Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: xRHpDBj38N/huvsobrUaUNkqn5D7DeeOIhZ8bIflEtM=
Subject key identifier: DD:2E:2B:7B:F2:06:2F:7E:D4:7F:4D:C6:E8:38:BC:8F:E7:88:BD:04
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 01964EFE5C692B11582496CC20A7959C0AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 17:00:14 +0000
Manifest this update: Sat 19 Apr 2025 17:00:14 +0000
Manifest next update: Sun 20 Apr 2025 17:00:14 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: GKzC/Q/Fv06RFHA9iD9D2225aCIf7cWWrTzmDb4XgRo=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:5c:69:2b:11:58:24:96:cc:20:a7:95:9c:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Apr 19 17:00:14 2025 GMT
Not After : Apr 20 17:00:14 2025 GMT
Subject: CN=dd2e2b7bf2062f7ed47f4dc6e838bc8fe788bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:ca:fa:a9:89:7d:10:ef:d7:fa:cd:4c:60:
fb:6c:05:4d:88:a0:ee:1a:8a:d2:94:12:11:d7:db:
54:1e:8f:61:5f:8e:5e:1d:b3:48:d3:67:a8:c5:7f:
23:2e:db:c6:48:fc:47:9b:22:b1:03:d0:67:06:5e:
41:4b:c2:70:e4:be:2b:9f:e7:87:71:f2:9b:f5:bf:
de:c9:e2:e7:80:ec:32:f2:ee:cd:30:91:dd:c0:e1:
91:28:fb:18:1b:67:1e:51:ce:73:3e:3b:00:20:b0:
10:63:7e:95:27:a0:e4:ca:78:d7:4f:f0:19:ca:73:
bd:60:19:fc:58:50:7b:14:5d:22:32:0f:83:56:b7:
ba:cc:0e:ec:c8:c0:3e:40:8a:4d:7b:84:40:9b:9b:
53:a9:6d:3c:c2:05:5e:e6:b1:1d:26:91:75:71:d5:
2d:9a:4b:59:5c:c0:d8:20:34:fd:d8:27:12:9c:14:
59:ce:a2:19:aa:8d:6f:f4:bf:bb:6c:11:e6:48:f8:
0a:df:29:0e:bc:54:c9:9e:9a:30:85:75:b3:93:2b:
a3:36:5c:ad:5b:b9:d0:2d:62:16:df:c2:e0:8e:32:
cd:05:a3:9e:c2:89:fa:35:4f:45:a2:8d:f1:06:20:
c2:6c:43:21:91:93:eb:37:ff:94:ce:c3:80:e0:f5:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:2B:7B:F2:06:2F:7E:D4:7F:4D:C6:E8:38:BC:8F:E7:88:BD:04
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8e:94:d4:ad:27:35:65:da:d5:8e:b7:5d:dd:d6:55:b9:49:
00:a9:23:e6:f9:2c:7f:89:ff:9d:5c:da:15:04:8f:4f:f9:53:
e3:b3:c9:c9:9a:9b:0e:4b:53:9a:cc:af:22:86:41:49:07:85:
e6:a2:e1:5b:87:a0:71:10:b0:d3:bb:d2:bc:28:5f:f6:2c:ce:
1e:10:0c:d0:91:dd:78:21:19:70:08:93:62:20:c0:20:60:01:
9e:84:e8:4c:42:d5:dd:96:75:44:dc:b9:b5:f3:65:3e:92:76:
f5:0c:17:5e:d7:9c:b3:17:23:05:8d:8c:77:61:a4:23:1e:73:
32:d0:63:15:b7:52:4c:08:24:e7:d1:90:8d:79:40:f4:61:15:
56:fe:8d:42:01:2a:04:2c:ac:ed:c8:1f:2b:a9:00:57:9a:7b:
d4:8c:fd:2a:c9:1e:ee:ac:e3:8f:eb:3e:d0:54:cd:b8:e4:57:
7e:e6:85:18:85:56:30:24:1f:43:0f:0c:b1:68:e2:51:20:52:
36:4b:2d:49:c0:89:97:4c:e2:b9:89:fb:4d:16:8e:10:d8:0f:
1f:69:52:71:73:58:02:a6:cf:5c:6e:ef:01:a1:b3:e6:e3:91:
7a:82:5a:17:b7:0b:dd:db:f5:5c:5d:7a:f4:ab:29:e9:5e:46:
da:32:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:40 2025 by rpki-client