Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File: BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier: csJt5P550vzrW+ib5PmHe/K67nedcVgmU9xf1mabRM4=
Subject key identifier: 15:66:F9:CD:D9:FC:7B:3E:6A:EE:D4:04:1D:2D:9D:A9:78:43:C0:70
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 01967EA1D7891B0EBA0F6A1C8F39B090B54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number: 10A6
Signing time: Mon 28 Apr 2025 23:00:57 +0000
Manifest this update: Mon 28 Apr 2025 23:00:57 +0000
Manifest next update: Tue 29 Apr 2025 23:00:57 +0000
Files and hashes: 1: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
2: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
3: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: tlR4XLJkV2421Tfs9VMfkrqDvz+ICjzBDzrbTQNveAI=)
4: DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa (hash: uCJntwDZ+cDZxpzZO6MqyTDIkNdtXNsEPYp7HWqPHR0=)
5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
7: vrZXQ7c7SJqTI-Qy746C6GRBzTE.roa (hash: 9B+Vq1Jvk9CfpjDUR+g8aVrltZw5klYMebxf6UUVTtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:d7:89:1b:0e:ba:0f:6a:1c:8f:39:b0:90:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Apr 28 23:00:57 2025 GMT
Not After : Apr 29 23:00:57 2025 GMT
Subject: CN=1566f9cdd9fc7b3e6aeed4041d2d9da97843c070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:be:2a:47:32:a2:4b:91:47:c2:46:44:b4:
12:7e:c8:a7:b3:a3:1e:81:58:79:68:c7:0a:cd:82:
8a:79:80:5e:9b:3f:3b:1e:86:e7:e8:4d:b1:61:13:
bb:4b:8f:e9:bd:22:a2:4e:d0:78:59:03:68:8b:7e:
92:b3:cc:6e:85:6e:fa:74:fb:59:60:73:3c:9d:64:
94:f7:8a:11:e8:2b:a2:6d:4c:e0:2a:c6:78:33:51:
f9:58:e5:f1:d3:33:f0:2d:4c:61:af:df:99:ef:34:
cc:62:6a:a3:80:71:96:41:9f:f8:1b:f3:29:6e:57:
ee:0c:c6:fc:c5:a0:af:d7:33:53:49:d9:9f:19:c0:
89:1a:1e:6e:d3:cf:50:16:db:03:b8:9e:33:d7:5b:
9c:f7:b6:4b:a5:2a:98:31:2b:62:b0:ad:41:05:06:
b7:7d:b5:5c:ba:df:aa:89:9d:4f:70:5f:6d:62:72:
a3:d0:23:64:17:19:a9:36:39:d7:6c:6c:3e:1e:43:
de:45:c1:d8:75:de:5c:fd:30:79:95:62:31:56:15:
70:6c:08:06:9e:79:ef:f8:60:d0:7e:68:f5:d7:d2:
bc:5d:84:2f:67:53:cf:e9:e3:a3:6e:ea:11:47:ce:
9e:59:25:6a:cd:3f:6e:77:ae:a3:83:c0:f3:5f:ed:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:66:F9:CD:D9:FC:7B:3E:6A:EE:D4:04:1D:2D:9D:A9:78:43:C0:70
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:cb:4b:0c:8b:06:32:f6:0e:aa:7d:f4:a5:3d:95:e3:b2:
bb:77:0f:0a:55:cb:dd:68:cb:27:36:58:48:c1:c5:62:7a:0e:
d9:d5:a1:b1:99:fb:15:5f:70:e8:0d:5b:75:78:6c:7a:50:0f:
fa:14:23:14:04:67:4e:44:c4:cb:96:ce:7d:2d:6a:00:cc:dc:
12:1c:70:f7:55:2a:11:8b:9d:01:d9:ec:f4:27:31:ef:29:05:
49:9e:73:c8:88:df:15:65:03:fd:6c:e5:22:62:09:90:2b:ee:
f7:02:eb:56:cc:8c:b7:fd:4c:63:1d:f3:8d:f5:5c:54:2b:80:
e1:1f:25:7b:66:d7:89:6c:21:9b:4b:e9:5f:6c:24:6d:7d:3d:
bb:09:f5:9f:75:2c:b2:a5:0f:0e:d3:65:cb:87:11:08:59:b0:
2f:e3:fe:2c:ed:82:36:7f:d9:22:c4:2b:ce:1d:68:fa:8b:63:
04:4b:b4:02:1b:fe:02:de:fb:28:21:46:a6:d3:40:8d:20:da:
5a:17:a0:e2:d1:d7:e3:0d:6a:fb:fb:5a:69:75:9c:af:d3:b4:
42:3c:e0:70:ab:29:3c:9d:c7:7a:85:97:31:c5:e2:61:8e:65:
ce:55:9a:5e:41:a9:a9:39:22:11:38:72:b9:4a:38:b5:72:9a:
2d:71:b3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:46:03 2025 by rpki-client