Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json)
Hash identifier: iQSeWVlYs5P47KIp0ce9n9pA8XMzNDqZnqOgTtMi0ms=
Subject key identifier: 1C:71:44:56:09:E7:78:6A:41:F3:86:B0:C3:1A:02:8C:8C:9F:98:F9
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 019649D82F15F58CD64EF25A0AF1B5C3AB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
Manifest number: 11D5
Signing time: Fri 18 Apr 2025 17:00:26 +0000
Manifest this update: Fri 18 Apr 2025 17:00:26 +0000
Manifest next update: Sat 19 Apr 2025 17:00:26 +0000
Files and hashes: 1: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: Nwo2NgFLo2jcz9YQLq80Kbfo7rsMMYRCh00MzVP0m2E=)
2: JK4DrjVqJZHEOsxNs3AvCZ86LwU.roa (hash: IC8g+rTgJsV7HCIL0Y7ai3WH4Yfaam+xJvhryF3zYcs=)
3: mw3UopCN0qCZSAFSL8iW1ka0EvE.roa (hash: 3h4ack1cZJvvTtGjN9nlejYZPVsbJgfv+b7LhkzLwvY=)
4: oez9MpvLP4aUEOYLWU34hwCDw94.roa (hash: Vq3RJAy6RPV/lP/DCa8IN03DFfdbImVQSp2X7oz2Vp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:2f:15:f5:8c:d6:4e:f2:5a:0a:f1:b5:c3:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Apr 18 17:00:26 2025 GMT
Not After : Apr 19 17:00:26 2025 GMT
Subject: CN=1c71445609e7786a41f386b0c31a028c8c9f98f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:f3:48:e4:b1:53:f9:5a:ff:83:de:70:be:
74:64:2c:ae:86:ac:32:45:fa:5a:af:91:40:8d:8f:
29:f2:a4:4c:45:07:3b:80:1b:3b:a8:4d:f2:e8:68:
59:72:27:d4:66:84:35:0c:75:55:cb:8a:a1:1d:45:
94:c6:ca:8b:87:da:60:57:16:cc:b9:6a:c2:92:24:
fb:fd:33:f2:b4:a9:52:c1:49:fc:32:95:d0:d6:3c:
f5:d1:eb:9b:93:00:a4:91:ef:b8:30:0e:dd:09:60:
87:b7:60:06:5d:7a:c1:0c:43:78:fb:fc:d7:d1:31:
d4:30:7c:d9:e7:43:6a:5b:f0:d0:d9:d9:a5:ae:2d:
a2:66:81:91:2b:a5:e9:e6:35:2d:d2:57:4d:25:75:
a0:c3:39:80:e8:ce:55:74:13:29:ca:a3:31:5d:46:
bf:f4:0d:a5:a3:cb:80:0a:3f:69:45:9e:1d:cd:69:
51:ce:db:33:29:14:40:4c:03:49:d1:90:a8:6f:d9:
d4:02:f8:98:42:03:80:6e:8f:e3:ee:62:7b:2e:20:
e0:df:4d:28:ec:2a:ad:56:27:23:2c:99:9d:aa:d4:
1e:7f:b8:ba:61:c9:51:d9:98:1f:cd:e2:74:1a:e5:
a8:8a:85:90:4a:26:5f:82:aa:55:90:c6:78:f5:65:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:44:56:09:E7:78:6A:41:F3:86:B0:C3:1A:02:8C:8C:9F:98:F9
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ad:a4:6e:c3:0d:a1:db:9e:b8:12:4f:a5:9f:61:fe:0e:51:
b5:45:1c:c1:77:da:44:30:07:b7:8f:41:0d:27:ef:f8:ff:3b:
55:82:a9:59:06:f3:7e:1b:85:6e:75:54:dd:9e:56:96:12:2c:
cc:ee:00:18:a6:3f:ec:db:2e:58:2b:0b:12:5f:5d:14:81:a4:
e3:ee:6d:62:50:01:11:ce:41:34:f2:a7:8f:50:41:7d:7f:14:
5c:0e:3d:43:36:69:55:53:6d:05:7e:a8:26:6b:3c:3a:d7:ba:
0a:44:98:49:00:a9:92:8f:71:84:1e:25:ae:df:6d:ad:16:cc:
57:bc:66:ba:16:7c:40:0b:cf:fc:a5:76:03:d4:5e:7e:2c:c8:
52:81:43:0b:e7:8c:52:3c:d9:45:75:11:98:65:fd:01:aa:9b:
7d:a4:ab:30:ea:12:13:6d:26:ad:d2:a1:1e:a8:83:b4:d7:62:
7f:ba:f4:22:c2:1b:ac:aa:88:21:60:d1:57:56:5b:ad:8d:b1:
e7:95:8a:dd:80:d3:1f:70:4b:0a:f2:a9:22:e9:8a:46:79:b6:
3e:cb:59:32:d0:60:dd:c2:be:aa:3b:93:79:9a:50:4c:14:ab:
aa:f5:39:da:d1:db:5f:a9:66:96:be:56:02:2a:5f:5c:4b:09:
bf:b9:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:30 2025 by rpki-client