Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: Gl8/NsG6VTZXksDEgMfOCEpQNWIjxHdNiown8wgRfZM=
Subject key identifier: 46:BF:AE:DB:1A:A2:1B:29:BC:D4:C1:35:AF:C1:82:AC:3B:90:79:00
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019629A93D783DB550A7168C1DAF301AB046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: B1
Signing time: Sat 12 Apr 2025 11:01:19 +0000
Manifest this update: Sat 12 Apr 2025 11:01:19 +0000
Manifest next update: Sun 13 Apr 2025 11:01:19 +0000
Files and hashes: 1: BsVvYEeON_W4W9ZLNqa4GXckg6I.roa (hash: iOxv5V+HpG39JzWV7shdmh0Q2oD1yPq3ovyP8RI1dPM=)
2: PejYz8HPGGclVll9vz9DLWCJzMQ.roa (hash: kVrf6QXYUJflpg6RS9qqGj+K93kGQxvjJpeCSRiFtPk=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: DY3FKDzc8wg9z9MKF2daTew26x3gYD4hnHkvXuUQqJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:3d:78:3d:b5:50:a7:16:8c:1d:af:30:1a:b0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Apr 12 11:01:19 2025 GMT
Not After : Apr 13 11:01:19 2025 GMT
Subject: CN=46bfaedb1aa21b29bcd4c135afc182ac3b907900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:81:cb:5c:29:49:ba:e9:48:52:d9:40:e9:
d6:65:eb:b5:cc:cc:4f:b6:d6:2d:97:be:8a:fc:a2:
be:04:c2:88:3a:41:3f:f1:fb:a0:db:dd:b9:61:5a:
dd:a6:55:c2:9f:cf:f6:dc:08:34:64:29:53:35:31:
d6:9d:23:3a:0c:65:e8:06:e4:78:93:12:b2:0b:00:
db:fd:ca:43:59:b5:33:0c:50:62:ba:43:5b:79:9c:
4b:d1:e9:00:dc:aa:51:45:62:10:38:92:0c:f5:57:
aa:11:aa:cf:e9:83:7b:a7:60:fd:5b:30:d4:e8:93:
7d:b3:7b:6e:a6:55:7f:39:53:57:f5:25:c8:cb:17:
43:fd:6b:90:3d:d5:68:b9:43:14:7b:49:ed:e2:46:
71:61:9c:55:78:0f:fd:f2:ff:9f:77:cf:7a:54:84:
fb:ab:54:f5:70:3d:61:da:08:c9:be:b4:6a:20:3f:
5a:34:8e:ae:84:21:90:25:a5:18:b5:8f:c2:c5:3c:
85:65:fc:6d:89:56:d6:01:a9:5b:c8:e2:56:21:b6:
09:f5:ae:4f:ee:cd:d8:f2:25:a3:46:db:10:28:fd:
c5:10:a1:35:f3:a6:5a:4b:d7:ee:36:b2:db:64:d6:
60:ba:fc:88:1d:3a:14:4c:57:c1:50:91:54:07:25:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:AE:DB:1A:A2:1B:29:BC:D4:C1:35:AF:C1:82:AC:3B:90:79:00
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7e:e7:b3:d0:87:02:3e:3a:bf:85:50:69:cc:9a:2a:9e:87:
cf:8d:6b:1f:c7:66:31:32:3c:2b:19:f4:ef:e8:75:18:c4:1e:
1a:3f:d9:36:71:7b:58:f9:f5:12:1e:f9:26:4a:53:fa:00:47:
3c:5b:bf:07:23:e7:01:94:0c:af:5b:a8:82:a0:84:9d:cb:d2:
64:11:35:70:9b:0e:c8:d1:ef:28:bc:78:a1:2e:f3:40:93:05:
d6:80:5a:15:9e:8b:f8:d9:73:62:44:f6:ec:d6:88:09:d1:57:
4d:62:79:cc:f1:53:10:54:54:28:ea:9e:49:47:58:c3:bb:6f:
54:97:34:31:ca:e9:3a:ea:f3:15:74:d3:55:4f:a6:2a:db:fe:
a8:58:41:80:a9:8b:e1:77:e9:78:11:61:49:03:d1:c9:65:09:
77:fa:73:09:1a:7d:b4:d7:ce:48:3d:96:3b:5b:9e:a1:26:90:
29:4b:47:56:0f:8a:b3:d8:60:8d:65:1a:6f:ae:f4:ed:35:8f:
f7:1e:55:e0:37:98:69:8c:2e:a2:ab:b6:8d:94:65:70:c5:86:
80:3c:3b:ea:43:bf:23:91:b0:b1:b8:70:d2:bc:49:b8:9a:68:
22:de:f2:74:5e:ec:dd:45:2c:1e:19:d7:50:48:18:f9:03:a5:
e7:85:16:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:00:06 2025 by rpki-client