Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier: ZWhB2K1SPEBiF3Y794xB1343a5XutHIxS15we7bLdso=
Subject key identifier: 65:13:3A:42:17:31:58:F4:2F:46:8B:14:74:7E:0C:2C:AB:65:59:55
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial: 01958B4DEC55B4E51A3A095B332E6EA90F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number: 09EF
Signing time: Wed 12 Mar 2025 17:01:34 +0000
Manifest this update: Wed 12 Mar 2025 17:01:34 +0000
Manifest next update: Thu 13 Mar 2025 17:01:34 +0000
Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: S4ldk6jiWe4XxGU6rsPA2G4bZhD3UXMbydEz/52Kj48=)
2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:ec:55:b4:e5:1a:3a:09:5b:33:2e:6e:a9:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
Validity
Not Before: Mar 12 17:01:34 2025 GMT
Not After : Mar 13 17:01:34 2025 GMT
Subject: CN=65133a42173158f42f468b14747e0c2cab655955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:ec:8f:30:c8:8f:a9:76:25:83:00:63:b5:
79:e8:1d:69:9f:2c:73:60:52:07:f9:c5:3c:31:cc:
4f:d1:4f:e1:ba:85:15:43:2d:31:30:89:82:0d:47:
1f:66:91:51:a3:c3:70:9d:3e:2b:c4:d2:88:76:a7:
7b:f6:2f:c9:1a:ad:e8:4b:64:d5:74:fc:77:c0:40:
53:b8:68:e1:33:d1:15:8b:a9:b6:e6:de:2c:d9:23:
a0:a5:c0:0f:34:f1:c1:83:37:00:21:e8:3a:42:3a:
27:51:8e:14:04:cd:5b:1b:15:a4:9b:36:5f:b6:9d:
33:0d:58:3d:8a:f0:97:27:c2:73:f6:a2:e9:0b:45:
35:89:d9:fb:04:0e:26:9b:6f:17:7a:a8:a8:fc:17:
f7:3f:b3:be:05:f7:85:1c:55:47:b7:fa:da:ee:8a:
91:b1:7d:72:44:2a:74:3e:dd:cd:46:ea:95:fc:26:
64:88:3d:a3:dc:aa:0d:e7:9d:35:2f:50:10:85:5c:
41:a5:ad:07:15:99:b5:70:78:e4:00:30:3a:31:8e:
67:79:68:12:37:08:5f:67:08:02:f9:56:f2:80:41:
39:93:83:5e:ee:91:eb:83:6a:e2:65:67:b1:62:33:
49:b2:10:bc:b9:a7:77:ea:74:51:53:13:e9:b8:6a:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:13:3A:42:17:31:58:F4:2F:46:8B:14:74:7E:0C:2C:AB:65:59:55
X509v3 Authority Key Identifier:
keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:35:55:dd:64:0e:be:56:be:a2:da:54:8c:66:49:2e:34:
96:9c:7b:23:60:ef:72:bd:3f:52:90:08:84:d4:88:73:b1:41:
b1:fb:6e:2e:2f:a1:a8:eb:88:f1:10:6c:3a:c0:0a:49:af:1b:
13:f0:9f:ed:d0:7b:db:d3:11:55:2d:c1:fe:99:36:6a:1e:fb:
23:0c:82:31:79:99:65:fc:11:68:2e:de:16:21:3d:ff:57:69:
20:ef:07:18:8a:08:e5:3b:ae:6e:76:31:9d:51:3e:31:18:b0:
de:ce:8a:28:00:6f:d5:2c:63:05:28:a0:61:46:7e:e2:fd:8c:
81:e5:9d:06:d7:0f:ea:0d:b9:0a:38:f9:77:ac:25:67:56:27:
6f:3c:97:07:60:6f:80:5a:07:b1:39:c4:8d:97:9d:f9:42:bd:
41:d0:7b:dc:3a:da:81:f2:c1:3f:ff:2a:cd:20:c3:40:e7:11:
e6:4d:79:52:44:07:1e:38:b3:46:5d:ee:fe:ce:6e:b0:25:4e:
85:da:c8:fd:87:58:cc:ff:ca:af:64:a9:52:67:28:24:a4:86:
9d:e4:da:42:2b:a3:85:29:45:f9:29:94:5b:c2:3e:59:a7:83:
d2:26:cf:7c:04:f1:cf:16:01:ac:f6:d7:07:78:c0:c3:a3:ac:
91:87:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:40 2025 by rpki-client