Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: AezdXmZ219NBi3aFLL1AHrYLNo6Kv+NEFzwyGyrHzzI=
Subject key identifier: 8C:A2:8A:6A:59:7A:8B:98:3C:FC:18:49:88:17:BF:4B:FF:62:4E:FB
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 019657264FD5F1BFC71EDF27F2B477C730F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0AEE
Signing time: Mon 21 Apr 2025 07:00:50 +0000
Manifest this update: Mon 21 Apr 2025 07:00:50 +0000
Manifest next update: Tue 22 Apr 2025 07:00:50 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: WvSHb2aLNB+DW7XwR1iuDG/gw1IiOBYdVJH8UH2OZnI=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:4f:d5:f1:bf:c7:1e:df:27:f2:b4:77:c7:30:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: Apr 21 07:00:50 2025 GMT
Not After : Apr 22 07:00:50 2025 GMT
Subject: CN=8ca28a6a597a8b983cfc18498817bf4bff624efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:72:77:fb:74:df:30:a9:f5:05:96:0c:e4:
15:78:5d:cb:af:33:5a:37:7d:3f:b4:63:38:fe:8e:
5e:10:20:34:05:68:13:73:dc:f3:44:af:4c:91:89:
48:09:89:05:74:0d:79:e0:e6:fe:9d:12:cb:81:f8:
19:9b:bb:b6:9b:c5:93:d0:c9:72:b5:ca:30:de:ed:
42:04:c2:66:a3:5e:53:e8:dc:3f:0e:79:fa:1e:df:
87:7d:7f:97:ed:f7:ee:2f:ba:0a:41:4f:78:12:15:
f1:7b:37:3e:f4:db:7f:c9:87:5c:2c:70:b9:e3:c5:
ca:95:18:35:71:a3:12:ee:e0:eb:c2:f1:9f:be:c3:
fb:21:bb:17:26:47:c6:bc:05:7f:80:d7:b3:a3:fb:
49:5d:b0:67:2b:d2:cd:6f:17:02:75:28:b9:83:13:
e1:ad:d5:64:c5:e0:ac:92:64:bf:7d:3f:12:b5:a0:
18:73:ca:7c:58:2d:38:ba:41:92:6e:53:69:ba:67:
d3:21:59:e7:ea:d4:0c:42:32:97:2c:f0:77:22:db:
73:5f:f9:88:06:7b:76:21:e2:e5:f0:7e:cf:81:72:
35:ad:b2:c9:a3:7c:36:47:d9:c1:73:b6:c4:ec:f7:
e1:50:e5:4e:82:95:f0:50:20:c2:1b:87:4b:6a:4c:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:8A:6A:59:7A:8B:98:3C:FC:18:49:88:17:BF:4B:FF:62:4E:FB
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ac:4d:4a:6d:68:b0:a5:0f:b2:2c:fa:6c:16:c2:8d:e2:6a:
04:13:30:37:51:ab:e6:a9:dd:07:f5:8a:bb:91:91:45:c1:3f:
59:4f:f3:56:c5:88:85:82:25:90:b9:b3:65:8c:57:65:53:4e:
0d:33:92:25:60:be:48:fd:22:a4:77:2d:a3:76:ae:e1:c6:0f:
77:a7:5d:14:c4:78:0d:6b:66:5b:02:90:77:09:53:90:7d:9e:
55:8c:91:af:40:a5:50:05:24:c7:37:a2:60:61:c6:53:e7:61:
f3:f7:1f:1e:7a:04:86:ba:fe:b7:6b:08:ea:65:7b:09:98:74:
cc:5b:af:62:1c:a1:77:83:1f:35:5a:87:55:bf:90:c6:49:13:
a2:f1:61:84:9b:e3:c6:3a:b4:1b:80:8d:e9:fb:91:bc:06:7f:
35:cb:46:c5:2d:41:bf:7f:b6:88:3a:ff:04:9f:45:17:18:bd:
17:94:3e:c7:60:d7:d1:21:41:63:e1:73:55:8a:60:d6:90:b0:
ad:cb:d3:53:cc:74:68:e7:80:b9:6b:62:ce:4c:b1:74:19:b9:
f1:e7:70:3f:0e:ba:0f:00:e5:83:80:2d:f2:b1:e8:47:92:51:
e8:e0:b9:48:a8:e8:f9:b0:3c:6f:3c:0c:f7:26:1d:78:b4:7e:
7b:b0:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:34:58 2025 by rpki-client