Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: +xPQPdHeOSDT4NQN+3cEEWqZOzOJzwGbh0mY71UBQNI=
Subject key identifier: 7F:DF:26:1F:CF:EF:2F:5D:DA:2F:84:26:07:6D:29:F0:78:83:91:D7
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 01967530BBEC8FF39540F3B209717E864883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 1445
Signing time: Sun 27 Apr 2025 03:00:50 +0000
Manifest this update: Sun 27 Apr 2025 03:00:50 +0000
Manifest next update: Mon 28 Apr 2025 03:00:50 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: XFC5X6tRvyy+R145BCQTadOUAxDetubPr2nc0CcmjLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:bb:ec:8f:f3:95:40:f3:b2:09:71:7e:86:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Apr 27 03:00:50 2025 GMT
Not After : Apr 28 03:00:50 2025 GMT
Subject: CN=7fdf261fcfef2f5dda2f8426076d29f0788391d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:0b:2c:93:a6:69:b7:ab:8b:2b:aa:84:b7:
3f:24:b5:70:52:7d:d8:8b:8c:b0:2f:e2:62:37:f1:
17:47:b9:9c:cb:ad:59:fe:ed:47:e6:cf:7c:f2:ae:
86:d0:2f:6c:7e:41:ef:60:ff:35:79:9d:b6:d7:90:
5a:02:ac:9d:83:39:aa:d8:03:2e:d3:bb:a9:0b:0c:
81:21:8b:39:93:52:7a:12:31:15:11:6b:37:37:27:
58:cb:9c:89:11:48:c9:47:be:c7:b5:88:2c:37:d9:
5e:6d:43:02:fb:f4:78:62:ad:44:b7:d3:e1:b4:cd:
bd:a7:80:14:c5:a7:68:c9:2c:89:2c:2d:f8:be:0b:
c3:a7:31:5e:47:00:66:54:64:fc:9f:1b:90:b6:35:
30:13:a5:8f:bf:8c:b5:c2:68:79:93:50:1b:e3:23:
88:4b:3a:dc:1a:88:f9:0e:79:01:b1:69:fe:20:94:
71:03:af:8b:cb:97:1b:c1:52:53:b7:d2:7c:1b:da:
d0:4d:49:e7:f2:91:7c:83:d8:54:7e:0b:05:66:1d:
59:b7:2e:c6:ff:e7:d0:52:95:1f:5a:9d:01:6e:17:
4b:2f:1f:60:f2:eb:3f:ac:e7:f7:af:97:b0:22:c7:
f7:ee:cb:fb:72:83:f4:c4:97:60:d1:88:ff:ca:d0:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:26:1F:CF:EF:2F:5D:DA:2F:84:26:07:6D:29:F0:78:83:91:D7
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:bc:f6:ba:26:cc:9e:38:eb:dc:42:06:b1:36:6a:03:18:49:
6f:50:2c:99:9c:40:79:f0:08:f5:88:a2:3b:f9:41:e9:dc:e5:
72:3c:49:37:5c:78:64:8a:c2:ac:a1:cd:fc:83:a2:b5:76:66:
e6:6b:14:ba:05:f4:26:e4:b9:00:76:87:a6:43:1f:52:f0:69:
ec:bd:1a:23:fe:dc:b0:80:d8:3b:2b:26:84:43:94:85:ae:75:
7d:03:44:81:e7:60:86:74:a2:36:b4:92:43:4d:22:85:cc:fd:
f3:2e:40:ae:21:e0:81:61:58:39:35:93:32:5c:bc:1a:0a:a6:
1a:1c:14:43:f9:ba:28:25:f5:d8:26:db:93:6c:2f:c3:fe:70:
8f:5b:23:ca:26:21:49:e0:53:e1:5a:71:b5:2d:26:d4:a9:33:
7f:94:92:ff:85:88:41:71:a2:e5:62:81:cf:cd:e5:af:6b:2c:
91:30:f5:c1:b2:e0:f9:60:5c:7f:6e:70:ea:ff:6a:0b:0d:8e:
40:cf:5c:cf:e7:26:7a:bd:80:28:42:bf:28:1a:0b:e1:7d:83:
bc:b3:e9:08:4f:27:3f:08:42:0f:31:d6:20:5b:9c:f0:56:1e:
7b:71:43:f1:f9:9e:00:e5:e8:e0:a6:9c:b4:5a:9f:ce:2c:64:
a7:14:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:18:28 2025 by rpki-client