Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier: kWzeFHhwT9Pj65UbDVB++7884cPS8vxQN/6Upk/Rg+M=
Subject key identifier: E4:CE:50:78:CE:E8:47:F9:59:18:02:25:BD:F0:13:2E:DA:A6:82:E2
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 0196108E28422DEA14C3925D69006DB93EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number: 14EE
Signing time: Mon 07 Apr 2025 14:01:13 +0000
Manifest this update: Mon 07 Apr 2025 14:01:13 +0000
Manifest next update: Tue 08 Apr 2025 14:01:13 +0000
Files and hashes: 1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: Y7787aRv2XOeIpTp7bqPEOgK+MnbxuuQ8cKHS0BR2Zc=)
3: cVY_8rS3kZPDu1e0r3R63BtqpCQ.roa (hash: kfP4tSXYf9NAzPYnY28UC1ftu4NWH1iXr6TiCyzu6Bo=)
4: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
5: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (hash: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:28:42:2d:ea:14:c3:92:5d:69:00:6d:b9:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Apr 7 14:01:13 2025 GMT
Not After : Apr 8 14:01:13 2025 GMT
Subject: CN=e4ce5078cee847f959180225bdf0132edaa682e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:ba:c9:25:e5:6c:ba:dd:9e:2f:ed:43:b7:
48:4c:20:11:a9:9b:9c:7c:a0:31:9b:29:e2:72:7a:
cb:bb:49:ec:3b:88:53:55:78:0f:b8:49:6d:a7:ec:
88:58:34:99:5c:ac:ef:76:c7:23:94:15:11:4d:4a:
39:ca:e5:15:28:a1:7f:57:0d:b8:c5:c1:8b:bd:d1:
bf:84:76:ec:ce:24:31:db:9f:b3:b9:8b:4b:f8:6d:
48:9c:cb:d4:51:f6:84:1c:20:a3:98:e7:17:50:be:
e1:19:7e:d0:c2:4d:53:30:bc:41:9d:3e:a8:0a:58:
d4:f9:07:3c:e9:50:4f:69:0e:7a:73:7d:3e:a1:59:
e4:12:f2:44:64:75:ba:ec:6d:91:df:21:56:41:b6:
9f:4d:ce:7f:7b:8b:72:e6:87:cc:2d:99:38:75:45:
0b:6b:59:6e:21:9f:03:d2:b3:b5:0d:4a:f5:7e:91:
b1:42:3c:17:f9:26:a7:0c:35:c9:9f:4e:e5:06:87:
56:2a:a3:4c:fb:3b:06:71:b0:c5:5b:74:7d:0e:34:
d1:36:81:28:9e:54:7b:ee:16:f8:fd:33:dc:c1:bd:
17:eb:02:56:aa:33:6d:e7:58:ba:de:e5:1d:46:58:
3c:73:9b:83:53:fe:a5:b1:d7:17:3b:dd:71:5c:b2:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:50:78:CE:E8:47:F9:59:18:02:25:BD:F0:13:2E:DA:A6:82:E2
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:ad:e6:ef:5d:4a:15:52:c1:af:5b:81:a4:15:24:5f:eb:
05:b1:ec:6a:42:39:30:62:9a:32:28:0e:6b:75:57:ca:0e:11:
b8:ec:2b:a2:10:5b:92:1f:16:8e:ea:0c:b0:42:a9:b8:d0:56:
b1:dd:ab:b4:89:15:58:21:30:72:24:32:e7:d5:02:d8:46:8a:
c3:2f:5e:fa:07:73:e2:84:ab:e7:f8:62:1c:9d:e1:a7:a8:7f:
d9:6a:4c:9e:a5:f9:51:ce:e4:25:5a:d4:5e:c7:d1:c7:9e:11:
4d:74:3e:78:06:25:4e:00:c9:bd:7f:ab:e3:8a:0c:0a:59:27:
5b:72:ea:c3:ad:23:9b:33:0c:96:35:ea:12:4f:cd:c2:18:d4:
f1:b5:d6:5a:e8:be:a2:ff:5f:94:a9:fb:a3:d3:dc:27:39:62:
a0:be:21:05:e0:e6:23:11:18:ca:30:cd:8b:e8:73:fa:58:a1:
f2:90:2e:75:22:69:01:62:d6:8d:e0:90:05:0a:1e:1e:c2:00:
cb:61:f2:ad:62:c9:5a:3d:b2:01:08:4a:47:e4:78:2e:cb:f8:
94:dd:5b:53:aa:fc:76:cb:bb:13:a2:60:f4:19:c8:71:2b:01:
52:f3:be:5e:e1:6c:ab:e7:c6:e0:46:2f:0f:93:ca:b6:b4:8c:
a4:73:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:59 2025 by rpki-client