Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: 0cKUNkBXL7NEj/ABOEbzipiQINXGRiD89Gr+NTLsv/4=
Subject key identifier: 56:C0:2E:9B:3B:92:BF:FD:7F:50:12:38:F8:69:86:12:E8:AA:32:88
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019654C9BD3C48612292FDFD5FD8F35E18F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 20:00:29 +0000
Manifest this update: Sun 20 Apr 2025 20:00:29 +0000
Manifest next update: Mon 21 Apr 2025 20:00:29 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: xNB2antXwkJAuTgNSg7uAtWzLOaDN2M1JzdM0GgfM/Y=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:bd:3c:48:61:22:92:fd:fd:5f:d8:f3:5e:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Apr 20 20:00:29 2025 GMT
Not After : Apr 21 20:00:29 2025 GMT
Subject: CN=56c02e9b3b92bffd7f501238f8698612e8aa3288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:86:75:50:e2:f3:9d:8d:c3:b4:36:98:88:
a6:22:40:7a:aa:8e:0b:c6:c2:f7:35:90:00:61:ab:
3d:0c:e5:64:bc:c3:30:91:5b:33:00:03:bc:1a:aa:
f2:6e:47:4f:9a:c3:21:03:9f:6b:56:2f:92:ad:74:
fd:e1:76:7f:9f:00:29:45:7c:4e:92:6e:0e:ce:24:
f5:ff:a0:bb:32:37:77:16:b3:17:0f:79:eb:f3:08:
3d:08:9e:45:e7:a0:a6:ef:82:e7:82:c0:87:e3:9a:
16:1e:f0:b4:a8:cb:9e:5b:00:96:01:c0:d9:13:18:
5a:2e:d4:3e:dd:a7:22:a2:a1:bf:f9:79:40:f6:8c:
bd:9a:64:f9:d4:ee:c9:3c:cb:ac:a4:98:b6:d1:9c:
15:2c:4b:b8:9f:05:14:27:fd:38:00:79:8a:8b:af:
65:6e:29:c3:e6:60:0e:22:e8:e3:d6:5a:6b:eb:e8:
73:57:85:a4:a9:ae:ad:b9:a8:bd:6b:93:e6:a6:b6:
27:c0:a8:00:e6:79:06:74:bb:4b:1d:7d:4b:87:ab:
bd:27:0d:5d:0f:14:69:92:f9:aa:15:75:ef:80:73:
a5:88:20:6c:69:c3:1a:cc:de:ab:62:a9:eb:70:ca:
67:32:b0:8b:d3:21:35:e1:f1:7b:8f:7a:10:8c:3b:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:2E:9B:3B:92:BF:FD:7F:50:12:38:F8:69:86:12:E8:AA:32:88
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:54:f5:1b:0c:aa:96:f3:cc:25:57:06:a2:41:7b:99:61:
dc:3a:bf:b7:f8:e3:a9:9c:bd:42:2e:e0:d5:ca:e3:d1:2b:6e:
c6:b4:8c:1b:70:37:f9:44:64:77:52:6c:c8:d7:34:af:22:be:
0a:32:9b:f4:1f:66:50:35:db:50:82:f6:14:14:80:53:d8:b3:
20:5a:94:26:e2:40:95:a4:c7:49:8d:8e:f0:f6:7d:94:0a:0e:
2d:ba:80:be:b4:15:bb:ca:7b:75:db:de:a9:c9:68:2d:a8:9e:
39:17:c7:85:6e:7b:5c:5f:a7:03:73:49:3e:c5:9f:0f:59:64:
f2:06:c0:07:1a:e3:48:1b:7d:0e:36:00:50:82:85:72:40:28:
a9:e9:92:c4:f5:6d:8d:0a:76:4e:e2:5e:22:db:dd:c4:71:63:
59:a5:e5:ea:57:0b:c3:2d:42:71:6a:30:7a:02:88:44:cc:e0:
fe:8f:91:77:5e:86:74:73:85:68:45:97:5f:44:ad:56:19:68:
5b:f1:1b:5b:06:d1:42:0d:01:20:e3:56:fc:2a:1e:70:b7:66:
f4:e4:28:ca:c8:f4:8f:a5:34:3d:7d:27:94:07:9e:81:e9:87:
27:89:70:86:bd:da:73:c8:0e:8d:53:e1:c6:ed:a7:76:a1:de:
ed:b9:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:09 2025 by rpki-client