Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
File: BU1P54D-RTMHgN627DhMuUk_LfI.mft (raw, json)
Hash identifier: nmEefyq+x+UYb/K7bOY08f0AyKzlQosVOVs+l9Ijqvw=
Subject key identifier: 1E:9D:18:69:DF:D4:3A:A6:F2:69:DD:34:87:6D:F3:F6:08:35:41:9C
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Certificate issuer: /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial: 019652A4FCBCD3CA1F6EA23D6254C4588BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
Manifest number: 112B
Signing time: Sun 20 Apr 2025 10:01:06 +0000
Manifest this update: Sun 20 Apr 2025 10:01:06 +0000
Manifest next update: Mon 21 Apr 2025 10:01:06 +0000
Files and hashes: 1: BU1P54D-RTMHgN627DhMuUk_LfI.crl (hash: +XHSOyMN6up3Pc3XzcDLqr78hGyPEA7I7avqIkOEViE=)
2: ka7B1o22nQ899fZrHQAwPaISuMc.roa (hash: YtdRj2DUEOEWo4MtM001iw/fwE9TLkR0g86JFagGliA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:fc:bc:d3:ca:1f:6e:a2:3d:62:54:c4:58:8b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Validity
Not Before: Apr 20 10:01:06 2025 GMT
Not After : Apr 21 10:01:06 2025 GMT
Subject: CN=1e9d1869dfd43aa6f269dd34876df3f60835419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4e:da:13:25:e3:1c:dc:e1:c3:c6:25:74:7a:
74:9b:e5:a3:13:6d:6f:17:2f:5e:14:57:d3:96:36:
dc:dd:87:1e:33:ef:ad:83:c8:98:98:a9:f4:b4:3b:
1d:e5:67:94:9f:2c:0a:67:13:47:99:2e:27:f2:d1:
96:f6:40:05:8c:8a:96:1d:03:ad:8f:7d:be:06:e7:
9a:4b:82:54:2e:70:bc:63:42:8f:87:d8:ab:e3:2b:
72:7d:48:45:cc:41:49:3b:ab:36:fd:ec:47:dc:39:
ab:ac:0f:7b:81:01:3d:aa:a0:af:5c:fb:2f:24:9d:
0a:93:1e:21:8a:91:f8:52:c1:1a:2b:0c:b8:e7:ab:
56:01:d6:c2:d0:64:a9:fd:ae:ba:e2:45:28:11:a5:
a7:bc:98:00:02:78:f8:4f:eb:a8:3e:83:98:c1:e1:
49:cd:45:5b:ff:1e:a2:bc:39:ec:b8:1d:01:62:2f:
b4:cd:36:ae:38:a8:48:43:7b:85:66:0f:80:48:35:
80:a6:6a:b7:0a:e8:52:01:d4:e2:6e:b8:63:3e:97:
54:3a:4b:ff:70:e9:53:93:61:d5:73:07:b4:ac:7b:
ac:97:5c:ed:d0:b7:04:ec:b9:18:0f:7f:29:08:d5:
e0:31:f5:18:09:cb:a0:f9:a7:76:50:75:ca:18:25:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:18:69:DF:D4:3A:A6:F2:69:DD:34:87:6D:F3:F6:08:35:41:9C
X509v3 Authority Key Identifier:
keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:48:79:08:af:05:ab:2f:b9:bd:5d:da:cf:ad:89:a4:f9:
fc:97:da:52:f9:97:b1:c9:3c:0f:64:68:f6:85:77:d9:e8:72:
34:39:c2:dc:fc:61:46:4a:44:d6:a4:13:7b:06:a6:65:db:65:
28:b5:5e:af:69:0c:31:06:d5:e3:4a:a2:54:12:cf:e3:d7:55:
ee:9b:78:b3:8c:6b:74:2d:ef:df:a0:b3:6d:7e:b2:31:c4:8c:
5e:09:42:ab:4e:4b:f8:a5:89:69:13:32:0f:2e:c0:2a:c7:17:
22:77:27:73:ce:f3:9c:3c:d1:86:2b:e2:df:d0:f7:c2:b0:65:
35:94:a5:97:d8:61:e1:3a:00:50:21:7b:10:c9:60:f5:1b:84:
97:e5:62:ba:9e:01:4b:2e:4c:00:84:62:90:93:92:e5:12:2b:
b0:db:6d:a0:50:8d:f2:bc:91:79:aa:0b:10:a1:77:59:64:be:
f0:2d:37:56:01:8c:2b:56:62:29:5f:67:f6:fa:2e:9b:04:e5:
5a:6b:e3:5b:58:77:87:de:45:ad:99:d9:a5:3e:c7:44:a5:ba:
e9:a3:50:b1:d0:93:26:d8:1e:1a:99:54:ae:d5:78:5b:ef:ef:
a2:ab:2d:fb:97:79:65:08:e8:ce:ca:0d:84:d0:88:7f:58:e9:
d4:0c:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:53 2025 by rpki-client