Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: OpaOeTnlEkujwWM56ZAuzTTwObtpgVQCOFj+5o6nvck=
Subject key identifier: 02:CC:58:F9:FE:B5:14:E2:E6:A9:C8:89:E6:B0:94:07:9C:21:87:1E
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019612EA4FAC252F1ED3871036F44F8C600B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 14E0
Signing time: Tue 08 Apr 2025 01:01:07 +0000
Manifest this update: Tue 08 Apr 2025 01:01:07 +0000
Manifest next update: Wed 09 Apr 2025 01:01:07 +0000
Files and hashes: 1: 32zc-LXmMR6x0xIUhBWcHNAbwtU.roa (hash: u8NkHnjtIFcLlrXnANHRipTUbJu+OSRN4OG5POQXt6s=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: s4xJ/ukV9EEZvnkXrx16mv2xZM0kXsQK1dwZJZch4R4=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:ea:4f:ac:25:2f:1e:d3:87:10:36:f4:4f:8c:60:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Apr 8 01:01:07 2025 GMT
Not After : Apr 9 01:01:07 2025 GMT
Subject: CN=02cc58f9feb514e2e6a9c889e6b094079c21871e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:9e:22:c7:d6:2a:ba:2a:34:73:ce:ce:b8:
e6:67:28:35:b3:35:0e:32:aa:6d:cd:1a:c3:1e:4d:
06:b1:e1:53:ff:ae:60:82:e9:86:77:6d:ec:9e:0d:
68:41:de:96:96:31:7c:10:13:12:1f:02:51:e4:86:
d5:93:60:08:15:dd:89:07:94:ae:63:ef:56:ad:0a:
28:d8:b2:9a:77:ee:c1:9c:0a:3a:8a:64:a4:f1:c7:
33:0b:08:27:38:41:a1:28:d2:7a:f0:89:6c:1a:9f:
aa:df:c3:8e:1f:26:45:b1:9f:6a:0b:f6:4b:25:4a:
29:99:33:82:ef:21:57:71:c3:55:85:69:87:1d:bb:
2a:e9:74:fc:a2:fe:18:77:03:0e:f9:b9:60:47:4b:
b3:37:d6:a1:ae:92:58:e2:f9:70:63:cc:79:fe:19:
7f:e1:9f:6e:9b:88:f4:03:cc:45:b2:03:89:8c:4c:
92:12:c1:13:cb:37:c9:7e:16:4f:3d:08:cf:a2:89:
45:2c:b1:61:65:6c:5c:b4:65:a3:2a:34:61:58:e3:
92:99:dc:ab:79:6d:46:93:cc:99:f6:84:42:8c:5f:
19:9b:41:dc:aa:e2:e2:d2:f1:33:32:73:56:34:2c:
30:9c:c2:e2:d3:c1:30:e4:18:0c:a9:be:a8:0b:fe:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CC:58:F9:FE:B5:14:E2:E6:A9:C8:89:E6:B0:94:07:9C:21:87:1E
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:4a:95:0b:a2:28:79:60:60:44:5d:61:db:35:f5:d4:1b:
7c:c7:88:19:22:cd:c5:e8:7d:94:a1:30:38:51:2f:e1:f1:c1:
6c:ef:3a:9b:1f:66:e0:b0:cf:30:09:f7:09:73:28:93:12:85:
84:c7:28:be:fd:21:0f:83:9d:5a:b8:25:32:18:33:b2:4f:5d:
a9:0a:1c:56:c2:e3:65:c3:4f:ed:1c:2f:5f:60:5b:26:1b:b0:
8e:5c:08:5c:ab:fd:ea:1a:4d:96:cc:ad:66:ab:2d:97:6f:f3:
d8:43:5a:24:1d:ae:db:1f:f8:36:b0:03:ce:67:42:f4:b1:87:
57:e3:96:18:fb:9e:4a:26:d7:bc:e5:64:10:e1:f6:de:82:2a:
38:c6:4d:41:e5:80:1d:c5:56:fb:a4:ca:9a:42:af:9d:44:88:
95:cb:08:f7:3b:57:3d:71:2b:6b:26:8a:8d:ab:7d:56:e5:e2:
3a:93:78:39:c8:9d:e4:0a:25:a3:d7:60:53:1a:51:5f:15:ab:
21:92:1f:a0:3e:f9:91:47:cd:63:84:32:47:38:b5:88:fe:b2:
12:59:88:0f:8f:27:ba:4b:78:12:be:fc:cf:9d:17:bc:a5:17:
00:f9:e4:bc:45:4a:77:3c:51:5c:ca:0b:ea:81:f5:c4:96:a9:
25:94:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:32 2025 by rpki-client