Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: Zh+5RHMM0wc7OjBXow/QmPMZlV0yZM9e/qB2IML5NtE=
Subject key identifier: 81:0D:2E:48:BA:1A:D5:7D:32:65:5E:21:24:85:A6:56:1B:D8:22:4C
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 0196504815AFEFF84A240888E656BBAD0A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 23:00:23 +0000
Manifest this update: Sat 19 Apr 2025 23:00:23 +0000
Manifest next update: Sun 20 Apr 2025 23:00:23 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: OOYmL98zP1SQ4C9X6BYYwSFulmvwnGeQzg9wlZQuPMw=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:15:af:ef:f8:4a:24:08:88:e6:56:bb:ad:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Apr 19 23:00:23 2025 GMT
Not After : Apr 20 23:00:23 2025 GMT
Subject: CN=810d2e48ba1ad57d32655e212485a6561bd8224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:09:30:77:d3:ec:05:f6:6c:bb:3d:1b:0d:
6e:f6:30:e5:95:ef:f0:aa:b2:1b:72:40:af:b7:b6:
d5:5c:4a:6b:2b:57:ea:d3:84:e8:cd:51:51:65:5d:
03:8c:a1:40:6f:9e:9a:23:04:06:a9:82:14:4b:19:
21:85:97:74:ab:22:61:27:ab:3d:34:63:72:91:20:
e6:d5:75:f3:8a:70:20:73:63:09:9b:94:f3:2c:f9:
83:2c:62:7e:84:43:01:43:c7:5a:39:bb:29:59:09:
11:28:cf:97:1a:7b:46:49:ae:96:cb:1c:2c:a1:4f:
50:8f:80:73:fc:9e:14:15:92:55:03:3c:8b:d7:f3:
d4:d4:fa:8f:6f:1c:e8:0a:eb:81:12:4e:ac:43:e3:
67:2a:e3:bf:09:9c:18:70:93:3c:68:6f:eb:4a:5d:
22:9d:45:6c:1d:07:01:37:74:62:d6:9c:6c:b5:0e:
68:68:53:73:90:6c:0a:c0:51:22:1b:f8:2b:f4:c8:
49:a5:97:de:50:ca:b0:d2:59:2a:8b:3e:c4:f1:31:
07:cf:2d:59:e9:2c:d6:23:9f:b3:73:15:04:5d:61:
4a:e8:d4:07:89:08:85:4c:81:6b:b4:7b:59:8a:d1:
da:7e:bf:e1:53:99:64:06:ce:3d:af:99:22:cd:fe:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:2E:48:BA:1A:D5:7D:32:65:5E:21:24:85:A6:56:1B:D8:22:4C
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:92:1c:3c:23:42:ec:30:50:7a:7a:f4:c6:6d:c9:5e:45:b7:
77:d2:2a:9d:aa:2a:c5:4a:a0:32:ed:e8:b1:eb:4b:1e:46:af:
ff:3b:e0:1b:e5:65:45:52:06:49:0c:79:0f:e6:b8:60:a5:cf:
2c:af:90:d4:45:f6:b1:d5:c7:c0:56:90:0e:34:ef:99:63:3c:
4a:23:d0:ee:6f:b6:f8:9b:21:ec:cb:03:2f:51:a4:b4:6e:dc:
7f:d1:45:0d:f2:42:88:61:eb:99:ae:9d:65:25:e9:44:88:cd:
5e:6d:ab:78:3e:15:db:52:ec:36:4f:29:c2:24:a4:ab:5f:08:
73:83:0d:9b:98:74:8e:01:e9:0d:ed:c4:02:a4:70:48:d2:b1:
e7:3f:f5:79:ef:98:e9:61:18:cd:4a:6f:07:be:05:a1:3a:a0:
da:2a:1e:84:91:22:29:35:17:a2:f8:2a:0c:cb:b6:f9:ce:af:
02:8a:aa:ec:3d:79:37:8c:bf:cc:4a:1a:8e:25:74:cb:b7:1b:
f8:ac:d2:38:ce:9f:79:fd:b6:bb:f5:b9:d7:30:ad:60:bc:16:
80:21:96:7a:9f:76:9d:2a:f3:ee:65:56:fd:ba:e1:e0:13:b5:
b7:16:35:7d:a3:3f:b8:3a:4b:9b:e1:8f:12:1c:03:53:39:05:
16:34:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:30 2025 by rpki-client