Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File: BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier: H9yDwInJMIen6MFFTeRr0DmWXG4whNLIdT36fzRSTMY=
Subject key identifier: E1:A3:7E:DA:CA:56:B1:10:CA:8E:27:2F:DA:70:17:7A:A4:27:C0:7A
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer: /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial: 01965BDED2E8F36E17023BCC3F70E806C481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number: 04BF
Signing time: Tue 22 Apr 2025 05:00:51 +0000
Manifest this update: Tue 22 Apr 2025 05:00:51 +0000
Manifest next update: Wed 23 Apr 2025 05:00:51 +0000
Files and hashes: 1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: WMLSW3008xMYma48u2ox4QDZiwL6CCkrLjI6Cjy/nh8=)
3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:d2:e8:f3:6e:17:02:3b:cc:3f:70:e8:06:c4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Validity
Not Before: Apr 22 05:00:51 2025 GMT
Not After : Apr 23 05:00:51 2025 GMT
Subject: CN=e1a37edaca56b110ca8e272fda70177aa427c07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:c9:58:5f:40:27:95:20:a2:e2:2a:c8:db:
f4:cc:76:60:44:80:85:d9:b5:45:69:24:8f:ed:d2:
db:22:db:ec:dd:af:43:66:8f:fc:11:41:68:67:b8:
15:d9:9b:4e:cf:6a:22:e8:7b:f5:6a:9e:48:80:44:
1b:c1:17:2e:9f:91:73:a1:5a:cd:f5:f8:81:47:01:
3a:ae:6b:3a:97:90:8a:95:a4:07:dd:4f:85:1f:6f:
d2:5d:17:e5:bd:67:cc:75:73:20:ba:be:86:6c:fe:
78:6f:07:45:c5:ba:1a:49:2e:76:b7:a5:9b:9e:c9:
11:5e:72:37:ff:61:51:44:ba:84:6e:3c:99:8c:cb:
ba:8d:29:71:58:d0:f6:ab:f0:1c:06:83:ed:cf:6f:
b5:f5:a8:97:1f:d3:6b:fa:f3:b7:9d:c6:ae:74:c8:
e2:32:1c:0a:a6:36:4d:29:21:d8:9b:06:1b:0b:95:
e7:d2:28:f7:a0:65:ef:4c:8f:5a:cc:78:f5:6b:d3:
d9:1c:36:8b:31:5f:06:f2:12:be:9c:69:aa:0a:62:
18:45:ff:f6:75:bc:46:37:2f:0b:01:d4:a0:9a:40:
64:ac:22:a7:dd:0b:e2:77:9f:0b:1c:3f:ae:16:c1:
0c:55:66:4c:fc:55:30:13:3e:ed:9e:6f:45:35:ce:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:7E:DA:CA:56:B1:10:CA:8E:27:2F:DA:70:17:7A:A4:27:C0:7A
X509v3 Authority Key Identifier:
keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:41:6a:8e:23:e1:e0:93:4d:37:ea:bb:97:01:f2:75:c2:ae:
ce:10:8b:06:0b:6b:33:34:f0:7c:2b:9d:5e:4e:40:74:ac:77:
d4:21:05:f1:79:3b:6f:a4:9d:8e:ad:e8:77:33:95:6e:a2:fd:
13:50:5b:5b:aa:ff:fe:ec:eb:2b:77:6f:c2:1d:ca:9f:94:03:
ec:b7:c5:ac:b7:89:b8:f8:8a:fd:48:52:11:c5:22:b7:7d:0b:
01:7d:ce:19:92:59:bf:6d:38:60:94:75:62:c8:98:c3:6c:59:
09:7a:87:50:65:8d:32:aa:aa:68:b1:ba:54:40:86:d2:b8:0a:
1c:9d:d4:b5:16:55:34:79:a7:c0:90:3d:35:8d:50:7b:2f:e0:
15:b0:42:a6:6b:f4:6a:21:e0:26:99:2a:93:d7:21:1f:40:7f:
70:b1:04:47:34:dc:0d:cb:07:34:9e:17:1c:5f:0a:aa:2c:66:
1f:d7:e6:44:c4:80:34:5e:31:ba:18:ef:6d:36:35:21:79:62:
d2:21:77:e8:b5:e1:62:0b:16:a4:25:e7:80:fd:35:93:5b:04:
5b:83:5b:80:9f:47:7c:00:51:8a:95:9b:66:32:1c:a6:af:60:
c4:54:7a:b0:a1:eb:75:b3:68:f8:04:97:1f:f7:bd:fd:c5:6f:
e2:92:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:54 2025 by rpki-client