Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: cGdUHKne+rqvZgDSkfTmCx53fa4BDZahKOuLb3sDNkE=
Subject key identifier: 0A:D7:76:8F:FE:DA:D5:B3:F1:8D:41:8C:27:23:6A:60:64:6B:ED:09
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0196078B20A9A9B4CAAC986EBFDABB10ED27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 14D7
Signing time: Sat 05 Apr 2025 20:01:20 +0000
Manifest this update: Sat 05 Apr 2025 20:01:20 +0000
Manifest next update: Sun 06 Apr 2025 20:01:20 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: E/pbAFoe+MRR6Wfi87HD8Zljq+/PIT4sI9N/ty7FOjo=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:8b:20:a9:a9:b4:ca:ac:98:6e:bf:da:bb:10:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Apr 5 20:01:20 2025 GMT
Not After : Apr 6 20:01:20 2025 GMT
Subject: CN=0ad7768ffedad5b3f18d418c27236a60646bed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:2e:a7:a9:7e:f8:0c:51:cc:14:95:20:d8:
d3:5c:be:4a:82:00:c6:a3:65:94:35:cf:46:19:1e:
ee:8d:6c:8a:93:dd:a9:d5:11:e4:47:c2:f6:8d:a7:
fb:09:8f:6b:4a:e4:88:bc:db:69:7b:1e:55:41:1a:
e0:b9:29:87:92:0f:65:a8:9b:37:74:ed:12:3d:15:
07:95:59:7b:65:19:f3:2f:90:e6:d6:fd:86:91:cb:
4f:44:0b:a3:73:8c:5c:87:65:ed:f8:ee:10:69:b8:
08:42:0c:09:7c:35:26:e6:6a:a5:bb:0c:e7:8e:4a:
1d:f8:9a:cc:3b:07:a8:48:8a:88:b7:b9:cd:76:a7:
21:6a:b8:64:cb:49:8a:1c:75:af:da:e0:22:1f:d2:
f7:9b:a2:9b:bc:82:66:12:c1:a2:e8:70:ca:9b:b8:
55:1b:6c:41:a8:7a:c3:63:65:11:0f:7a:94:56:20:
32:d2:07:d6:43:31:56:e2:c7:df:8b:f8:d8:e1:8f:
48:90:1f:b8:35:12:ec:b1:25:89:da:8f:15:e0:df:
a7:a5:aa:4b:16:b4:2a:af:a4:3e:17:2b:e8:a2:c5:
e0:a7:c3:92:be:8e:51:c1:b8:d5:ec:25:e3:c4:b1:
04:39:49:a6:f4:a9:eb:de:20:a3:ca:44:05:64:4a:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:76:8F:FE:DA:D5:B3:F1:8D:41:8C:27:23:6A:60:64:6B:ED:09
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:7d:35:54:f8:93:c7:25:18:85:7a:3d:af:7b:69:9c:9a:
e3:f5:6d:25:f4:21:73:d5:b5:b8:9b:cf:30:39:c4:9c:29:b1:
76:c0:b9:a7:8c:86:32:31:e3:64:71:2c:13:86:1f:6c:88:e8:
24:c5:25:60:f8:b9:a6:54:6e:ba:9d:a7:ae:0c:9a:26:bf:f4:
e8:86:b3:e7:fa:f3:b0:89:bf:ca:b1:65:34:69:4b:af:5d:9b:
5b:86:dd:94:ef:9f:d7:03:c3:c9:96:d7:8c:84:f2:e4:53:0e:
7a:a0:e5:a8:f3:28:9f:a5:4c:ff:51:8d:45:ec:f3:e4:02:8d:
06:e6:3e:a1:e7:88:63:08:ef:fd:f0:3d:ad:a4:4e:bf:34:09:
47:de:e7:09:4c:21:7e:48:be:cb:61:db:d1:34:cf:3e:1f:31:
d5:a0:84:d2:bf:5e:2b:22:57:f8:8a:36:02:a3:14:3e:c8:a6:
1e:e0:73:da:60:0d:c1:03:34:47:12:77:ff:00:7e:d8:5f:89:
3b:b7:d2:08:7d:bd:87:41:d5:32:eb:c9:da:14:4c:87:60:d9:
d7:3b:d4:ef:c0:ec:df:4c:62:2d:67:29:dd:53:51:38:43:64:
62:f5:84:ae:7e:a8:66:39:2a:f9:04:0a:eb:34:3c:be:20:bc:
68:30:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:27:09 2025 by rpki-client