Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: SFJm69D5yjdfnf3aW/A1ek/9KeIkZwuQWxEHUIGTLnI=
Subject key identifier: 0A:71:8A:F8:1F:F4:FC:0A:D5:B3:2E:6F:C1:0A:16:FD:30:99:89:3D
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 01963E78FE35F23F9F0DEABC7E8D8B35FC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0213
Signing time: Wed 16 Apr 2025 12:00:38 +0000
Manifest this update: Wed 16 Apr 2025 12:00:38 +0000
Manifest next update: Thu 17 Apr 2025 12:00:38 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: tQVoeytft3IXBO3c7ESgH3ez1zpfE4q4Tbq3YYpF2ic=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:fe:35:f2:3f:9f:0d:ea:bc:7e:8d:8b:35:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Apr 16 12:00:38 2025 GMT
Not After : Apr 17 12:00:38 2025 GMT
Subject: CN=0a718af81ff4fc0ad5b32e6fc10a16fd3099893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:07:65:96:9c:90:73:fd:f5:26:ff:06:a4:
ce:37:ac:2f:76:fb:d4:a8:a4:2f:d4:63:d2:1b:40:
ab:48:51:22:48:9e:29:45:d8:42:7a:19:3c:61:58:
29:40:c2:58:fe:83:08:d8:db:6a:63:d0:4a:13:fc:
74:6e:08:54:6a:49:2e:31:0e:29:98:88:6a:20:e2:
e5:8b:7b:eb:cc:0c:2a:36:09:39:a7:f0:d6:33:01:
28:6c:bb:91:c5:4d:8a:4b:8d:b6:01:9b:47:7b:d7:
d4:95:78:e1:6a:63:4b:d5:af:66:88:fc:61:57:1a:
d5:6e:8a:c0:1c:c4:ba:a2:42:26:06:0c:b3:5f:0a:
97:f6:a1:52:1c:9d:29:86:89:18:53:39:af:30:fa:
c4:12:c3:1e:75:b2:f9:ce:7d:2f:ad:39:e5:83:49:
03:fb:54:29:66:a9:5c:39:12:8f:5f:1e:9d:05:6e:
82:0d:04:71:8c:e4:27:be:7d:7c:5c:23:ed:0e:70:
4f:ee:84:df:92:3a:04:66:27:0e:77:f3:75:39:70:
fc:65:b8:d6:66:63:11:b3:c8:2d:d9:3c:ad:24:ba:
6f:18:fc:4f:8d:13:e3:03:a2:88:be:4e:d2:66:18:
59:e4:38:96:68:d9:cc:98:f1:ab:b4:90:e9:a7:25:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:8A:F8:1F:F4:FC:0A:D5:B3:2E:6F:C1:0A:16:FD:30:99:89:3D
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:86:1e:0a:77:d7:2b:1c:24:47:b8:0c:e6:dc:93:92:cf:fd:
1b:bd:88:f3:7a:6e:6c:fc:15:06:30:3f:92:17:9d:4f:95:cc:
3f:af:33:a0:ff:99:08:b8:9e:e9:31:b2:60:a8:e6:ff:6a:24:
89:1a:39:d7:ac:f9:c1:39:0e:72:2b:6f:44:d5:45:78:b6:f7:
db:b6:68:ea:a7:fc:f0:19:62:4a:25:9f:08:3c:58:26:9d:93:
d2:5b:68:cf:90:f0:01:69:d6:b2:f9:f5:d1:7a:09:c8:cf:5c:
4f:9a:72:84:6d:52:59:95:37:74:00:e7:bd:ab:04:09:13:a2:
71:77:ba:0b:56:a9:fa:0b:f7:fd:e3:a9:62:ac:8a:6a:cd:c4:
bd:aa:6a:78:cc:77:6e:1f:e7:2d:da:77:78:83:51:5c:96:12:
ae:89:b7:4f:f2:c4:33:ae:19:da:ba:4e:3d:d6:72:f8:ba:66:
64:70:86:ce:eb:bc:96:ec:81:ff:44:80:29:4d:7d:8e:0e:26:
c9:d2:64:90:0e:76:da:0f:98:9d:43:b9:c0:74:a3:cd:b2:29:
91:41:a8:66:9c:d7:2b:d6:96:24:0d:a9:b0:80:08:a6:06:b5:
20:27:8a:f0:35:b0:77:e0:39:63:d5:60:b1:63:b4:12:f2:ab:
f0:4a:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:52:13 2025 by rpki-client