Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: RoR6ULHQ3gz7OWRTghjODrbC+ohg16mMbL7Y4jPjjqk=
Subject key identifier: C6:F6:EB:29:A4:2D:0F:43:1B:63:49:DF:8E:59:C8:C4:3F:92:33:92
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 01967CE9F5176F3BCFE0D7728E29CB48B953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 066D
Signing time: Mon 28 Apr 2025 15:00:29 +0000
Manifest this update: Mon 28 Apr 2025 15:00:29 +0000
Manifest next update: Tue 29 Apr 2025 15:00:29 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: nNtWyUcH8zzbbL9u/S10XvsTzNJS48AFP/DXeDUHBtM=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:f5:17:6f:3b:cf:e0:d7:72:8e:29:cb:48:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Apr 28 15:00:29 2025 GMT
Not After : Apr 29 15:00:29 2025 GMT
Subject: CN=c6f6eb29a42d0f431b6349df8e59c8c43f923392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:f7:ef:e5:0e:bf:45:75:44:59:79:2f:be:
a7:cd:b7:e1:58:09:0c:67:31:da:b2:98:69:ad:4b:
86:23:79:3b:dc:b0:17:17:0a:36:03:fd:70:ea:e9:
01:f0:63:a4:41:14:28:85:d3:bd:a8:b3:c1:36:e1:
66:d9:8a:7b:d1:eb:0d:e5:53:67:f2:1e:5b:42:60:
42:0d:f4:b2:d3:ab:30:cf:c4:c5:20:84:8f:58:5e:
3a:d1:e2:31:8d:68:61:54:0b:9e:b8:fe:3b:3d:74:
4a:cd:1f:93:44:3f:ad:82:f9:1c:bb:bc:1a:2b:1e:
fd:aa:80:0e:1a:ab:e8:1c:79:37:f0:be:fc:2c:b3:
bc:f4:02:bf:2b:96:60:b8:31:01:54:06:4c:90:b5:
d3:d9:54:05:36:9d:49:58:27:5d:d1:76:23:dc:45:
ce:1b:6c:58:20:42:02:89:f4:3b:b9:49:5b:9a:52:
a2:a3:c0:cb:d5:ae:4b:16:18:2a:da:16:ac:01:44:
51:8a:bf:4b:4e:a1:82:7f:db:39:f6:b8:f3:b9:85:
23:94:33:57:67:08:0f:9a:94:23:b0:10:40:d4:d4:
94:da:1c:be:f3:3e:66:95:cb:72:98:e2:f9:18:f1:
6c:a5:7a:11:5c:16:96:65:5e:61:ec:5d:04:d8:8d:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:EB:29:A4:2D:0F:43:1B:63:49:DF:8E:59:C8:C4:3F:92:33:92
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ef:f7:63:93:86:df:12:08:2d:0d:3c:c2:23:4c:27:87:b0:
e5:64:6c:38:1c:a7:24:df:5b:74:d2:09:f6:dc:90:ca:d0:06:
66:c5:e8:53:ef:a2:b1:06:55:1b:3f:ec:0a:90:48:11:6c:c3:
25:f4:1d:aa:05:6b:f8:c9:c6:4d:ba:cd:82:02:cd:72:2b:45:
d2:ae:e1:62:19:62:50:e8:27:11:16:ca:02:0d:21:43:0b:1b:
1a:4c:e3:8f:01:2a:84:31:69:1a:fe:f5:a6:e3:59:87:a7:bb:
bb:66:48:8e:2d:07:bd:97:e5:56:53:4f:bc:3c:94:5b:97:59:
32:b6:be:bc:1c:67:60:45:e7:39:4b:9d:28:85:84:31:f7:79:
8e:f7:d6:a7:67:80:2d:4d:3a:8e:3d:69:03:6b:86:b5:cf:ec:
b5:47:fc:e3:21:9c:18:cd:d6:36:ff:91:29:b5:6f:26:1e:b8:
8c:90:5c:3f:a7:fb:fb:cc:12:59:5b:6d:02:90:48:7a:2d:47:
04:0b:d3:fb:57:f6:b7:b7:95:c4:c4:91:c2:e9:de:1a:be:f4:
5b:bf:64:ba:9a:01:ac:8d:67:df:64:8a:7d:08:89:41:03:f1:
de:52:14:62:b6:c4:71:55:6c:e7:54:95:9a:62:16:75:8f:2a:
78:cd:d9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:00:59 2025 by rpki-client