Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: AHRNpvOtfN+utPi4+9A5kj3CL5j445eKCZxlpxp3XzQ=
Subject key identifier: 9C:30:24:5B:65:E6:DA:D3:86:05:B6:AF:99:B5:71:4F:78:07:B8:5A
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 0196789F0F3ABD04CA0D95B9CB16120B5AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 03D7
Signing time: Sun 27 Apr 2025 19:00:12 +0000
Manifest this update: Sun 27 Apr 2025 19:00:12 +0000
Manifest next update: Mon 28 Apr 2025 19:00:12 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: 7z8l3tLB7DLEgozpydjj1pwGN6pccOC4unIlFgYMtF8=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:0f:3a:bd:04:ca:0d:95:b9:cb:16:12:0b:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Apr 27 19:00:12 2025 GMT
Not After : Apr 28 19:00:12 2025 GMT
Subject: CN=9c30245b65e6dad38605b6af99b5714f7807b85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:a5:06:ce:0b:23:11:42:15:26:b5:ff:d4:
7e:86:0f:3a:ba:ac:83:7f:3b:ff:ee:60:7e:14:ab:
98:88:10:2d:28:2e:1a:03:01:32:ab:ea:fc:eb:e0:
72:c2:09:49:b4:ca:3e:25:74:c6:9c:e6:33:a5:dc:
c2:fc:6a:34:2e:7c:4b:32:22:09:4b:94:6e:b1:65:
6a:2a:7c:ad:e3:91:d4:62:50:eb:13:6c:8f:72:24:
d6:13:92:8d:28:6e:9e:7d:84:b4:83:f3:3c:de:70:
ff:c6:78:97:b5:ee:e1:e1:74:90:4e:d6:67:3e:07:
13:79:05:41:e4:da:5b:5f:60:b4:55:fb:0a:38:17:
f4:74:9d:03:57:b9:29:15:1b:ca:84:74:57:ae:5f:
61:b1:0a:6b:f9:d9:ba:80:6d:67:b9:33:92:0f:fc:
1b:0c:76:3e:07:af:00:88:c2:88:7b:5b:da:52:ab:
12:30:5a:45:43:13:1d:4d:a9:4a:be:38:8d:e2:15:
33:0d:3d:02:b7:ff:b7:37:79:75:f2:b0:bc:93:52:
da:4b:8a:36:e5:92:b4:be:90:91:f9:b7:6a:d4:14:
85:d6:0a:f6:9b:91:36:b9:1b:30:4b:78:74:0f:76:
52:b2:94:2a:c5:90:97:94:03:ba:62:14:b3:71:16:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:24:5B:65:E6:DA:D3:86:05:B6:AF:99:B5:71:4F:78:07:B8:5A
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d8:1b:41:f9:97:17:0f:f8:a6:ff:a8:08:08:d6:e2:46:0b:
83:8f:1c:dd:b9:7e:27:4c:af:bd:68:19:6f:ce:fb:45:7f:04:
53:4a:c9:0e:89:00:31:bc:78:06:08:a2:9e:63:d4:82:21:aa:
e0:80:e7:cd:cd:78:12:b0:aa:f3:9d:c4:3c:c6:c4:6e:ad:a5:
37:5d:88:22:e3:50:78:d5:ad:62:58:d8:c2:00:0f:9a:80:0e:
8e:40:7e:33:1b:74:b7:3f:fd:0e:da:2d:74:40:21:5e:0a:04:
e0:85:6a:10:90:c5:6d:5e:a3:ba:f0:ab:5c:67:c4:56:1d:df:
63:2a:bb:3a:30:fe:2f:5a:b9:0a:68:b7:d5:93:bf:52:e6:20:
fd:0e:9e:68:01:06:30:7e:06:24:a1:fe:bb:71:0a:b6:20:7c:
fc:ce:71:ba:06:22:c9:81:e6:e2:84:73:f9:b9:f1:7b:1a:ac:
06:29:3d:ef:10:e4:08:d8:51:4b:d1:85:fa:ba:8d:7e:9d:50:
8e:5f:96:16:97:c1:98:48:ed:5c:74:d6:9c:02:1c:75:1a:58:
1d:e4:0c:db:f6:49:46:a8:c0:3f:66:52:3c:f5:32:aa:d2:98:
29:40:25:ab:33:b6:51:4a:39:e0:ca:0c:6f:a9:39:a0:d3:d2:
ce:b3:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:08:40 2025 by rpki-client