Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: lYojFw16nN7UgsW0vXgbSKkPGy/whNaNZ9OVqs49GKs=
Subject key identifier: E5:E4:6F:B4:9B:A7:F4:D8:4B:12:7F:A0:52:F4:86:7E:CC:62:BC:AD
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01958C292F74FCDD56B2421653334E05B0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:04 +0000
Manifest this update: Wed 12 Mar 2025 21:01:04 +0000
Manifest next update: Thu 13 Mar 2025 21:01:04 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: tyn8/PfJRLnaAdz6kXUPqmyQ/oxx/SS0vH+5OKRyNSc=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:2f:74:fc:dd:56:b2:42:16:53:33:4e:05:b0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Mar 12 21:01:04 2025 GMT
Not After : Mar 13 21:01:04 2025 GMT
Subject: CN=e5e46fb49ba7f4d84b127fa052f4867ecc62bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:7f:e7:56:43:53:14:f1:e6:5a:15:a8:8d:
b4:9b:34:b6:39:41:18:d3:52:e8:3a:92:08:cc:9f:
27:ba:36:32:45:6b:f6:c2:96:3b:e4:a6:0d:4e:97:
60:00:84:e4:a7:cc:c5:05:15:24:37:a0:d6:12:85:
ac:8a:55:aa:6b:f7:d8:77:f9:a3:d6:7c:c4:1e:8b:
39:c0:c5:d7:e6:a2:74:c4:e1:5f:9a:8d:0f:5d:11:
42:5f:fd:7a:66:3e:e0:8c:ee:11:60:06:ac:83:99:
65:cc:c1:1c:bf:aa:1e:d5:db:36:ec:02:dd:23:16:
84:b1:a6:21:5a:f6:b9:a6:6d:ee:8f:2d:0f:78:c3:
12:77:1c:3b:64:e0:0f:3d:a8:b9:1d:8a:b6:93:11:
8d:b9:4c:9e:e3:ab:ac:48:89:b8:c8:05:11:52:81:
75:b0:57:c8:ef:b7:e9:d9:1b:a0:a0:46:79:ee:0e:
be:d8:f1:b9:c6:58:04:52:2c:a1:83:7f:0a:46:30:
02:c9:f2:c9:8c:21:bf:34:6e:dc:98:ed:74:35:ea:
01:0a:ad:9d:bc:2b:97:a3:5e:d3:37:02:7c:be:b0:
2e:78:81:f9:d9:32:2c:63:0c:61:66:90:5f:87:15:
dd:64:6c:83:50:33:84:18:50:d2:6f:26:cd:d4:a4:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:6F:B4:9B:A7:F4:D8:4B:12:7F:A0:52:F4:86:7E:CC:62:BC:AD
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:95:72:dd:30:5c:9e:26:7e:51:e3:12:3d:6e:8c:de:42:70:
c8:f0:47:69:cf:5a:96:62:14:6f:5b:30:69:e2:ec:e7:10:3c:
5c:95:45:91:1d:72:8a:23:7b:0e:91:df:45:ab:ac:08:4d:0c:
93:5e:a1:df:c4:c4:c1:18:7d:1d:6f:33:4f:f9:40:54:86:f6:
a7:06:b2:4f:fe:1d:6d:e4:25:2f:7f:51:bd:9f:cb:7e:71:87:
60:0d:a6:98:5d:e3:3c:12:f7:2b:fb:05:25:5f:9c:19:d1:e7:
e3:81:11:77:35:15:87:50:29:72:94:41:af:2e:34:85:dd:68:
50:08:14:28:51:8c:ee:fb:b3:ef:22:f9:06:aa:3f:74:cc:02:
4b:8f:63:5c:83:05:17:0e:64:62:f8:50:1b:d1:1f:4c:eb:65:
25:79:2d:3f:0b:77:a9:0b:d4:7e:15:15:bf:20:01:98:cd:f8:
fe:ce:5b:9c:27:7c:a2:b8:24:b3:a1:76:e4:5a:e9:29:6e:6d:
58:fd:4f:1f:5b:58:25:e3:78:55:48:64:3f:bb:ca:6a:ef:71:
81:38:47:21:0f:d1:bb:92:a0:f2:e3:1f:f3:e4:c8:f0:46:8f:
82:a3:bd:95:08:b8:0b:fc:36:77:77:9d:75:90:92:ef:61:1d:
b0:10:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:56 2025 by rpki-client