Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: EB+ya9Vzp2Tgo4a7w8mKwUuNJxd3uKJwA2M9L9lu1H0=
Subject key identifier: 9B:47:73:FF:11:46:B2:AC:0A:B4:8E:1F:C9:7E:DE:41:3D:02:BA:AD
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01967868950D19F255D73577F772DFF742F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 18:00:41 +0000
Manifest this update: Sun 27 Apr 2025 18:00:41 +0000
Manifest next update: Mon 28 Apr 2025 18:00:41 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: KaoTyyheRW+UlBPxmW+G4TiKk1lzEUQd2qBvn5E7G8Q=)
2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:95:0d:19:f2:55:d7:35:77:f7:72:df:f7:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Apr 27 18:00:41 2025 GMT
Not After : Apr 28 18:00:41 2025 GMT
Subject: CN=9b4773ff1146b2ac0ab48e1fc97ede413d02baad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:40:c1:0e:87:47:1a:c4:bc:3a:e1:9e:a8:81:
d6:b2:bd:93:d0:8f:95:87:d0:73:38:f1:da:ca:5f:
7e:5a:ad:1a:da:23:fc:69:eb:66:0a:ab:24:65:43:
e8:2f:5d:b1:e3:f5:dc:88:28:a2:91:1f:44:10:0c:
0d:56:f7:4f:32:2e:de:57:e1:7b:c1:a9:18:c0:c4:
e1:d7:4a:16:4b:f6:dd:29:7c:fd:75:96:3d:1a:b2:
c7:23:77:15:58:a1:98:08:52:14:80:8d:bb:fa:a5:
d5:ec:16:03:31:40:b3:a3:d0:6c:3b:e5:b7:e1:cb:
ff:08:63:8b:45:cf:d6:29:7e:69:df:24:9c:9c:15:
54:12:ed:b7:3f:d9:95:ef:12:01:0f:c9:72:60:4e:
94:61:33:46:3f:c6:db:10:f6:95:4b:47:54:17:2a:
61:ef:6d:d4:9d:0b:25:cd:3b:4e:25:82:93:15:f8:
c5:cb:ed:e8:14:04:79:17:20:0b:a2:9a:a8:ca:1d:
41:35:21:96:46:c2:18:e2:90:d2:99:42:fa:62:cb:
5e:cb:09:03:ff:80:01:2f:a0:67:fd:7d:5f:ba:98:
b7:92:5a:6d:bf:6e:50:9f:7e:fb:9f:bf:62:a5:6b:
15:f8:10:91:75:a2:af:61:8d:33:ce:b3:35:d2:89:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:73:FF:11:46:B2:AC:0A:B4:8E:1F:C9:7E:DE:41:3D:02:BA:AD
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:ca:b8:69:b3:1b:23:ca:ce:63:30:13:c2:08:ca:bb:53:
e3:27:43:30:55:ec:a5:b4:d1:b0:82:f8:d2:a0:20:93:99:41:
55:16:d8:a8:ee:20:6f:b0:cd:f6:7a:a6:bd:e6:45:ce:eb:87:
3d:47:7b:0d:8a:59:a4:d6:9e:d3:82:a2:b0:34:8b:d8:63:77:
bb:fe:e4:5e:6d:69:cc:5c:c2:f8:0e:2b:ed:cc:f7:9f:95:cc:
ff:8a:fa:74:95:3e:e1:d0:30:c0:75:00:55:60:b0:a7:f1:01:
d4:a6:aa:33:f3:3a:ed:15:38:04:90:8a:f9:ad:88:52:b4:23:
fa:e0:be:5b:c2:02:c5:c2:07:b1:92:48:d6:08:9f:52:ef:93:
45:7f:6b:26:9e:70:86:6c:93:4c:47:64:68:1e:7c:33:0f:c4:
4b:c0:da:84:8d:05:43:8c:f2:66:69:02:61:0c:12:4a:f5:8e:
12:30:03:cc:5a:83:b9:66:5a:0a:b6:0f:76:27:cc:1e:a4:91:
1b:46:ba:83:f6:a6:2d:d8:6c:cb:66:0f:32:9d:c3:d8:15:b1:
38:88:ea:d1:65:5d:f3:81:15:a2:d4:51:63:e1:41:76:41:e2:
75:05:4f:24:8e:ad:f6:c4:d6:44:75:d6:b7:8a:50:c0:9c:f3:
38:47:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:36:35 2025 by rpki-client