Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: dpv2MmE4iSfbFsE2C2xr3D7hYT1gxnp9arH/tzKukaI=
Subject key identifier: 32:40:8C:68:F9:8C:B2:C1:59:85:16:79:C9:FC:98:5B:C6:9A:17:DC
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 01967AC4F5B506756E830546EC8836144DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 0538
Signing time: Mon 28 Apr 2025 05:00:50 +0000
Manifest this update: Mon 28 Apr 2025 05:00:50 +0000
Manifest next update: Tue 29 Apr 2025 05:00:50 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: F1/J5g6jLQanvM28uzNAzQydyLKj3cF66PfBDcGlupA=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:f5:b5:06:75:6e:83:05:46:ec:88:36:14:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Apr 28 05:00:50 2025 GMT
Not After : Apr 29 05:00:50 2025 GMT
Subject: CN=32408c68f98cb2c159851679c9fc985bc69a17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:59:ee:d2:68:b8:b3:ec:14:72:cc:5d:1c:c1:
2e:0b:dd:f0:9a:26:ea:bb:9b:5a:41:59:db:cf:58:
9c:1f:c7:05:85:16:a2:12:98:43:24:c2:fd:3d:b5:
1e:e6:99:62:53:6c:b2:55:c5:b9:43:ac:f9:62:59:
f2:1f:8d:3b:7c:7f:5f:fd:ff:21:30:b8:9d:e8:6b:
60:6b:33:d8:5e:46:79:5e:88:5f:88:8f:cb:a7:55:
74:96:cc:8e:7e:b2:a2:c2:37:2d:b6:f7:ae:c4:04:
11:16:43:fb:b9:d5:a3:d4:9a:a1:aa:46:59:50:25:
98:ae:ee:9b:ee:40:62:a2:b1:8d:35:32:99:0b:0f:
3d:1e:b0:e2:63:0e:da:43:51:47:be:5f:2f:c2:4f:
63:06:c7:d3:dd:52:7b:d1:92:c8:82:c9:9f:f7:51:
e9:3c:4e:e4:06:cd:f0:4c:8a:9d:a0:2e:76:94:53:
3f:f1:a2:a2:87:6d:eb:3c:2e:9d:41:4f:de:d4:f0:
f9:66:0f:f4:29:33:b7:bb:41:14:19:55:0a:ab:de:
ab:10:fd:5e:e7:30:c3:cc:6a:4f:45:c9:26:79:ba:
84:31:9d:33:ae:5c:0c:b4:1c:0e:5c:61:70:71:9d:
ae:db:b9:c5:dc:c2:df:69:eb:a7:13:2d:d2:ed:8d:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:8C:68:F9:8C:B2:C1:59:85:16:79:C9:FC:98:5B:C6:9A:17:DC
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:34:f3:95:e9:3e:78:a9:18:ec:9d:a2:33:4a:2c:89:9a:
e7:ce:6b:f9:e8:97:cf:d6:83:30:82:21:f4:d8:b0:48:df:44:
81:1f:49:c8:15:cb:0f:de:59:c0:5e:58:e9:16:bc:6b:f7:99:
0d:14:b7:5d:6e:8a:55:6a:31:00:46:48:d2:cd:a5:e8:77:a7:
3e:56:28:6b:33:b1:a1:87:e6:25:dd:89:3a:41:c9:54:bd:1c:
e9:c9:c3:a5:0c:41:22:20:5e:7e:5d:b5:be:49:d0:a6:db:0b:
a8:e0:5a:09:2e:7d:34:3f:62:ca:25:56:75:5e:f8:06:fa:e6:
a9:a6:38:6b:65:4d:9c:12:70:0e:8a:74:19:0a:e0:1a:d0:ee:
97:c0:df:63:e6:d8:d8:bb:59:d5:fd:95:ca:49:b8:f4:13:24:
da:10:90:15:a6:8a:0a:80:f4:ae:d9:6b:ba:fb:7a:f2:a0:cc:
7f:89:fd:4f:7e:a7:ff:13:7b:be:67:c1:25:04:17:d4:81:be:
dc:21:07:aa:de:b1:9b:42:29:02:4f:77:77:dc:67:69:c8:ce:
29:b9:9b:f9:a6:7a:a3:e9:95:08:17:85:68:7f:f0:cf:aa:ed:
63:9c:f0:b5:4f:a6:40:7e:ae:48:86:72:99:1e:31:6e:0e:b6:
dc:1a:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:43:07 2025 by rpki-client