Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: 0+vIfGfuAshdAcBPTZGCiT7aU22CoVFxgKausT31dwE=
Subject key identifier: 6A:D9:6C:43:F1:E8:6D:46:46:B5:C9:1F:52:23:32:7F:1B:0D:09:50
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 01963EAFF29458F5474C2F0745AFE457AF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 0482
Signing time: Wed 16 Apr 2025 13:00:40 +0000
Manifest this update: Wed 16 Apr 2025 13:00:40 +0000
Manifest next update: Thu 17 Apr 2025 13:00:40 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: lSSLjYUvVSfWN0/h5h8j2fE9S6QgRpuj7E9SgGNGuc4=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:f2:94:58:f5:47:4c:2f:07:45:af:e4:57:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: Apr 16 13:00:40 2025 GMT
Not After : Apr 17 13:00:40 2025 GMT
Subject: CN=6ad96c43f1e86d4646b5c91f5223327f1b0d0950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:f2:de:6c:0b:f4:8d:c1:2a:4a:93:9b:5e:
75:1a:6d:f4:8d:45:59:aa:4b:c2:98:0f:2a:d3:8e:
80:34:df:39:72:d9:05:62:82:f4:e7:b7:8b:91:60:
77:31:b7:24:ce:1b:30:a9:b7:c5:cd:cd:3c:46:c1:
b4:c7:ea:11:b3:0d:07:66:3f:90:40:12:e5:88:ce:
aa:6f:b0:ff:3b:f6:db:d7:25:1f:3d:49:21:79:61:
19:b6:55:b4:d3:6a:8a:60:db:5d:eb:11:ba:25:62:
2d:69:6e:4a:ac:1d:e5:7e:45:20:bb:40:59:e3:83:
64:f7:ad:20:ec:80:c2:a4:d0:f0:a8:b7:69:a4:38:
a6:89:ab:57:25:13:f1:14:c1:42:67:6c:bc:ab:21:
61:34:68:90:09:f3:1c:db:6b:03:a4:cd:71:80:a7:
d8:33:1f:ce:08:d8:96:22:97:31:3f:f6:f1:19:a2:
ad:29:68:eb:55:1d:7d:d4:3a:17:b7:3e:e3:43:e6:
e2:8a:9f:e9:09:75:a9:83:96:59:29:1f:c8:90:51:
1e:d4:fb:5b:e9:8b:36:6f:26:5f:f4:41:1e:d9:4f:
00:c0:48:24:a9:d9:f8:0e:00:1a:33:eb:f2:2b:05:
9f:36:fe:c7:78:df:71:51:af:2d:09:09:a4:6f:7b:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:6C:43:F1:E8:6D:46:46:B5:C9:1F:52:23:32:7F:1B:0D:09:50
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:6f:34:47:09:d3:83:c8:a4:3b:27:a8:8a:4b:60:76:72:
60:2c:d7:33:d5:b0:63:70:c9:a1:fc:e5:a2:03:ea:2d:6f:85:
69:eb:c4:12:d5:08:70:8a:dd:3f:b6:21:8f:ef:50:90:4e:21:
27:06:99:d5:83:33:ca:62:9e:8e:2d:56:de:eb:5b:98:8c:27:
57:f6:c4:df:21:b5:f4:12:7b:5b:77:f7:1d:7f:26:86:08:78:
71:c6:f7:be:c6:92:ac:2d:86:af:ce:6e:f9:52:19:b9:b3:dc:
81:ae:b3:17:95:97:60:1f:19:70:dd:12:9c:5e:92:8a:27:3a:
22:53:41:32:c0:24:2e:e8:66:01:53:a3:b6:1c:3c:25:ba:28:
bd:21:bc:d5:de:0e:16:63:8f:5c:d2:bb:b2:84:dd:83:3d:92:
79:39:f8:3d:5e:3e:f2:17:f4:42:e0:7b:3d:07:a2:10:52:12:
c3:af:e7:ad:ad:95:a6:5f:eb:65:0c:08:4b:ac:32:ef:22:e2:
a5:1a:53:f8:7d:14:0d:65:3b:2d:34:61:5f:78:f7:bb:6d:e2:
7c:9b:82:5c:76:50:53:b9:fd:c5:a4:ed:ce:07:7c:31:69:45:
b6:c4:e1:ab:69:78:49:17:2b:19:7b:ac:fd:9d:4d:7a:4b:5e:
d5:6a:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:36 2025 by rpki-client