Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: Ytvn17D6d8sxSvAJOjMSvhZguyUFFuVuN8WRmcE8D9w=
Subject key identifier: 0F:D7:68:29:25:DA:35:E2:3D:61:6B:56:46:1F:13:B2:2A:5B:93:9D
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 01958B4DE7A5D12499F6EC904F3312132F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 0453
Signing time: Wed 12 Mar 2025 17:01:33 +0000
Manifest this update: Wed 12 Mar 2025 17:01:33 +0000
Manifest next update: Thu 13 Mar 2025 17:01:33 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: 8qiLtPi8hnJjxMvkGHKOocbESSP89e1PTg4q16XIDYU=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:e7:a5:d1:24:99:f6:ec:90:4f:33:12:13:2f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Mar 12 17:01:33 2025 GMT
Not After : Mar 13 17:01:33 2025 GMT
Subject: CN=0fd7682925da35e23d616b56461f13b22a5b939d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:20:e1:ed:d9:39:e4:7d:5d:58:c1:27:f3:4c:
a1:9a:22:a4:5c:ce:53:f8:ce:98:51:99:c4:72:0c:
9b:2f:ac:1e:8a:d5:65:bd:f9:50:da:d0:55:27:0d:
0d:aa:b1:35:1f:6c:35:24:36:65:2c:a8:db:c0:a0:
f0:32:a2:fb:5f:f7:7c:13:46:54:b6:9c:18:97:e1:
50:0a:0e:85:7b:f1:22:14:c8:3a:13:08:58:4a:22:
80:f6:91:f4:0f:7e:6d:87:51:a2:f0:4e:de:9b:3d:
08:27:1b:86:42:43:d9:5b:5c:f0:cc:f1:9b:0b:d1:
35:01:a6:9c:71:b2:32:cf:13:19:62:64:f4:a7:61:
70:2f:69:e8:ae:87:9e:4c:86:bc:da:95:db:1e:67:
3b:98:98:23:23:f6:50:dc:1f:c1:e8:08:cd:25:bc:
8f:80:b6:08:b8:3f:73:0e:57:40:28:e4:98:c3:51:
df:b9:7b:a1:7b:5c:9b:13:fb:34:e2:a6:e6:e7:e1:
3a:67:a4:36:51:e2:c8:bf:c2:4b:f3:1e:a1:5a:3a:
2c:25:a1:c3:86:4e:25:01:0f:07:ca:ba:fb:ec:ee:
53:b1:30:e0:c8:90:d6:10:ea:d1:3c:5d:60:ce:e7:
a7:a9:81:1a:d2:b8:a7:f4:5b:aa:88:f8:9e:e1:68:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:68:29:25:DA:35:E2:3D:61:6B:56:46:1F:13:B2:2A:5B:93:9D
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6f:b5:91:cc:0f:db:a5:2b:dc:d5:86:c7:48:8e:ae:f7:ec:
90:c6:b7:a7:7d:be:b3:66:f6:9c:9d:1f:5a:0f:27:10:79:94:
15:53:85:c2:38:8d:f4:a1:21:0e:b2:cc:1b:3c:e7:76:dc:a4:
36:28:44:16:c7:fe:45:e6:92:0f:41:94:db:bd:50:81:b4:ab:
95:41:56:3d:ce:77:ed:2e:b2:43:b2:39:7f:8a:92:ea:0c:91:
9d:a6:f5:d5:59:26:ea:20:98:f6:64:92:d6:c3:fc:f2:31:68:
a8:a0:fb:04:0f:43:ac:c6:35:bd:81:ea:16:60:cd:8f:74:86:
86:cd:da:a8:ed:3d:e7:84:45:c6:8f:18:72:57:bb:8f:ab:fa:
30:2b:ca:a9:8e:3c:ec:7a:58:1a:5f:c5:8a:23:58:9c:d3:6e:
50:4f:22:8d:97:91:03:86:61:6d:0e:62:54:6e:47:85:9d:e7:
50:1a:15:4b:40:5e:88:ca:3d:90:f9:c4:d7:65:4d:73:a0:13:
7a:6d:83:a5:b9:d2:5d:35:8f:1d:d7:70:98:b7:78:1b:3d:60:
ce:d2:06:71:03:f4:74:34:b2:99:80:3d:c7:05:47:6a:6c:be:
5b:ae:41:4b:de:7c:e1:7f:b6:7d:e7:97:2d:25:bd:5c:42:12:
ab:55:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:33 2025 by rpki-client