Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File: BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier: A2d9De+vEZ/wF1bv/9kG2952U/z8Qz1BXltiJJA+Occ=
Subject key identifier: 5B:E2:D6:CB:42:CE:86:63:94:F1:23:6A:AB:DE:77:B1:E7:98:1F:79
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer: /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial: 019645C470BEB6772E97E11756FDBD7BAA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 22:00:23 +0000
Manifest this update: Thu 17 Apr 2025 22:00:23 +0000
Manifest next update: Fri 18 Apr 2025 22:00:23 +0000
Files and hashes: 1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: cWKaRnDzTPg4vWXkETy1frTsIeo8muR0ZRKMo22Wh2Y=)
2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:70:be:b6:77:2e:97:e1:17:56:fd:bd:7b:aa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
Validity
Not Before: Apr 17 22:00:23 2025 GMT
Not After : Apr 18 22:00:23 2025 GMT
Subject: CN=5be2d6cb42ce866394f1236aabde77b1e7981f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:08:f7:16:d3:d2:9f:0f:36:22:c1:71:9d:
b2:5c:c6:e3:10:b2:8c:43:4c:50:a9:c5:5e:28:fe:
20:98:16:38:89:b4:bd:05:8f:15:3c:95:d2:15:36:
d2:38:c4:9d:08:50:13:05:6e:c9:de:93:0d:8b:5d:
51:93:f7:a0:b4:d9:1a:44:dc:09:d9:b5:6d:a7:70:
5f:23:f7:16:5b:d4:e5:fb:a0:9e:f3:f8:f3:83:5d:
81:3c:45:cd:0f:1d:2e:3f:2a:6f:39:14:2b:96:91:
6d:6f:98:60:4c:7d:5a:21:43:0f:21:c2:99:45:67:
ea:21:c2:3d:12:f6:2f:a5:df:21:35:46:80:38:f9:
7c:fc:e5:c4:41:58:5d:ee:c6:32:3f:f7:2c:e8:74:
8c:fb:40:b2:75:db:2a:67:00:e0:ba:23:86:8f:33:
01:87:c7:42:5e:c2:2d:91:39:18:26:20:9e:e8:d6:
86:1a:b0:ab:f2:57:a0:7b:0b:ab:73:6f:4d:58:e7:
69:d0:55:e2:ab:9c:f0:08:ab:f6:83:c3:3f:a8:39:
6a:f8:fb:60:b8:c5:48:06:d4:0b:97:ea:97:05:cd:
b7:b5:fd:8c:e6:99:57:ba:7f:71:5d:d9:25:87:7a:
1d:46:3b:01:e6:7f:b6:58:62:1d:5d:ae:1b:87:1b:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:D6:CB:42:CE:86:63:94:F1:23:6A:AB:DE:77:B1:E7:98:1F:79
X509v3 Authority Key Identifier:
keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:71:c3:1e:3d:b7:c2:88:1a:b8:e6:7d:7a:92:ad:65:39:98:
8e:dd:1f:e4:94:fd:e8:4a:0b:f5:84:67:6d:13:38:a5:df:f4:
c5:b5:0d:0f:33:64:bb:90:39:91:d6:06:b4:29:10:5e:a9:ef:
de:5c:d3:e9:d2:73:07:4b:11:c5:46:db:c5:dc:bf:2d:52:d9:
56:1c:ea:68:5c:2f:6c:a5:b1:25:d8:2e:f9:f4:ce:99:91:07:
83:6b:0a:2b:f3:ef:a0:98:3e:eb:4c:b8:04:01:db:8b:d3:ef:
65:29:ef:5d:84:3b:dd:d3:fc:f2:d1:58:9e:c7:d2:16:ab:ea:
59:d7:ea:8d:48:6b:8b:dc:5c:6d:bb:ed:8f:7e:40:ef:08:73:
62:1d:de:f8:0b:01:95:f2:7c:9e:d6:26:8a:03:2c:8c:2e:c5:
af:ed:cd:8a:f4:9f:8f:46:56:4d:ee:b4:59:55:a5:7f:fd:ee:
36:83:4d:9b:ed:57:64:59:5f:06:3b:e3:40:87:5e:d2:39:5f:
0c:6e:ea:48:e5:6b:2d:f6:6e:f0:02:d1:2b:53:e0:89:75:7e:
e3:9b:68:a5:73:11:7c:a3:26:cc:c5:2b:ca:86:3b:3e:04:f5:
81:68:96:6d:3c:d8:4c:11:79:f9:26:b8:15:82:06:a2:ac:05:
b7:1c:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:33:39 2025 by rpki-client