5:c6:df:eb:aa:44:ff:ed:34:89:45:3a:07:04:33:84:f9:fc:
9c:0b:35:03:34:f1:b5:e4:55:ad:43:9b:18:07:83:d0:a4:c0:
46:d0:7e:91:89:3b:01:e0:e4:a0:20:62:d8:51:22:6e:a5:b1:
c3:1c:4c:24:e3:16:ee:28:92:d8:a1:f0:59:60:cf:62:2b:2a:
ef:da:12:e0:1e:a6:82:d8:b4:a5:e1:6c:b5:26:bf:a5:3a:f4:
69:e7:7c:a7:11:7f:df:22:8b:9b:be:a9:94:aa:47:d7:e9:b5:
0a:51:5b:30:ec:cd:d2:02:31:cb:60:b8:0a:a1:12:3e:8f:b5:
39:94:ff:ae:90:b3:81:3b:6a:a2:71:3b:84:2d:44:c0:6b:20:
c1:df:3e:04:84:7e:67:43:43:f6:6a:70:3b:36:cc:ce:57:38:
ad:ff:f2:36:da:38:21:6c:c8:ee:74:c0:f1:ed:5f:d1:89:c6:
25:35:8a:ba:ab:d9:72:f3:23:a0:34:b6:c1:20:0a:d4:b1:6d:
e3:72:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:53 2025 by rpki-client