Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: CCPVwFiy4zDe7dorrPTVss0uVAiZMf/UlAs1MQv7qLs=
Subject key identifier: 5D:59:60:7E:82:06:13:82:11:9B:87:F5:2F:30:CB:CC:C8:E7:A7:8A
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 019650B64F9C2EFFE1BB32205F722BD0B92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 01:00:47 +0000
Manifest this update: Sun 20 Apr 2025 01:00:47 +0000
Manifest next update: Mon 21 Apr 2025 01:00:47 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: yzZCUsFciJivouHbYrkuV21AHp0NVJum5JW/GTQofp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:4f:9c:2e:ff:e1:bb:32:20:5f:72:2b:d0:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Apr 20 01:00:47 2025 GMT
Not After : Apr 21 01:00:47 2025 GMT
Subject: CN=5d59607e82061382119b87f52f30cbccc8e7a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:ec:2e:21:58:fb:a6:51:01:9f:9a:d4:b6:
13:a6:96:f1:00:f3:5e:d0:34:fa:16:80:67:f8:e5:
cd:69:7a:20:f3:56:a8:b4:b9:7d:04:29:f3:c1:b9:
e2:38:8b:50:ea:45:38:6a:a4:fe:76:da:88:42:84:
9b:b4:0f:16:3f:42:16:0e:4f:ba:5a:d5:b7:a0:1d:
3c:05:7e:29:82:3c:51:d3:3e:44:8b:21:7c:ad:15:
b5:e8:d4:23:bd:8c:7d:45:14:1c:ab:1a:d4:77:c7:
db:b7:13:0e:25:6a:09:bc:76:d1:d8:17:00:7b:1d:
51:b4:d3:65:4c:f9:f2:70:ab:73:cf:53:14:e9:63:
5f:ff:99:87:1a:1d:2d:27:0e:04:a3:82:3f:70:2c:
89:73:3a:53:6a:6e:0d:e0:62:b7:54:f3:8c:77:e4:
d7:ca:a7:02:11:bd:d5:35:72:08:1b:98:ca:5c:0c:
95:d8:cc:fa:2e:28:22:c6:5a:96:23:d4:36:a3:12:
a4:bd:3d:2d:17:17:f2:23:db:5e:3e:21:6a:e9:2f:
98:ac:0f:24:8e:e5:b5:f0:cd:ce:71:7d:28:9f:26:
f8:b1:f3:5f:33:81:2c:00:93:5e:c3:73:89:5c:7b:
14:34:b5:1e:7b:56:a1:64:41:c1:57:00:07:87:7b:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:59:60:7E:82:06:13:82:11:9B:87:F5:2F:30:CB:CC:C8:E7:A7:8A
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:ee:92:80:da:4c:14:aa:f7:0c:d2:d8:b7:17:c6:bb:f3:
30:f7:21:3c:eb:3f:3b:a3:2e:a0:ec:8a:6e:a3:ff:09:f1:f3:
db:2d:74:fa:5b:8a:6b:6f:a1:54:04:3e:fd:7c:0d:06:7a:6d:
5a:82:6d:57:a7:79:4d:03:35:eb:ef:7f:10:eb:0c:a5:97:83:
64:11:8f:22:fc:2a:8b:0b:2f:42:3b:1e:bc:46:91:a0:a7:bd:
ef:12:a8:58:1c:ef:00:b5:38:b4:61:d7:22:f9:3c:7a:0a:c5:
81:41:0d:f0:82:86:7e:df:ac:d9:2c:8a:ad:84:fc:7c:9b:5f:
34:90:ee:54:55:e5:29:ec:a9:c6:d7:88:7f:fd:f5:57:9c:a4:
11:ee:3e:da:9c:f5:df:10:67:8d:e2:d2:82:10:d1:01:cd:bb:
c0:51:cb:29:69:10:6c:b0:12:d8:a1:6c:b8:50:b7:7c:ed:2d:
08:5f:fe:7f:fc:c2:0e:4b:e9:6e:cf:bd:ce:71:0f:5b:0c:fc:
36:8c:ef:10:e1:67:d1:af:40:2f:e0:a5:a9:e9:4d:1e:ab:4b:
d9:a0:7e:6d:cd:33:4d:52:0e:f4:21:0d:64:54:62:8b:3d:e7:
d0:a2:a5:2c:e4:69:8c:f0:19:d3:44:29:2c:3a:a2:00:db:8a:
c3:8d:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:35:45 2025 by rpki-client