Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: LUQSSthmfmT0hkryEvew0rA4djoqmkf7ykOtfbo3C1M=
Subject key identifier: 1E:E3:4A:B8:F4:4A:77:A8:F6:B4:D4:CA:A1:17:84:98:1C:3C:89:28
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01960F0D837B26ADEE5B55430DE2E3989821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 07:01:05 +0000
Manifest this update: Mon 07 Apr 2025 07:01:05 +0000
Manifest next update: Tue 08 Apr 2025 07:01:05 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: 8+Z5oNPsuEeCTbkGW1PcB/NI1zn3++zzzPYuHcAJzJA=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:83:7b:26:ad:ee:5b:55:43:0d:e2:e3:98:98:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Apr 7 07:01:05 2025 GMT
Not After : Apr 8 07:01:05 2025 GMT
Subject: CN=1ee34ab8f44a77a8f6b4d4caa11784981c3c8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:46:1c:ea:bf:55:fe:60:d7:75:29:51:0c:
9d:90:66:f6:ca:63:cf:58:d3:20:b1:30:ad:98:fd:
0a:16:29:50:f3:00:2f:aa:dc:52:f8:57:1a:3c:79:
a9:bb:2e:ff:71:9a:8a:0e:85:a0:d6:bb:49:ef:65:
7e:41:b0:f2:12:ea:a0:aa:82:fd:d2:65:04:b9:d7:
f7:d9:39:5e:fb:6c:a7:69:36:28:81:4c:a8:9f:28:
7b:01:10:f3:fe:33:c0:b1:64:ee:3a:7a:61:d8:c4:
4c:e1:45:8c:bb:44:ab:47:ee:d3:25:dd:6d:ef:5c:
11:ad:55:0b:f4:7d:b5:df:b6:bf:13:b3:61:89:24:
7e:1a:77:e4:56:ea:a9:c7:3d:ea:c6:18:d4:b6:92:
66:b1:f9:fc:f1:5d:3a:d0:ee:7b:8f:ad:6c:15:f9:
51:ed:69:4b:f7:fc:b9:a5:44:08:f4:5a:98:f2:c0:
10:6d:d4:4b:41:bc:0e:2f:08:8f:0c:ce:62:30:7e:
d6:ac:b0:d8:de:a8:c2:78:65:a6:4c:4c:29:34:a0:
8a:75:76:1a:1f:f8:4b:02:b9:f7:e8:eb:59:24:b8:
20:01:26:fc:b6:fc:6e:df:38:ec:5a:ac:84:fe:f2:
a2:b2:5c:a1:f5:76:d3:23:27:4a:23:dc:5a:79:39:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:4A:B8:F4:4A:77:A8:F6:B4:D4:CA:A1:17:84:98:1C:3C:89:28
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b3:87:e9:c3:42:3d:46:0e:16:34:da:00:cb:dd:be:6f:00:
3c:60:a9:c5:f4:a9:ab:6f:c5:8c:ca:42:84:c2:ec:95:d7:9d:
ee:be:97:d8:87:85:44:4c:a9:75:1a:73:a5:ad:61:38:00:01:
65:a7:5d:9d:ac:99:9e:ca:8d:56:9f:5c:0f:7d:e5:d1:6b:33:
ba:db:24:c8:e4:98:17:54:f9:71:d8:5a:58:28:2c:a9:68:86:
cb:18:f8:5d:9b:e0:cb:13:41:55:62:1a:9f:20:b0:6a:99:d0:
18:d0:22:97:43:92:a7:28:70:43:3f:85:1d:e3:9f:5a:94:9d:
b3:8a:ba:79:48:44:47:a6:03:3d:e1:42:5a:10:2c:18:6f:09:
26:f7:83:d7:f4:37:12:1b:b5:ed:a0:c3:0e:34:3c:0d:48:02:
72:db:bd:76:fc:b9:20:77:15:21:35:e2:37:02:ca:c4:a6:1a:
1a:42:e2:cd:3c:55:86:e4:c1:05:40:e0:04:62:4a:47:d9:b4:
2b:98:e6:58:40:03:ce:1f:47:2e:26:ea:0c:68:55:aa:cb:8f:
d1:d1:c1:5e:34:7e:78:64:a9:8c:b3:4c:3a:62:ac:64:d6:13:
f7:df:03:1b:16:d1:1c:e7:36:c6:4f:ed:eb:54:45:52:6a:15:
c4:c4:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:14 2025 by rpki-client