Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: nxQkqfPp8s0lg/8LZzgDL/C2fCJ22FyBbJbxdJGi958=
Subject key identifier: 6F:83:B4:27:29:36:7A:82:3A:E7:B6:C2:D4:EB:07:9E:94:57:39:2C
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 0196865ABA0B7FC24EF1822BCC2A451E57EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 11F6
Signing time: Wed 30 Apr 2025 11:00:14 +0000
Manifest this update: Wed 30 Apr 2025 11:00:14 +0000
Manifest next update: Thu 01 May 2025 11:00:14 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: YAV0vhaxieALz4rpHCgs49jaTMGwzkyxNYM8TLlN5a8=)
2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:ba:0b:7f:c2:4e:f1:82:2b:cc:2a:45:1e:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Apr 30 11:00:14 2025 GMT
Not After : May 1 11:00:14 2025 GMT
Subject: CN=6f83b42729367a823ae7b6c2d4eb079e9457392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:f7:fa:87:11:5f:2f:c4:31:36:52:8f:52:
37:a5:93:b9:c3:6b:bb:e0:0a:aa:e2:b2:9e:51:d2:
65:57:5f:d7:e3:de:ef:0b:25:9a:5a:21:f2:17:04:
e4:fc:a8:0e:76:9b:c0:6a:a0:41:02:7c:ae:11:d2:
20:f0:bf:b9:ea:85:b2:2a:a3:e1:76:1d:c6:33:90:
9a:45:e9:50:ca:2b:0b:e2:50:2c:9d:34:e1:d6:d1:
f6:50:34:d1:a8:55:94:38:e5:06:99:e5:cc:dc:26:
ff:91:e7:dc:03:cc:d6:78:44:78:06:c2:f8:fb:61:
05:cb:31:f7:b5:18:cc:8c:b5:cf:94:98:3f:34:fa:
5a:df:e6:bb:63:27:78:29:60:80:17:a5:65:e3:6a:
4b:bd:fa:36:b4:67:19:69:7a:9b:e7:17:ab:8a:3f:
1d:1b:ea:db:a2:3b:97:82:1f:54:45:97:08:ae:25:
cc:ca:f2:cb:e1:e5:10:b1:71:52:7b:a2:e9:c0:9d:
2a:9b:81:e4:3b:24:d1:e6:cb:9d:6c:91:af:16:14:
c8:90:a2:ba:bd:21:a6:6b:09:22:2c:dd:e3:3f:d3:
c7:b2:20:a9:6c:6f:44:98:02:5d:00:09:a8:cb:aa:
a7:54:00:3d:3c:b8:bc:eb:91:83:a7:d8:71:06:66:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:83:B4:27:29:36:7A:82:3A:E7:B6:C2:D4:EB:07:9E:94:57:39:2C
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:44:9e:a3:0e:07:d1:e5:3b:e3:d9:b6:87:3f:dd:b7:be:fa:
a9:44:af:99:44:a8:62:d9:8f:92:06:e6:31:d6:d5:43:e5:46:
ac:48:f2:1a:46:43:24:a7:50:85:50:ac:fe:68:3f:14:c0:fa:
3e:21:11:c2:03:ca:b0:ed:35:18:b6:1d:de:ab:2b:9e:75:63:
b6:11:14:ac:ac:19:8f:31:9d:ec:35:16:0f:47:f6:75:c1:93:
83:97:1d:50:5e:cc:93:c7:2f:d9:a1:bf:6f:86:0f:31:c7:0d:
d3:0d:8c:90:8e:22:93:f7:90:f7:e0:59:9c:06:34:1c:06:a0:
57:01:dc:73:45:bd:c7:ca:96:91:55:88:84:b1:1e:63:ce:e0:
93:ad:bf:8a:33:9c:cd:cd:0f:40:60:4d:c7:ba:a6:c8:fa:7b:
bb:9d:b8:5c:1a:25:b8:be:86:15:87:69:13:50:fe:96:fe:6f:
0c:fb:c2:c4:2b:48:8f:05:13:0a:1f:54:19:c0:de:0e:11:f8:
07:7a:62:d8:a7:ba:45:65:ba:25:1b:90:b0:56:c6:cb:56:f5:
d1:00:26:e4:65:99:64:26:78:05:0d:9f:e3:61:8f:0e:44:d1:
df:8c:86:04:0e:ed:1f:46:17:86:3b:86:97:8a:5f:0d:64:0a:
80:68:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:14 2025 by rpki-client