Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File: bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier: mNREBtAMgXZ2lSZQlb50WEZXtoB318Pb7UgZ6kIs7zk=
Subject key identifier: AA:9E:CF:3A:38:11:4C:4B:72:17:09:0E:08:FA:2C:84:C8:88:9D:EF
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial: 019650B69D346BDF383A1D888BC65BAAA578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 01:01:07 +0000
Manifest this update: Sun 20 Apr 2025 01:01:07 +0000
Manifest next update: Mon 21 Apr 2025 01:01:07 +0000
Files and hashes: 1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: R+tKbz5IHG0sjCbcSMvqf3PTb98tSl8MWJ9oge4ZKxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:9d:34:6b:df:38:3a:1d:88:8b:c6:5b:aa:a5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Validity
Not Before: Apr 20 01:01:07 2025 GMT
Not After : Apr 21 01:01:07 2025 GMT
Subject: CN=aa9ecf3a38114c4b7217090e08fa2c84c8889def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:4b:68:c4:5b:82:57:4a:65:d9:c9:2c:99:
d6:8f:c1:d0:62:30:7a:ca:53:e3:79:90:cb:39:e0:
46:9a:47:84:88:27:ee:e5:73:c4:6a:ee:74:f9:c3:
a2:07:4a:a9:8a:fa:ed:ec:8c:34:94:bf:62:fb:eb:
04:22:7e:a4:28:c4:7a:33:bf:9a:88:04:88:04:08:
85:ae:dd:17:dd:79:2a:12:13:af:16:c9:c4:d2:ed:
0c:b9:5b:90:98:08:bf:43:d6:d1:d9:1c:9a:f7:fd:
28:9d:7f:31:82:b2:eb:e0:13:89:a0:0c:36:ad:e4:
7e:60:30:63:15:03:76:e2:91:26:6e:6c:f9:1a:f6:
ab:a2:a2:04:c2:05:ce:6d:44:49:16:7d:33:be:26:
05:34:f4:fa:6d:5f:ce:3e:7e:d8:4f:6b:bf:b1:75:
a6:d7:2e:0c:8f:1a:b3:ec:95:38:b5:84:68:a6:e9:
d8:01:d0:13:c2:01:c5:c8:79:91:fb:f2:ba:26:02:
af:99:0c:a9:ab:2e:b4:1b:67:b8:b4:97:a9:2f:7a:
39:55:1e:c8:1f:a5:6b:f7:cc:47:c0:3c:34:47:51:
3b:5c:e8:15:40:68:d6:ff:9d:51:c4:10:41:74:55:
b4:2f:a2:66:aa:e6:6d:4c:60:76:45:b2:f9:06:49:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9E:CF:3A:38:11:4C:4B:72:17:09:0E:08:FA:2C:84:C8:88:9D:EF
X509v3 Authority Key Identifier:
keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:34:eb:6d:6e:2b:3b:a1:6a:97:3e:5d:78:c5:99:08:d3:
a5:b5:fc:e3:a5:46:ef:60:29:94:78:98:5a:12:46:3d:5d:6b:
bc:39:6d:ac:23:4b:3b:54:ec:ca:8a:65:ba:15:14:b6:3d:bd:
6e:05:58:a1:5c:23:59:21:45:8c:51:6c:7f:37:7c:45:64:0b:
a8:8d:4f:58:d6:db:f0:5f:f9:9b:08:90:c2:6c:be:92:0f:75:
7e:be:92:5e:94:b8:66:98:a8:1d:7b:11:00:26:4a:1b:c8:26:
1d:8e:fa:83:ea:bf:71:07:5f:6d:67:1b:1c:3d:d7:1a:41:6e:
a1:03:db:7c:0c:5a:4a:3b:ec:ed:73:da:d4:5a:2b:11:f3:a9:
b6:eb:3c:ce:f6:1e:42:ea:99:61:89:7b:f7:8d:38:7b:0a:55:
60:5d:e2:63:fa:f0:40:57:7d:5b:81:a6:50:54:77:38:1b:41:
f9:71:7b:92:19:56:df:3d:a6:ec:df:13:ae:81:1f:a0:58:db:
0b:40:84:e4:1f:aa:6a:19:c3:3a:8c:29:73:5a:0b:4a:56:3d:
bc:84:b3:c2:81:5d:5d:e4:ee:de:4f:82:03:0e:72:db:40:4d:
93:ad:6e:76:38:0e:4a:17:a5:82:f9:9e:8f:82:ee:9f:1a:e1:
81:00:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:05 2025 by rpki-client