Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: 9jNn/uibC/7n+UnmNGzKTgLb/q99/54KMAz5NVPO+cE=
Subject key identifier: D1:73:E4:C0:44:3A:8B:E6:3D:59:18:77:4E:B2:24:D3:BB:5A:5E:81
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019649D821B50CB4029DCA59E45980361F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 17:00:23 +0000
Manifest this update: Fri 18 Apr 2025 17:00:23 +0000
Manifest next update: Sat 19 Apr 2025 17:00:23 +0000
Files and hashes: 1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: 3gGmMPbmj1SvO9s5vdQKmMq24gmCQi8+TCycQY61U4A=)
2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:21:b5:0c:b4:02:9d:ca:59:e4:59:80:36:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Apr 18 17:00:23 2025 GMT
Not After : Apr 19 17:00:23 2025 GMT
Subject: CN=d173e4c0443a8be63d5918774eb224d3bb5a5e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:a4:88:2e:5e:08:19:5f:47:3d:5f:3c:b4:
99:46:fd:99:87:4f:39:ff:f5:e5:66:8f:78:75:1c:
8b:53:9c:7b:3d:68:05:a0:24:bf:a5:60:77:44:1b:
17:58:04:dd:2f:c3:59:9f:9d:71:83:73:0f:d9:24:
98:e4:94:71:d5:8b:f9:ae:0b:cb:be:c2:02:b2:3b:
e0:97:ea:31:a9:1c:16:e8:9f:a8:29:11:e2:81:03:
b1:cd:d7:e8:6f:79:50:0e:d2:44:ab:cb:09:3b:0b:
b4:55:b7:d5:b6:7d:d9:10:a1:82:b8:76:81:8d:db:
20:f9:6e:94:d5:16:e7:c5:0e:e3:22:1f:19:47:fe:
5d:98:c7:ec:04:21:83:d7:05:11:4b:37:36:50:5c:
b9:2b:97:6e:ab:29:ae:2a:54:7e:8c:59:5c:02:ac:
df:79:5b:04:53:c6:60:8d:1e:84:84:00:b0:09:70:
be:dc:38:4d:eb:7f:90:91:a4:34:04:c2:5e:dc:0c:
78:6b:46:a3:af:c3:d1:db:7f:ae:03:9b:15:24:d0:
0d:ff:65:d1:eb:10:8e:f1:89:a6:eb:41:86:2b:0c:
b2:69:a4:d5:c2:f7:bf:19:0d:2b:85:86:8b:ef:06:
1a:64:a2:22:cb:76:ef:3b:76:55:24:0c:ed:da:b2:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:73:E4:C0:44:3A:8B:E6:3D:59:18:77:4E:B2:24:D3:BB:5A:5E:81
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:aa:e6:35:0e:21:ca:a2:aa:42:49:82:b9:68:74:7e:8c:
c0:3c:d5:d6:af:96:f5:ab:8d:d6:5d:6c:a9:60:83:14:6e:89:
85:a5:36:73:0b:7e:bd:4f:61:24:7e:a3:16:2d:1f:3f:f2:9c:
8e:89:4e:4c:43:22:a2:2d:31:fd:69:26:d6:e1:da:bb:62:f7:
90:b0:d8:67:1f:0a:92:34:fa:97:18:fe:fb:5f:40:68:97:2b:
e3:54:9a:8a:c0:19:e3:bd:1b:c5:d0:0f:2f:ee:75:6f:16:53:
de:56:67:f7:30:2f:24:09:72:53:a7:d3:79:cc:4f:73:af:98:
b8:f8:fc:f2:2e:bf:4c:22:39:a0:41:3e:25:d9:04:86:cf:49:
80:c7:96:b6:0b:66:91:7d:64:27:9e:f3:87:25:f7:7c:98:07:
f6:ce:c6:98:b3:44:aa:36:b1:08:f8:cf:23:8d:d2:77:93:e6:
1a:4b:25:8d:12:c1:5c:bc:2f:80:48:c5:89:a7:cb:ae:61:71:
3f:32:2f:1a:36:a4:68:b6:ee:7d:8b:c5:fb:8d:3b:32:1f:a2:
dc:a3:cf:ae:d3:a2:1e:ea:cb:c7:8b:82:32:59:54:82:08:bd:
2c:2f:b6:ee:9c:0f:6c:a0:74:ac:65:18:30:0b:14:b6:cb:09:
c2:4e:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:44 2025 by rpki-client