Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File: BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier: 9B72f28b4NjjQHo8Qg5Fdqb1SwilPR5En8I+6k9o638=
Subject key identifier: 6A:BB:73:AA:6D:A3:FF:81:83:17:C3:93:B7:94:7F:E9:28:99:5B:D2
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer: /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial: 0196778CD2DA77F5237EA14FF1A2E0435FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number: 044B
Signing time: Sun 27 Apr 2025 14:00:39 +0000
Manifest this update: Sun 27 Apr 2025 14:00:39 +0000
Manifest next update: Mon 28 Apr 2025 14:00:39 +0000
Files and hashes: 1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: 95mRKUcgHGJp/+9FPb3ypNS8WiCw/0JXiyecydUDV2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:d2:da:77:f5:23:7e:a1:4f:f1:a2:e0:43:5f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Validity
Not Before: Apr 27 14:00:39 2025 GMT
Not After : Apr 28 14:00:39 2025 GMT
Subject: CN=6abb73aa6da3ff818317c393b7947fe928995bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:4c:52:ca:66:3b:83:05:22:4a:8e:51:28:
23:1e:4b:e1:3b:0b:6d:e2:3e:56:c9:f8:41:0c:72:
2d:91:06:13:fb:fa:f3:cd:01:d0:a7:eb:57:e8:68:
de:c1:ed:7d:93:9a:c7:55:89:9f:f9:a8:42:76:48:
98:7e:36:45:fa:91:50:cf:a3:5c:c8:c8:37:ae:96:
cd:3b:01:de:54:75:5a:59:ff:b7:9f:97:4f:30:65:
54:4a:1b:36:9e:9b:b9:88:7c:0f:94:99:68:d4:55:
ef:66:69:04:44:2f:a4:70:b4:fb:91:48:78:ab:ef:
cf:cc:4d:1c:be:3c:eb:79:41:1c:5d:3b:d4:42:78:
b4:dc:58:bb:de:2e:96:51:93:3a:1f:de:f0:8a:67:
12:8e:ba:5c:3e:4e:1f:30:42:60:1a:74:62:ce:ee:
ca:d4:de:90:b2:9d:b2:a5:c0:70:58:1c:bc:70:f0:
f9:bc:5b:8e:df:de:3e:05:d0:af:81:e4:59:71:38:
19:44:b5:90:a1:05:22:b2:b6:d2:6d:cc:80:f2:f9:
af:41:69:80:de:b4:14:e6:11:a5:86:96:11:a5:80:
b9:ef:05:e5:58:07:ed:ce:86:8e:0e:39:1e:cf:6d:
da:5b:53:57:b8:56:e7:9d:33:fb:05:47:60:6f:ed:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BB:73:AA:6D:A3:FF:81:83:17:C3:93:B7:94:7F:E9:28:99:5B:D2
X509v3 Authority Key Identifier:
keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a0:45:a0:75:07:37:4a:dc:e6:d0:e3:db:d1:11:f1:54:b4:
fa:33:e2:0d:e1:79:2f:d4:ef:91:20:c2:da:d0:e5:3b:89:f8:
9d:91:7c:f4:ef:74:0c:6b:d4:2a:5f:73:66:70:16:87:c7:b3:
84:ca:4e:0c:ee:b9:dc:22:ae:16:d6:12:e4:c4:c4:c4:65:12:
df:89:bc:93:da:6e:d1:dc:df:fd:31:68:1a:2c:5c:11:b8:00:
67:e7:20:30:56:4b:95:1b:8f:4f:ca:ec:2a:ad:65:b6:47:2d:
b4:6a:30:da:ec:79:88:d0:34:23:34:4c:81:24:d1:6e:ba:b9:
17:96:66:4e:d6:39:6d:ad:bc:14:49:2c:50:92:40:07:b8:d9:
d6:3d:c3:6b:81:2b:6e:88:19:0a:74:cf:60:8d:37:5d:27:cc:
e0:b8:bf:24:8d:32:78:9b:df:eb:32:46:45:b2:3b:98:0f:c4:
a0:ca:b2:ef:ba:2a:d3:6c:c7:1d:17:20:d5:b6:c0:2d:43:04:
33:9f:9a:e8:d4:f2:8d:b0:9f:4f:1d:aa:36:cd:3b:8a:d8:8f:
db:57:37:af:61:7a:c4:d1:74:de:62:e8:10:42:83:a7:ad:fd:
92:0e:d7:78:20:04:9f:12:98:34:03:4b:14:bf:44:b6:8e:3d:
dd:48:75:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:59 2025 by rpki-client