Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: fl7sZVtdBTG11i0VxaeexxWN5I6qd6g7toiKVeOfA68=
Subject key identifier: BE:3C:92:9D:3D:E5:FD:49:D9:3C:4B:37:C7:C5:CA:E0:E0:DC:59:C1
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 01964EFE699D7DBD45C6B37C8E9205BB75C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0A5D
Signing time: Sat 19 Apr 2025 17:00:17 +0000
Manifest this update: Sat 19 Apr 2025 17:00:17 +0000
Manifest next update: Sun 20 Apr 2025 17:00:17 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: e0C+wNI9HGglO7doy89raSLL3HZo2uQ506VOGYWLk6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:69:9d:7d:bd:45:c6:b3:7c:8e:92:05:bb:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Apr 19 17:00:17 2025 GMT
Not After : Apr 20 17:00:17 2025 GMT
Subject: CN=be3c929d3de5fd49d93c4b37c7c5cae0e0dc59c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:6c:1f:6f:f0:f5:20:c3:c0:55:e6:72:77:
7a:04:24:a7:c4:36:b3:a6:c8:e4:06:d9:78:fe:f1:
98:ea:6c:4e:1c:02:db:b5:84:44:63:de:10:12:61:
e9:72:27:20:c4:db:e2:08:45:02:bf:a2:31:fa:66:
5c:9d:68:53:28:99:9d:72:db:69:22:5e:03:56:8f:
de:5b:3c:4e:a0:ed:61:0a:c6:b8:2f:df:da:f0:30:
4e:38:57:1a:2a:0e:93:e9:48:42:62:85:a5:2b:c5:
71:65:11:65:60:f0:a6:38:23:77:a0:91:24:44:26:
ae:ea:ec:da:6b:79:dd:d6:7b:06:e6:0a:41:aa:b0:
fb:59:d5:a5:ca:67:ec:73:3b:d6:28:a7:99:3d:ff:
d4:45:4e:a3:1f:a8:17:46:3f:2d:dd:52:33:c7:e0:
37:32:6f:cd:49:48:f7:cc:b4:e2:92:20:16:fe:1e:
5f:13:13:94:fe:86:3e:d5:8f:83:64:11:36:10:49:
c0:ab:2d:a4:d8:af:fb:57:7d:26:b7:a4:5e:3d:1b:
22:2c:97:60:9d:7c:93:de:cd:74:72:0a:41:e2:44:
9b:11:b6:ec:2f:d5:2c:28:50:dc:6c:33:27:de:69:
10:c8:a1:10:e8:54:88:13:44:e7:63:11:9b:bb:fd:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3C:92:9D:3D:E5:FD:49:D9:3C:4B:37:C7:C5:CA:E0:E0:DC:59:C1
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:20:9f:fd:45:85:8d:9c:61:56:3b:d9:56:e6:f1:f3:de:14:
4f:69:4c:f1:ca:65:fe:97:7f:00:39:ca:28:69:4c:3c:20:2f:
a6:74:14:37:54:3f:15:d7:db:72:88:eb:6c:7f:39:ef:7e:bc:
c3:07:6e:c5:af:b7:f5:a9:73:d9:97:08:8d:1b:67:3d:4e:8f:
fa:35:0a:59:fe:cf:92:9a:d3:fb:7f:27:f0:c1:10:2f:0c:40:
29:5d:58:2e:7f:e7:2d:e3:55:6b:81:bf:6b:3f:12:20:46:88:
85:72:3b:15:2f:e5:35:70:ba:42:c5:7d:3a:fc:bc:ff:eb:a5:
f8:e7:bb:c4:b9:75:7f:ad:86:b3:9b:05:d0:69:f3:bf:91:b0:
d6:67:56:6b:59:ef:a5:72:b4:db:31:19:8d:23:b3:19:74:12:
2a:99:92:c6:14:ab:19:d4:3e:e0:6b:5d:21:3b:0a:05:7c:95:
4b:7c:f3:cf:1f:56:c8:8c:2a:ce:14:b9:03:5a:f8:2a:d9:21:
74:96:b0:ee:e5:5c:61:27:f1:ce:6c:a4:63:d2:dd:10:8f:38:
ac:54:cf:29:fd:e0:39:f5:28:e9:26:99:a9:8e:7f:a8:d0:ed:
12:c5:1f:b0:33:3e:9c:2c:41:ee:00:5a:dc:d9:f0:73:6d:a6:
ea:50:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:16 2025 by rpki-client