Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier: m/9VgzZmisDE/dxin/l6A8OD2OnyWesDqxjVFZDFAv8=
Subject key identifier: 46:B1:2E:DE:AB:F2:F1:BA:86:4D:3D:05:66:1F:3B:8A:C9:F8:A2:7D
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial: 019691F15EC5035195AED3D04C89DC3DFC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number: 1356
Signing time: Fri 02 May 2025 17:00:36 +0000
Manifest this update: Fri 02 May 2025 17:00:36 +0000
Manifest next update: Sat 03 May 2025 17:00:36 +0000
Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: XGoC/QDkbsN7X1N2GY8SYoFRkw8pkxOG44xVALFtau4=)
2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:5e:c5:03:51:95:ae:d3:d0:4c:89:dc:3d:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Validity
Not Before: May 2 17:00:36 2025 GMT
Not After : May 3 17:00:36 2025 GMT
Subject: CN=46b12edeabf2f1ba864d3d05661f3b8ac9f8a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:85:86:c6:ad:09:80:00:dd:2a:52:60:3e:
d9:31:4d:2a:89:2e:16:1e:37:58:c0:a1:57:72:be:
f7:61:bd:47:7c:2e:3e:fb:45:34:11:e6:40:9f:75:
31:52:5a:21:ad:53:97:c4:a9:13:0e:96:53:c1:b4:
10:78:73:a6:34:89:a1:30:13:61:7b:6c:a1:18:f3:
a4:38:c0:cd:6d:96:49:c3:02:88:47:8a:a1:52:aa:
3e:28:3e:1c:6e:b2:9f:e0:70:bc:8a:6e:5e:7f:fa:
d3:b5:17:2c:18:ff:f3:72:3b:ba:e7:6c:f4:cd:dd:
49:8a:be:8a:3c:08:87:f9:3f:0d:eb:ad:73:ca:e7:
e7:20:4e:a4:f1:65:c8:d4:2b:f4:b2:8d:39:ce:6a:
3c:3f:14:be:8d:a1:fd:8e:4e:ab:32:a4:ba:f8:2d:
bf:d5:c8:a3:95:65:37:49:05:b6:8b:6e:86:f0:bf:
34:46:e2:b4:bb:75:ec:56:fa:18:0c:3a:e2:82:c1:
f0:8d:33:54:41:4e:28:46:ce:cf:a1:0f:ba:ad:f0:
f7:e4:2e:4c:c4:c2:b6:18:55:43:68:bb:fc:ef:c7:
62:6f:07:67:7f:14:f3:13:e0:0c:74:56:e1:f9:ea:
7c:34:b2:9d:67:95:9e:b9:5d:4d:5a:b2:dd:03:ca:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:2E:DE:AB:F2:F1:BA:86:4D:3D:05:66:1F:3B:8A:C9:F8:A2:7D
X509v3 Authority Key Identifier:
keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:b3:b5:11:ed:bd:9b:c2:5f:1e:48:95:66:d6:80:29:fa:
14:76:c2:4b:b5:c7:b0:fb:73:dd:95:89:0d:23:9a:3f:60:a8:
06:34:38:25:39:c4:1e:30:0d:74:05:68:92:e7:f6:5e:ce:db:
93:a4:ed:02:e1:33:c0:b6:34:c7:a6:65:a5:a7:77:c3:c0:62:
33:e6:5e:fd:c8:e7:cc:18:f1:86:37:15:8c:aa:a8:86:ff:23:
13:24:96:cb:e0:af:60:7a:20:50:68:b7:81:33:0f:ac:d4:c4:
38:09:87:05:41:dd:38:3c:f0:a1:19:5d:b4:e4:a5:93:e3:64:
2d:db:50:02:2a:c4:e4:13:73:31:10:14:5e:e0:87:fc:ea:3a:
b6:69:ff:49:f9:65:ea:d2:7a:d9:99:16:df:92:a0:1f:72:88:
5d:85:6e:5e:1b:b6:d1:ec:55:55:62:15:7b:b6:31:6f:45:e5:
f5:2e:44:44:ca:8b:5e:78:37:be:27:eb:e9:ec:05:01:2f:c1:
ff:a7:4e:4b:8b:c1:d6:d4:c2:5b:a5:68:66:f3:c5:b0:1f:1b:
29:7d:52:79:1c:f6:cc:5c:8d:5f:ea:59:eb:74:1b:bc:81:47:
30:93:26:4e:09:75:48:b4:57:69:68:e4:a2:01:f6:28:9d:cd:
73:6e:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:53:02 2025 by rpki-client