Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: bzTszhwEFLUSmKr8DQaGdq3ZhhfJl3PvV8XiMkBKM+4=
Subject key identifier: B8:E6:44:54:D3:1C:7A:48:19:FD:43:CE:6A:59:B7:70:02:4A:EE:BE
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0196572610DFA662E8E5C68CEE53B1DAD734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 136C
Signing time: Mon 21 Apr 2025 07:00:34 +0000
Manifest this update: Mon 21 Apr 2025 07:00:34 +0000
Manifest next update: Tue 22 Apr 2025 07:00:34 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: 93AenjE29K7MaWobzkQ3O83LJA/EoiEpDzMbDUOodOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:10:df:a6:62:e8:e5:c6:8c:ee:53:b1:da:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Apr 21 07:00:34 2025 GMT
Not After : Apr 22 07:00:34 2025 GMT
Subject: CN=b8e64454d31c7a4819fd43ce6a59b770024aeebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:34:5e:e8:4e:b8:3d:31:cd:d5:ab:01:6a:c1:
de:eb:70:8c:e1:89:ca:e8:46:90:0f:81:51:2f:1e:
3d:35:9a:e2:25:92:b0:1f:c9:b7:b2:b3:f7:a0:3e:
ea:81:29:30:df:b7:8a:6a:a9:b0:2a:06:49:d7:68:
04:e6:5a:68:0a:d9:4c:03:ad:2d:86:ae:f4:30:7e:
be:24:90:a9:34:33:bc:ab:6d:33:73:24:15:37:39:
05:41:1b:c3:92:1b:7f:34:3b:1f:44:14:da:a9:a9:
52:1e:fd:43:41:b0:c3:7e:a0:f7:86:69:eb:93:16:
79:47:33:27:44:64:47:61:95:da:72:e4:80:c4:ed:
b2:2b:f7:ca:1d:0c:00:cf:23:2d:f5:da:23:63:33:
50:55:f3:78:75:dc:db:83:78:c7:ac:f4:fa:8d:4a:
b9:d2:3a:ac:79:1b:e7:aa:19:3d:b5:a7:b5:6b:54:
50:79:7e:f8:8c:13:60:1c:31:35:33:27:0d:86:dc:
18:ff:d8:06:7b:b5:36:2f:5a:21:48:5c:45:32:0e:
c8:e8:38:aa:0a:00:b5:5d:cb:d9:55:fe:e0:ee:81:
35:d7:06:1d:6e:27:ba:df:71:23:2b:12:1a:36:8e:
f6:60:f7:0d:89:3e:15:a7:5b:25:2d:8d:2d:b3:8e:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:44:54:D3:1C:7A:48:19:FD:43:CE:6A:59:B7:70:02:4A:EE:BE
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:31:5b:8e:02:4c:48:28:7c:c4:9b:e7:1d:82:bb:b6:3b:
54:3b:ac:65:c2:8e:f3:a8:7e:47:7c:82:e2:12:84:7c:1f:c4:
65:3c:66:56:5e:ba:43:ba:6c:a5:e9:0f:dc:ed:26:aa:07:26:
2c:74:66:0f:15:13:ff:d6:09:e2:7b:ba:72:24:bf:14:67:37:
21:20:fc:6c:a1:bd:2a:6c:40:c5:77:de:09:25:22:a1:54:37:
11:f5:ff:db:2d:d4:4d:a5:3a:5e:38:0a:0a:ce:c2:f7:6b:7c:
49:cc:87:36:30:17:07:62:18:b9:b0:d3:a0:c3:4d:2f:86:db:
3a:ed:3b:5f:be:3f:33:10:5f:57:c7:40:4d:da:b1:c5:df:e1:
ba:95:eb:dd:ce:fe:2e:1a:7f:5c:53:77:cb:8d:3f:b9:30:2d:
ec:e1:c3:78:fd:59:4b:41:e3:67:56:65:cd:0d:04:dc:c2:66:
ec:30:c6:c0:e5:42:e8:21:10:25:ba:53:79:1a:ff:c8:a4:1c:
57:68:2a:19:d6:d8:be:20:8a:13:83:ac:3c:70:e6:55:ff:d4:
a9:b6:23:6f:36:5d:83:4f:a0:28:6a:26:99:33:f0:4b:8d:37:
94:02:36:db:14:f8:54:c5:7d:ea:b6:2c:34:7d:a2:9a:70:3c:
f4:fb:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:18:22 2025 by rpki-client