Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier: xu8VPTazdMGd/Mh5eS1Q+cV3sEtWlqCEC0adJ9pg7HY=
Subject key identifier: DF:C4:55:AD:6E:71:9C:DE:14:8E:A1:F0:4A:6D:A1:34:3F:4B:EB:E6
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial: 0196760CBC788B521C30A169C51D96EB49F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: b4NzBFAykksy47vXNdsLzAkQN4eZE1Bb9kYaMsJY52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bc:78:8b:52:1c:30:a1:69:c5:1d:96:eb:49:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=dfc455ad6e719cde148ea1f04a6da1343f4bebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:36:1d:79:e1:59:f5:9c:e6:6d:f0:fb:f7:1a:
2f:a8:0b:81:cd:38:c6:03:8d:0a:c1:a9:3f:75:90:
b3:91:43:f8:de:62:7d:7c:89:68:62:fa:b4:cd:96:
c3:ab:f0:29:15:49:4a:e6:fb:18:a0:41:f0:05:1a:
69:b9:38:c2:93:6d:6e:ce:da:19:e3:42:b8:4d:18:
09:39:a5:eb:ad:0d:ef:fd:1f:48:68:98:be:1d:b1:
82:37:67:2d:a0:cc:b9:fc:5c:67:07:6b:74:79:f1:
6c:3e:a4:6e:48:38:d1:e5:49:57:12:75:88:f7:be:
06:e7:22:70:4c:64:c4:01:d2:f8:b7:6a:4c:91:53:
13:63:b7:93:f9:f5:22:66:a3:f1:87:da:42:b1:36:
d2:83:39:b7:16:64:be:46:ff:fa:75:b5:a8:12:12:
c0:f9:34:69:11:6e:fd:50:35:41:03:ba:2d:1f:28:
10:27:db:f7:39:f6:ae:bd:8a:a3:db:33:76:f3:82:
10:fa:da:0e:1a:90:8c:f4:03:c3:6c:d0:28:d4:36:
7b:ae:05:1e:27:d8:d0:8b:0f:3a:8a:5a:fd:b3:47:
e1:da:72:ec:75:8e:8e:30:bd:3e:fe:a6:75:f8:ce:
28:06:89:4f:24:be:99:70:6c:18:a9:20:e2:16:d7:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:55:AD:6E:71:9C:DE:14:8E:A1:F0:4A:6D:A1:34:3F:4B:EB:E6
X509v3 Authority Key Identifier:
keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:b0:75:ab:4f:01:34:9e:a2:19:f5:ae:a3:9a:a0:8b:2b:
89:6a:9e:9c:6e:4f:4e:87:64:73:b3:3f:5e:74:d8:a0:e5:ad:
fa:15:27:03:d6:72:43:b5:7b:6e:6e:b2:a9:36:18:a5:ab:f4:
54:11:c7:ba:1f:d6:26:69:c9:fb:19:c9:0b:41:86:f4:49:f8:
ea:d2:8c:0e:73:4f:72:71:1f:05:09:f7:3e:ee:34:84:45:e1:
85:02:d1:bf:f6:bd:0a:b1:e3:c1:c4:e5:18:9c:9b:a5:0e:f8:
74:93:df:c6:d0:f6:12:ac:d8:c7:99:a4:c5:ed:5f:91:8a:81:
06:68:ff:45:87:53:99:35:4f:d5:f3:d7:fc:0e:0c:1c:e5:a3:
08:b6:f3:e0:48:4a:f3:a7:84:b1:02:ac:96:81:d4:6e:e8:33:
da:c8:66:61:fc:a0:c1:f6:aa:03:2c:24:3a:cd:7e:b2:53:cc:
40:41:6e:b6:73:0d:8a:22:e6:a6:e7:16:4a:c1:f1:a3:17:1e:
d4:05:ca:3b:e7:2a:4b:2a:fd:fc:9b:46:88:ee:7a:8d:14:16:
3a:ec:8a:1d:d7:ca:21:69:c8:c5:6f:81:cc:6c:84:28:5c:18:
45:2c:37:f5:26:a8:c1:a3:90:0d:b5:a6:ff:a8:8e:2a:6f:08:
4a:a0:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:56 2025 by rpki-client