Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: uH8K2LeFdgQqUekroPY1+epf0UtzBkGyiLkcxuKUza0=
Subject key identifier: 01:13:63:F3:3A:EB:B3:EE:49:9E:9E:C0:19:62:A3:96:F4:3E:1D:85
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 019640677426FA7D2DAF1E2856D16F09BE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 03F4
Signing time: Wed 16 Apr 2025 21:00:43 +0000
Manifest this update: Wed 16 Apr 2025 21:00:43 +0000
Manifest next update: Thu 17 Apr 2025 21:00:43 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: BRoF3eP1AeYQmsMgaQlHd1FIK96OU52hCPUGBGyTY1A=)
2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:74:26:fa:7d:2d:af:1e:28:56:d1:6f:09:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Apr 16 21:00:43 2025 GMT
Not After : Apr 17 21:00:43 2025 GMT
Subject: CN=011363f33aebb3ee499e9ec01962a396f43e1d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:0d:1f:d1:81:79:ab:0c:f8:64:9d:12:1e:
52:bb:df:89:d9:22:54:53:0c:65:71:ba:a1:87:12:
67:6a:e3:79:a5:88:f4:42:85:40:df:14:02:06:e3:
36:f5:cc:a5:39:4f:1c:d2:a4:1b:e7:5d:71:fe:55:
dc:44:65:cd:3f:34:9a:74:76:10:09:48:9e:55:4d:
14:f7:b5:84:4e:04:e0:ba:cb:ae:23:5b:65:69:67:
4a:e3:d9:38:db:5a:78:c5:06:4e:70:bb:7c:f1:3c:
7d:50:c2:ef:a6:f3:ef:2b:0a:1a:71:58:c0:4d:28:
ac:67:f2:31:a2:88:ea:65:6b:87:a7:22:44:65:4e:
f7:d6:e4:b5:b7:74:c1:a7:06:ee:2a:1b:40:f0:42:
ac:6d:37:55:c9:7f:3e:b6:c2:8e:6f:ac:d7:46:13:
9c:9a:e1:99:86:89:ef:63:b8:86:94:9a:f1:9f:17:
5b:13:8a:54:e0:bd:78:20:9c:0f:93:0b:40:6a:9b:
c6:81:e4:27:91:ff:54:49:e3:26:13:99:ef:7b:e1:
d7:fc:a6:7e:47:dd:02:21:c8:db:28:71:b0:57:e3:
5e:ea:ad:89:e0:76:ed:7b:1b:0c:c7:31:3d:d3:24:
e9:bd:03:d3:a8:4c:72:51:52:54:82:d7:97:62:03:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:63:F3:3A:EB:B3:EE:49:9E:9E:C0:19:62:A3:96:F4:3E:1D:85
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:81:c8:8e:2f:9a:0f:9f:53:d4:96:d3:ec:28:e6:85:db:96:
d0:15:9e:a5:ed:f1:5c:21:0d:5a:96:8a:02:cb:e4:69:6b:37:
57:b3:f7:29:08:b7:be:fc:b1:25:9a:03:b4:82:de:01:46:ab:
0f:ec:74:08:78:62:5b:fa:e7:bb:50:a5:f1:69:37:f1:64:2c:
ef:e6:44:66:7b:17:53:de:8d:4d:26:3f:c3:9f:45:be:f9:7e:
e1:ae:4e:d2:5c:c1:bd:91:92:2b:e3:f7:48:da:32:8b:42:98:
22:f0:ae:25:ee:86:64:7b:09:62:77:e9:55:b6:05:c1:5a:8b:
86:ee:97:7f:57:be:db:c1:9e:13:e8:ef:83:ca:91:50:02:ad:
a1:9b:d2:ab:05:a8:3d:09:24:ed:8c:e1:fe:b3:ab:6d:0c:76:
77:83:10:92:74:5f:c2:21:ec:6c:16:56:dd:b0:45:54:cb:97:
10:ef:86:f8:aa:b2:76:e8:a4:c2:96:c3:55:05:3e:77:a3:f4:
d7:7e:b8:a3:84:d2:ff:7d:13:a2:0c:5e:f6:00:10:6f:4d:e5:
db:bc:79:8b:24:1a:70:2d:e7:cf:bc:e9:58:26:fa:b4:ec:6d:
06:a3:12:f9:68:74:b6:c0:c1:a0:01:e3:dc:52:6d:11:94:66:
35:41:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:45 2025 by rpki-client