Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: Y6vE1CfvYzdjaPO/MqXNF2ArBK2/tjiZ+PGBzOgR8sk=
Subject key identifier: 81:99:E3:1D:78:59:67:88:53:3F:A4:4F:F5:CD:2A:BB:76:4E:40:CC
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 01963D9CF977E656CC98F917DE63AACEA62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0D8C
Signing time: Wed 16 Apr 2025 08:00:19 +0000
Manifest this update: Wed 16 Apr 2025 08:00:19 +0000
Manifest next update: Thu 17 Apr 2025 08:00:19 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: 9dWtI7HbjdRkDk7gPyhl9h7ilsTiOduNGHbtm3zhIyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:9c:f9:77:e6:56:cc:98:f9:17:de:63:aa:ce:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Apr 16 08:00:19 2025 GMT
Not After : Apr 17 08:00:19 2025 GMT
Subject: CN=8199e31d78596788533fa44ff5cd2abb764e40cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:eb:77:5d:05:83:99:ca:4f:5b:70:5f:15:
2e:df:db:39:de:60:64:d7:36:f0:9f:ce:f2:7f:70:
7b:17:5f:bd:ce:93:33:d4:ea:41:01:15:d4:04:e1:
e7:a5:9a:9e:3e:d8:80:42:56:4c:36:64:94:10:e7:
c7:a7:93:c7:3a:a3:78:b1:ba:9c:ad:ce:e8:08:84:
51:d2:87:c4:31:dd:c3:a2:3d:6d:64:b3:88:41:6b:
d8:a5:bd:67:5e:2c:a7:90:bb:8c:91:d5:39:05:51:
4a:ee:c5:b6:83:e6:0c:1d:27:aa:4f:9c:01:97:d5:
7d:25:94:ab:33:0d:87:5d:13:4c:cd:a2:5b:be:23:
b6:c2:35:bd:b8:62:8d:ec:52:66:93:15:07:ba:a1:
83:94:08:b5:ce:63:f9:db:7a:49:bc:0c:d7:a8:8d:
07:59:cb:5f:e3:b3:27:70:f0:4b:98:ef:dd:64:b8:
a6:cd:b1:9d:38:91:9d:e2:44:83:49:db:6c:67:40:
76:8c:84:31:08:70:ee:7f:77:a9:25:3e:93:3b:fc:
55:99:96:7a:84:3a:e9:52:7b:2d:18:89:89:e1:a6:
13:ac:cd:0b:ef:64:85:74:94:48:eb:03:39:97:43:
84:25:19:fc:c0:e1:69:7a:7f:28:e3:fe:9c:fb:1b:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:E3:1D:78:59:67:88:53:3F:A4:4F:F5:CD:2A:BB:76:4E:40:CC
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ca:65:e0:41:43:5c:ac:8e:25:11:96:1a:e9:a5:83:22:e4:
d0:7b:d7:3e:1d:5c:f4:61:ec:17:26:85:82:e5:30:8d:5f:84:
e0:ac:58:37:82:a3:11:e6:83:c3:65:00:06:90:45:6f:fc:a9:
fb:02:10:59:4d:7f:b0:bf:f3:b2:a6:8d:ec:33:6b:88:00:bc:
eb:68:0e:ee:60:11:ad:a7:d6:13:ed:71:ca:cd:c2:28:7d:83:
ca:a2:ec:6d:2f:57:d0:96:02:7d:d3:b5:43:23:43:56:47:33:
44:67:99:1c:52:69:0d:86:2e:26:56:a5:a4:a1:cc:e1:dc:60:
b9:e9:de:e3:8a:f8:ea:90:3e:ba:8d:83:78:b0:ae:12:cd:45:
20:81:07:2c:a3:1b:96:0f:60:4e:d6:59:bd:80:73:32:52:95:
ba:ad:9e:e3:58:b8:04:d6:04:9a:22:ba:6b:83:2d:5b:e0:87:
93:56:95:f3:4a:a4:e5:61:6b:43:5c:ae:83:ac:bc:5f:c4:15:
1a:93:b2:d0:f1:f0:97:6c:3f:c1:6c:9d:b0:5c:ad:14:aa:54:
46:4a:7d:6d:01:50:07:01:8b:82:1f:73:b7:91:93:83:8e:1c:
ba:dc:16:87:8a:9b:fd:34:ac:80:7c:0e:bb:53:ee:6a:8d:5b:
eb:e8:fb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:56:38 2025 by rpki-client