Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: PdSI0Vce/GwckvwdKo0e4DbAHGa62hxcqT5FMjWWc0k=
Subject key identifier: AD:23:65:37:73:C1:14:9B:C8:79:5C:9B:4A:9D:5B:D4:61:9E:9C:C4
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 01958BBB24F766595210BA0DAA78EBB7C608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 0449
Signing time: Wed 12 Mar 2025 19:00:52 +0000
Manifest this update: Wed 12 Mar 2025 19:00:52 +0000
Manifest next update: Thu 13 Mar 2025 19:00:52 +0000
Files and hashes: 1: 5fbTeiQF9DYc_ur50LWCniwJkMU.roa (hash: igu7/G6Y/PKDH8ZMqg9MVt9oXE/ltXGAZOtx9sQtnMg=)
2: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: ndZD5VAGbTmS+Yw4Qxdu1z5K9jh9a5DC0Kp5rV3P4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:24:f7:66:59:52:10:ba:0d:aa:78:eb:b7:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: Mar 12 19:00:52 2025 GMT
Not After : Mar 13 19:00:52 2025 GMT
Subject: CN=ad23653773c1149bc8795c9b4a9d5bd4619e9cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:04:6f:04:97:88:c4:57:ec:8f:35:7b:82:
cf:5c:87:c7:27:a8:9d:ff:8d:3c:53:e2:ee:86:81:
c8:f9:cf:80:02:0e:ff:68:36:ec:90:69:fa:b3:5d:
cf:63:68:3f:10:8d:41:e8:c7:a3:2e:1a:cd:10:ff:
dd:6c:ae:3f:af:62:69:76:a0:33:73:cc:11:05:c5:
ce:50:81:cb:e6:b8:04:28:de:16:63:16:53:d0:94:
79:eb:46:61:c9:6f:45:3f:6d:83:09:4b:6f:4b:c2:
d0:f1:82:e2:ec:a2:5a:0c:bf:cd:0a:ee:ff:d4:e7:
4d:5a:c3:71:ff:2d:d4:bd:39:c4:4d:3a:0b:ff:2b:
28:66:61:14:55:36:43:51:1c:c9:f0:d9:6f:cb:5f:
59:3f:2b:1f:c0:cb:a9:4e:c1:5e:6e:0d:c9:1f:da:
89:2a:0e:83:5e:e7:52:67:94:f0:af:b4:c6:2e:0e:
74:df:3d:28:e2:ea:c0:36:d0:7e:63:0a:8a:55:20:
f4:04:0f:b1:ed:9d:d4:e9:5a:7a:28:21:a9:c5:57:
f4:4f:fd:30:8c:68:1a:0e:c8:d4:28:ce:07:1e:dc:
58:7b:09:ed:63:2a:79:eb:32:4c:d6:77:37:9d:69:
6f:60:3b:eb:c8:c5:96:5f:3a:0a:07:fc:d1:1c:96:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:65:37:73:C1:14:9B:C8:79:5C:9B:4A:9D:5B:D4:61:9E:9C:C4
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a8:3f:ba:84:70:f5:b0:19:65:46:80:05:9c:03:0c:84:46:
cf:6f:90:f8:1b:13:7f:9b:2a:0e:02:e4:e2:4b:f1:30:4b:23:
90:7b:3c:a0:3e:2b:04:63:2a:97:2e:24:37:f1:8e:af:04:4f:
8b:61:ec:40:42:c2:6a:38:d3:6a:bf:52:a6:5d:e8:03:9c:7c:
60:33:27:3c:e6:08:1f:65:0e:19:b5:35:21:ae:93:70:d7:52:
54:84:4a:d3:61:79:1f:ce:3b:19:57:25:57:b6:51:08:03:e2:
a8:a0:cf:de:0f:d4:b6:9e:7c:7b:6f:66:7d:ae:bb:e4:97:6d:
c5:86:c1:c8:c8:40:4a:81:a8:52:6a:77:3d:f1:66:6d:10:29:
90:63:55:22:6a:7e:3f:da:63:4e:ca:bf:a8:6e:a2:89:6a:40:
0c:a1:ca:09:ba:a4:0c:e3:04:45:be:88:8e:90:9e:f1:9f:b6:
85:b4:93:d1:19:d2:91:02:a8:89:ad:4d:dc:e7:88:2c:0b:69:
db:c8:10:58:d1:eb:2c:07:eb:c6:62:e9:d7:be:b9:56:58:47:
18:1e:2b:76:2c:42:a9:79:1d:cd:cd:31:42:7f:98:58:f8:a9:
4a:27:22:bc:9d:23:cd:7b:fa:7e:7d:c5:a6:69:c8:8d:35:31:
48:58:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:36 2025 by rpki-client