Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: /GWgQX6HtHGK0Gp594IX5d44xtGN0LXYYZj7h6UQ3pQ=
Subject key identifier: C8:06:0D:B5:E0:50:FD:23:40:A6:5D:62:CD:3A:D1:BE:E1:58:57:AE
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019679E997D30111AC1801629733F57B5FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0B19
Signing time: Mon 28 Apr 2025 01:01:13 +0000
Manifest this update: Mon 28 Apr 2025 01:01:13 +0000
Manifest next update: Tue 29 Apr 2025 01:01:13 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: 2ZTOY6/fPvaVr0nAcJ3XjrXLkn7suzUYB0sQjyvB7BU=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:97:d3:01:11:ac:18:01:62:97:33:f5:7b:5f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Apr 28 01:01:13 2025 GMT
Not After : Apr 29 01:01:13 2025 GMT
Subject: CN=c8060db5e050fd2340a65d62cd3ad1bee15857ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:24:5c:ca:a0:28:a1:19:47:2e:e2:df:cc:
19:c7:3a:8b:ac:28:8e:0a:8c:96:c2:78:6a:57:a3:
60:8c:74:af:ca:d6:b5:8f:b3:a9:dc:21:c8:56:3f:
06:cd:af:82:38:d2:38:a3:3e:8a:11:fe:88:ef:4d:
89:e8:cf:73:84:b6:1e:49:00:fe:57:5b:00:9f:be:
76:fa:65:65:1e:86:ad:58:ac:f9:21:90:d2:04:95:
ff:fc:e0:19:9b:97:f7:c2:d6:66:bd:40:19:df:f9:
f3:58:74:1e:37:47:95:7e:c3:cf:8c:71:1d:91:e6:
28:02:41:96:6b:eb:5b:e1:81:14:d8:d8:9e:56:e4:
63:7c:52:aa:e4:1c:45:9b:ea:3d:6e:e0:76:8f:c7:
d4:b6:99:2c:e2:8b:e0:af:80:66:91:e1:ad:65:57:
82:aa:c4:f2:08:5c:2d:f8:3e:c1:05:d9:cc:39:dd:
58:05:af:d0:30:4d:2b:cf:87:73:1d:ab:08:02:5f:
4f:c8:3b:2f:2c:c9:de:95:5a:c3:49:1d:85:91:71:
52:df:e6:78:8f:8a:1b:b6:73:13:7f:8f:18:36:f5:
af:21:fb:90:65:44:56:e3:83:ae:02:88:b1:c0:0c:
24:89:bc:b3:0d:4c:7e:b6:c7:1f:0c:8d:81:a7:6d:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:0D:B5:E0:50:FD:23:40:A6:5D:62:CD:3A:D1:BE:E1:58:57:AE
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:74:b6:ee:f2:26:9d:63:c7:99:1a:37:3c:63:a8:d5:d6:
ac:95:59:75:48:4c:1d:37:b1:b5:02:81:0f:8c:b4:d6:e8:6b:
23:ed:54:5b:27:ec:b8:84:6d:30:5a:73:cf:b3:09:99:df:8f:
aa:18:b6:6a:b0:66:6f:24:97:43:dc:89:96:18:8f:0c:db:4d:
c0:c9:14:ae:c3:da:03:58:b6:c2:d8:17:30:e4:11:f2:b2:eb:
cd:20:59:f6:d5:c2:a9:cf:eb:18:c2:8a:f5:9c:5f:2c:c9:ee:
55:0f:35:ea:c6:54:14:6d:e7:96:15:4a:e8:a5:93:91:61:17:
61:c6:ae:9b:4f:53:70:bb:7d:e6:a2:6a:04:37:13:3f:35:ef:
49:74:84:98:5c:26:1f:95:a7:e5:09:65:6d:d8:6b:09:ec:cc:
6c:79:56:dd:cd:94:09:7c:8d:e0:81:55:f2:fd:a7:2d:ff:c0:
d3:7d:ee:e2:00:7a:ba:ac:68:6f:1b:d2:be:69:f0:50:fd:ee:
37:99:5d:9e:94:d4:4a:5b:d6:ce:e8:a2:c6:2a:ce:6d:03:5a:
ae:a6:f7:f4:50:01:75:27:80:51:e9:43:91:7c:c7:a1:0c:5c:
88:97:86:2b:8f:ca:0f:fd:f1:73:08:bb:e4:33:4f:74:ad:85:
df:a3:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:45:17 2025 by rpki-client