Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
File: BbMBfBaTuUW17aCR7JP4XBvh3zY.mft (raw, json)
Hash identifier: hdY2rtTJJKSipv5VxxuupedsW0wONrUFMf1Wcmjn/KA=
Subject key identifier: D4:B7:EA:0B:CA:07:EE:2D:6F:3C:9A:84:8D:2C:0F:A7:85:16:BE:59
Authority key identifier: 05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
Certificate issuer: /CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Certificate serial: 0196030948DC36AA866799F421715826188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
Manifest number: 14D7
Signing time: Fri 04 Apr 2025 23:01:02 +0000
Manifest this update: Fri 04 Apr 2025 23:01:02 +0000
Manifest next update: Sat 05 Apr 2025 23:01:02 +0000
Files and hashes: 1: 0PqHNIextYUeWaRuukCU9ZDkhXg.roa (hash: PV9oPev7zk3qt+GmlvP5jRJprYKlp0h1IX1LMGGntk4=)
2: BbMBfBaTuUW17aCR7JP4XBvh3zY.crl (hash: uTKDninJTAC22GO5usDWzI+HI3VOX/FnEGjCYhcNdSk=)
3: QOBXUK2eWdi2Xs0eVrU9f29djBA.roa (hash: FlnZK78Kp47RPmgz3alOCKMVyfm/4WPjMFqp9esIgFA=)
4: k3zrAg9lFEYGsBjnQKtAuswdHEU.roa (hash: akHKvvsfipvW6//S4H4PpXCZc/FACD9ypl19jEaFgQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:09:48:dc:36:aa:86:67:99:f4:21:71:58:26:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b3017c1693b945b5eda091ec93f85c1be1df36
Validity
Not Before: Apr 4 23:01:02 2025 GMT
Not After : Apr 5 23:01:02 2025 GMT
Subject: CN=d4b7ea0bca07ee2d6f3c9a848d2c0fa78516be59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:64:bb:07:8a:2b:ce:b1:8c:9f:20:86:b6:
77:31:05:51:5b:ff:ad:d1:1b:e2:1b:56:4f:ca:a8:
53:41:d9:13:23:92:2e:b0:80:f9:d5:21:cf:8b:47:
3f:03:fd:39:00:bd:54:f0:09:3b:3f:57:41:4f:09:
f5:eb:ba:74:7d:cf:ea:72:1e:2a:4f:cb:a4:9a:eb:
5d:42:3f:8b:03:41:d9:3e:8a:78:4c:b1:77:f6:03:
69:e9:06:ad:a0:0f:be:8c:e3:e1:c2:e0:db:6f:77:
14:fc:ef:38:f2:b0:05:46:80:a9:63:25:87:f3:28:
aa:08:ac:4b:07:15:e2:4c:8c:73:de:52:8f:9e:37:
f1:5b:f9:5c:44:b8:e0:d8:4e:0c:f8:5f:7c:98:a9:
e4:24:a4:2a:c2:52:1c:9a:11:17:6e:fa:fe:27:ca:
6f:9b:be:17:da:96:25:f7:aa:76:25:85:6d:fc:a5:
87:45:03:d0:60:4e:f1:4e:f3:f5:1c:21:df:c2:11:
bd:4c:01:73:82:01:db:48:15:17:2e:ca:a8:9f:05:
cb:ad:ec:a8:24:3d:62:10:b6:4b:0e:fd:5c:88:ea:
28:ea:17:2b:a5:f1:c9:c7:6f:4d:be:ab:65:d3:37:
d5:62:9f:73:a3:5d:4e:de:79:b0:c0:b7:95:ca:b5:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:EA:0B:CA:07:EE:2D:6F:3C:9A:84:8D:2C:0F:A7:85:16:BE:59
X509v3 Authority Key Identifier:
keyid:05:B3:01:7C:16:93:B9:45:B5:ED:A0:91:EC:93:F8:5C:1B:E1:DF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbMBfBaTuUW17aCR7JP4XBvh3zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5f75ad-83a6-4984-86fd-aa277e389fdc/1/BbMBfBaTuUW17aCR7JP4XBvh3zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1c:94:6e:a9:36:4a:56:76:9f:96:04:28:ee:62:f0:50:a3:
29:46:32:13:48:8d:28:61:71:3b:18:ab:cf:51:49:f0:d9:5c:
9f:4c:14:14:48:2b:1f:e2:00:99:15:b0:d2:f2:bc:26:3c:ae:
75:02:31:eb:bb:38:10:c8:2e:99:99:23:65:90:82:18:18:da:
47:61:87:06:42:fb:11:9e:dd:5d:79:2d:a8:5d:05:10:4c:d9:
0f:ab:54:47:22:5a:95:b6:ac:4a:7a:18:da:83:f9:0c:c8:9a:
32:ed:58:84:d7:b2:1f:a8:f0:a9:3c:ae:13:0d:d3:a0:da:42:
c1:58:c4:9d:0f:4a:30:70:e4:22:1b:d7:9e:0b:97:f4:fc:6c:
4e:ce:81:7f:5e:c3:43:a4:99:c5:1d:b7:02:2b:34:6e:61:87:
22:96:6e:b4:9d:1c:81:b9:4c:51:5e:da:5b:50:bd:06:a5:fa:
99:f4:93:97:b6:c3:37:6d:38:09:bb:93:e7:1f:2d:e1:cf:ab:
8a:e9:26:9d:c9:7c:aa:0f:d0:8f:94:a0:1b:8a:2f:c0:d2:24:
09:df:b6:d3:68:70:8a:4d:b5:1d:4f:39:c0:de:81:ad:79:6b:
1f:65:29:2f:2f:74:c8:86:17:26:67:d4:01:96:e1:6c:79:05:
6a:c6:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:34:53 2025 by rpki-client