Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: sx9xqnK/N9io7JZys/dtrSAehSczIMGkNP56fvK5BTU=
Subject key identifier: AE:44:E3:C8:01:2C:87:C5:A6:8E:2B:A0:23:D2:78:56:C9:F2:DE:55
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019652A46B10EC658B8E76F1CBE07174C49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 0F52
Signing time: Sun 20 Apr 2025 10:00:29 +0000
Manifest this update: Sun 20 Apr 2025 10:00:29 +0000
Manifest next update: Mon 21 Apr 2025 10:00:29 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: CXAy8QyfQkSPzhOyNahc9LTlYmzYKi8iVVQf1aIIq+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:6b:10:ec:65:8b:8e:76:f1:cb:e0:71:74:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Apr 20 10:00:29 2025 GMT
Not After : Apr 21 10:00:29 2025 GMT
Subject: CN=ae44e3c8012c87c5a68e2ba023d27856c9f2de55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:7b:52:77:ee:f1:e2:95:0d:93:c9:b0:ed:
ac:bc:98:dc:8b:8a:b1:0b:bf:9d:15:af:e8:06:80:
66:e3:f4:1e:15:da:96:e5:2a:1a:ca:b3:ab:9d:49:
b3:9c:12:d3:3b:1d:16:c9:60:0e:20:b4:08:ee:be:
5a:dc:d4:14:00:13:32:a4:d3:14:36:16:b4:e1:af:
ac:66:c1:58:49:c2:01:16:2e:e0:37:be:17:a4:66:
50:30:3b:32:ad:7b:7c:41:93:68:00:43:b8:4c:3e:
94:c6:ad:13:7b:1a:1e:d5:e9:6a:cc:3c:5a:1e:8c:
b2:bc:28:18:82:89:5e:05:11:49:50:e3:41:09:ba:
96:78:ce:ad:af:03:c1:a4:b5:7c:48:bb:34:3a:2b:
2b:2d:6d:b5:6e:67:43:48:5d:02:4a:19:eb:83:05:
10:1f:57:40:f6:d4:cb:2a:f5:08:d0:68:13:c7:62:
45:fa:f2:35:b7:16:27:d3:b2:31:a6:fe:14:47:74:
8e:44:fd:da:4f:b3:a3:46:3d:b8:21:1b:32:90:36:
b3:15:04:c3:15:28:7f:5f:77:1f:31:b3:86:9b:6e:
6f:02:b9:8c:8c:1a:ff:d5:2b:d9:e7:6d:d0:67:46:
f0:b0:af:f7:d8:5f:01:7c:23:17:71:59:43:d2:99:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:E3:C8:01:2C:87:C5:A6:8E:2B:A0:23:D2:78:56:C9:F2:DE:55
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:44:6f:49:0b:81:03:a4:8f:94:b6:73:e5:d5:99:07:16:4c:
b5:eb:94:e7:08:1d:59:ab:00:73:e0:e4:18:e4:32:44:67:1d:
4f:cb:8d:2a:7a:fc:55:81:b7:d9:71:e8:8c:11:ee:1c:63:a1:
b2:44:19:82:b6:6a:82:70:de:6e:59:1c:37:f7:44:8c:36:32:
16:8e:06:5b:03:a0:41:f5:98:08:3e:ac:ac:2a:86:6b:7f:93:
8c:7e:15:b1:2b:41:72:0c:16:51:f1:7b:50:ad:8d:9c:fa:d6:
85:d8:6f:37:05:bf:c6:8f:ab:33:9f:48:ae:d1:76:89:02:62:
14:63:e4:9b:5d:81:27:12:8f:59:ef:3b:53:eb:d5:07:04:fa:
20:8f:3d:5b:91:24:35:c8:a7:96:63:7a:c9:4e:3c:9a:2a:42:
5d:72:16:20:1c:33:98:25:1d:a2:67:0f:cc:32:93:dc:7b:a0:
05:df:e8:85:22:2e:0a:c1:97:9a:56:7d:c6:7d:16:71:3d:80:
6b:8d:d1:ee:dc:bf:81:a4:13:3a:ad:18:ca:5d:ad:a6:88:4f:
b4:21:60:30:59:01:e4:54:e9:3e:0b:2a:78:7e:b3:08:5e:a3:
ee:ce:ae:d4:6b:87:76:43:c6:4a:0f:87:ce:ba:ac:91:5d:8d:
74:95:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:19:05 2025 by rpki-client