Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: +gtTf43Z7K9izFRhNA3An9nhvEcF+TEiUkjjM5bJFCc=
Subject key identifier: D6:AC:1C:8A:B6:AE:1D:63:7F:E8:EE:15:E0:41:5A:AA:3B:81:5B:58
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 01964FDA694617103B8167C2953D707D333E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 095F
Signing time: Sat 19 Apr 2025 21:00:35 +0000
Manifest this update: Sat 19 Apr 2025 21:00:35 +0000
Manifest next update: Sun 20 Apr 2025 21:00:35 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: Lr2HOZGBs5R5TDwy54ScNAq0ujLcJ8aR6T5Vi2F3e7I=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:69:46:17:10:3b:81:67:c2:95:3d:70:7d:33:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Apr 19 21:00:35 2025 GMT
Not After : Apr 20 21:00:35 2025 GMT
Subject: CN=d6ac1c8ab6ae1d637fe8ee15e0415aaa3b815b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:93:34:7d:19:76:44:61:77:d4:59:9e:fb:
40:b7:6f:9f:fb:cd:7b:b0:fb:9f:64:0e:40:9d:2f:
a6:5d:53:65:f9:1b:e5:27:b0:5e:02:7d:77:a4:b2:
d0:5a:b1:52:82:40:6c:42:76:4b:22:a5:6e:a3:87:
f9:63:56:d5:1e:10:8c:b9:77:69:62:f5:62:7f:d8:
ce:c1:bc:7c:cc:77:05:6a:6b:68:e1:28:d0:bd:3b:
f6:3b:62:6e:8c:8f:a0:da:7b:5b:7c:60:5e:c0:d1:
61:04:5e:7f:a1:54:a3:a0:d0:66:16:bb:25:93:69:
0a:9b:97:fa:01:15:04:6f:e0:5e:18:53:e6:f7:c6:
73:58:d2:89:ed:f5:33:58:52:65:f8:cd:fa:eb:60:
ee:58:07:e2:b8:6e:15:ed:fc:9d:eb:87:f9:30:88:
b5:5c:e2:f7:96:01:50:64:6f:d4:04:a8:c4:d7:6b:
9f:00:c6:1c:b1:3a:8e:b7:9c:50:68:ed:a2:16:a7:
14:a3:79:1b:9b:cd:a7:ef:ed:f0:ff:4c:0e:b0:e1:
cf:b0:fb:9b:db:39:83:78:4c:03:42:bd:3b:a8:68:
f8:3d:9a:3c:42:4e:39:ed:90:8f:d6:fd:7f:17:95:
e3:f7:02:d5:75:6a:56:2c:e0:a9:96:e9:cb:5b:f2:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:1C:8A:B6:AE:1D:63:7F:E8:EE:15:E0:41:5A:AA:3B:81:5B:58
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:90:46:25:c7:3f:04:06:2d:03:34:fc:35:b7:a7:a5:99:
e3:52:05:4f:55:94:66:96:d9:75:8b:89:44:59:1a:21:d0:96:
ec:b2:e4:7b:06:aa:d1:4d:8e:74:2f:e4:ea:d9:77:cb:7c:8b:
28:d4:d9:4d:44:38:fd:13:27:5a:22:51:63:bc:18:f3:35:b7:
27:77:c1:c6:45:64:15:db:ed:6a:aa:ab:0a:90:82:84:d2:26:
0f:ba:80:12:49:3a:a2:d5:db:f1:61:7b:96:bb:63:71:61:cf:
69:48:34:c6:29:c2:bf:48:7b:c8:3f:30:ca:e8:79:1d:ac:66:
52:2d:92:8a:47:78:92:55:bf:fe:2e:36:93:7a:1b:aa:35:be:
91:7a:40:df:71:d6:86:84:6a:86:fa:c0:b4:b4:5d:4e:d1:19:
6d:64:ed:d2:11:48:4c:5e:53:a9:a9:2c:ba:82:fa:6f:d0:23:
3f:f4:b0:23:6c:6f:65:ac:87:6b:99:76:bb:76:9a:d3:dd:30:
77:5b:79:c3:c4:17:fd:c8:cd:36:3a:58:6f:e1:b4:2a:6b:ea:
50:a1:bd:4d:0a:d1:69:f4:85:37:96:14:51:e2:b7:23:ec:00:
33:f3:93:61:15:55:af:e8:32:67:fa:75:98:c7:f4:17:30:01:
2a:9d:ed:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:19 2025 by rpki-client