Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: UIiXkN95mMc5+8G5CdyUJGqAcOOrBPmAZKBNgjCCjWs=
Subject key identifier: 35:A3:C9:CD:AB:F5:AF:95:5F:FD:8A:1A:A5:C6:0C:E9:8F:26:90:96
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 0196760CB324E9B0E3708209C80826F2BF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0BB6
Signing time: Sun 27 Apr 2025 07:01:05 +0000
Manifest this update: Sun 27 Apr 2025 07:01:05 +0000
Manifest next update: Mon 28 Apr 2025 07:01:05 +0000
Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: L9Se2ofA3iSQ2qSop35J9ruojvRTRBvPwzIuQnaajfg=)
2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=)
3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:b3:24:e9:b0:e3:70:82:09:c8:08:26:f2:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Apr 27 07:01:05 2025 GMT
Not After : Apr 28 07:01:05 2025 GMT
Subject: CN=35a3c9cdabf5af955ffd8a1aa5c60ce98f269096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:86:41:44:25:b5:a5:fb:fd:02:18:52:1d:15:
cd:28:05:70:56:07:d8:4b:a8:ff:79:5e:ff:9c:82:
c2:bf:9a:27:96:04:3a:ea:28:88:86:e6:fe:57:a1:
1d:f8:d3:99:32:57:9c:34:cc:be:07:b0:d0:36:26:
bd:c8:5f:96:49:ef:bb:21:4a:e0:8b:3e:a7:c6:55:
c7:48:21:ac:12:f1:53:0c:ab:fb:e5:34:62:43:3e:
3e:dc:af:69:df:f1:c8:83:67:e7:27:c7:39:9d:31:
b5:98:61:77:cd:e3:a5:29:34:4c:7d:e0:b1:9d:8e:
85:49:1c:f3:69:61:58:73:30:3b:6d:fb:65:33:2f:
24:bf:e0:aa:c9:1b:8f:9d:e8:89:59:93:82:5f:b6:
86:33:be:8d:a6:87:56:65:f3:a6:59:be:ad:70:5a:
f5:c5:b9:c2:e9:65:7f:74:e1:8d:0b:73:aa:33:b6:
51:36:c9:5e:cb:8f:d2:f0:2a:c7:0f:4d:da:b1:d5:
93:94:69:ec:4e:41:98:57:5a:d6:74:b8:7b:ed:d3:
2d:09:78:a5:fc:64:61:49:a9:8f:42:9c:68:6c:31:
6f:ec:c3:58:42:ad:fb:84:ae:a2:24:f8:6f:73:ba:
c7:ba:92:97:a1:51:34:4e:93:43:c2:7d:01:81:d2:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:C9:CD:AB:F5:AF:95:5F:FD:8A:1A:A5:C6:0C:E9:8F:26:90:96
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:98:35:6d:dd:76:52:4e:c6:8a:49:bf:e6:a8:6f:64:7e:
98:f1:e2:94:ca:7b:aa:a3:b0:69:35:7f:3a:ef:a0:d5:25:98:
07:5c:2c:49:35:00:6d:65:3e:78:98:56:3a:65:9f:4a:87:63:
1d:b9:75:27:a9:ab:4f:2f:4e:40:e3:04:d0:2b:80:6b:e4:aa:
47:57:75:a4:b7:94:3c:b8:13:5a:cc:f0:50:7a:e8:c6:39:91:
38:15:d9:fd:f1:a5:fd:c5:22:4b:90:ee:8c:f4:ef:f6:0a:de:
13:0c:2f:12:52:5c:4c:3c:12:d4:b5:bb:f8:2c:3e:ab:93:4a:
9a:be:e9:d1:23:08:82:a5:72:d2:ea:b2:26:e5:15:f3:27:78:
31:54:4d:63:5d:5f:50:13:b4:b8:32:06:a1:1d:7a:2e:09:64:
c7:ab:54:a3:d3:61:6a:73:4e:f1:33:ed:d5:90:11:08:a6:56:
88:bc:60:2b:42:45:65:fe:7f:4e:c6:88:11:02:39:f0:c0:de:
2f:25:11:73:0f:56:e2:9b:0c:78:22:15:0e:08:09:60:9a:25:
0e:16:45:da:df:0c:d4:76:c4:53:ed:5b:ce:e4:b1:fd:14:d7:
4e:29:a9:14:9d:7d:84:20:f8:62:a1:07:68:aa:16:a2:5c:36:
0a:a2:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:19:54 2025 by rpki-client