Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File: BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier: Bdg9wh60xGkiIiye8+8NNk/VDLdewPATowjM8Nrwbsk=
Subject key identifier: 31:D9:D7:68:74:1F:1B:C7:F5:73:E4:95:C4:2D:41:EF:A4:8B:6C:6C
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer: /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial: 01964520084534CFA9BFAFC142FC38CF8435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number: 0666
Signing time: Thu 17 Apr 2025 19:00:49 +0000
Manifest this update: Thu 17 Apr 2025 19:00:49 +0000
Manifest next update: Fri 18 Apr 2025 19:00:49 +0000
Files and hashes: 1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: DoCNXFufD1hZRP/g78/VJfWMlzRsRKa1OLQAX9vLthg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:08:45:34:cf:a9:bf:af:c1:42:fc:38:cf:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Validity
Not Before: Apr 17 19:00:49 2025 GMT
Not After : Apr 18 19:00:49 2025 GMT
Subject: CN=31d9d768741f1bc7f573e495c42d41efa48b6c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:74:66:83:56:32:39:bb:8a:18:be:e5:5f:
f9:89:ac:d8:6f:1e:43:2f:bd:e1:d6:70:fb:16:7c:
13:2d:30:81:91:3c:17:16:02:e7:9b:a7:e2:ee:00:
af:65:75:c2:90:e4:78:bc:10:bc:c5:65:4f:b1:73:
21:1b:9d:6a:a9:85:73:85:ef:40:b6:d4:f9:b6:80:
23:65:30:aa:a8:44:f2:63:21:5e:ea:bd:f6:c0:7d:
79:2b:a1:34:71:46:21:6c:18:21:ce:37:fe:62:a3:
a5:2a:7b:f8:2f:cd:94:4f:ad:ec:c8:96:e7:45:bb:
fd:84:7e:7d:14:15:ce:7d:af:de:27:0c:2e:fa:a8:
05:15:f4:2f:c7:f7:00:76:90:e7:2a:1c:5f:24:5a:
ec:b4:2a:f7:e1:98:87:6a:fd:33:08:d1:90:f6:64:
cd:e9:fd:53:79:32:e4:3e:a7:2e:b9:93:6f:c9:1a:
21:7f:08:4f:7b:78:8c:9c:c5:de:6d:c9:30:11:d1:
a6:60:9c:4a:9c:c3:21:00:8c:39:e3:fc:55:1d:33:
55:d5:dc:1b:53:23:c1:00:4e:db:89:02:58:f0:87:
64:a2:00:b5:c3:f4:c7:17:2d:52:78:92:1e:61:a8:
af:e2:70:87:27:69:60:f4:e5:f5:ca:20:ee:19:c1:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:D7:68:74:1F:1B:C7:F5:73:E4:95:C4:2D:41:EF:A4:8B:6C:6C
X509v3 Authority Key Identifier:
keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:13:46:21:0c:78:83:00:b6:f5:b4:a7:92:5b:d7:3b:01:d1:
ca:b6:00:0a:d2:5c:57:8d:d4:b6:97:82:8a:7d:88:12:8d:52:
f3:8b:71:98:02:22:23:9f:03:2e:5f:b1:04:ac:e5:21:39:d6:
a0:65:56:7a:3e:05:0b:93:69:40:39:02:37:d2:87:db:2e:7f:
c4:0e:92:ad:92:82:9e:1b:ce:03:d3:09:29:38:e5:34:d8:58:
a5:06:38:76:e6:ea:fc:dc:5e:42:25:11:af:e4:7d:07:57:50:
cb:05:c6:99:3b:8d:c0:cd:6f:11:7a:19:2a:fe:59:8a:57:50:
e2:8d:e8:22:95:1d:5f:39:32:0c:fc:fe:ef:7e:31:79:5a:75:
51:26:e0:58:dc:ea:fd:47:dc:0a:86:e7:5a:2f:4b:6f:dc:2f:
53:8b:85:a5:d1:18:01:97:bc:5e:bb:85:5f:8f:3e:4c:22:51:
ea:64:86:3d:af:52:d0:96:42:b0:89:7e:4e:4e:16:c1:41:ad:
e6:09:03:a3:82:83:f6:92:43:76:78:f3:64:45:2f:a2:24:b0:
75:6b:f0:76:f2:fc:66:b1:0c:5d:6c:3c:91:60:70:0d:9e:1b:
03:4f:ea:d8:a0:62:dc:00:c2:e4:96:c9:26:db:ac:33:79:3a:
15:db:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:45:21 2025 by rpki-client