Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File: BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier: IBQK4C2GIyTfbFkr9HiRRhXqiZuHqxCmTUcRULJDWCE=
Subject key identifier: BA:68:42:7A:3F:B9:0D:A6:AE:E2:35:A8:B2:A0:53:5C:23:C3:6B:56
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 0196767AC01675A35494665308E5F76325C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number: 07EE
Signing time: Sun 27 Apr 2025 09:01:18 +0000
Manifest this update: Sun 27 Apr 2025 09:01:18 +0000
Manifest next update: Mon 28 Apr 2025 09:01:18 +0000
Files and hashes: 1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: rQtbGgQNfrTCnZFXniPKQMYaZf/2KeiCH/UEou7dZ8w=)
2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:c0:16:75:a3:54:94:66:53:08:e5:f7:63:25:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Apr 27 09:01:18 2025 GMT
Not After : Apr 28 09:01:18 2025 GMT
Subject: CN=ba68427a3fb90da6aee235a8b2a0535c23c36b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:37:5d:02:12:14:52:53:71:fa:30:f8:90:
ff:ca:a5:1d:1b:35:f2:2c:31:39:73:13:59:01:e7:
d0:5e:87:bd:76:47:73:8a:b2:2c:2f:ac:2e:ec:3e:
4b:eb:a3:49:61:aa:07:ce:75:67:f3:b3:77:f2:5f:
d3:77:b1:a8:3c:55:cf:0e:d8:76:c6:b6:17:7f:74:
2b:76:ca:e6:cb:ef:e5:72:f7:47:9d:7b:fb:aa:2d:
2e:7a:8e:7f:b5:5c:75:b8:19:cc:9d:04:be:9b:7a:
e0:de:cb:aa:5f:35:ce:ea:43:9e:cc:d3:77:a1:e1:
1b:a8:cc:75:d7:7d:07:e9:f9:83:22:24:7f:43:a5:
f4:05:55:94:81:1b:c8:cb:ff:3e:b4:0f:72:87:eb:
6e:23:a0:9c:e8:c0:91:c8:5f:8e:4e:5b:5d:c4:c2:
a8:62:1a:f3:4f:a5:90:f2:23:45:10:c5:49:9c:a3:
95:51:59:0b:26:b6:16:04:89:38:5b:96:2e:ad:b7:
41:5c:1b:3f:50:b9:68:ad:75:7d:01:1d:b0:d4:e7:
eb:ab:b7:c7:8c:e7:93:ae:2e:e4:ca:52:5d:2e:b8:
ce:6a:90:ff:8a:ec:33:2f:b4:ec:d5:0f:87:d8:af:
2d:aa:c0:2d:ec:3e:80:6a:7d:b1:93:b3:51:02:46:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:68:42:7A:3F:B9:0D:A6:AE:E2:35:A8:B2:A0:53:5C:23:C3:6B:56
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c7:82:26:8e:e8:d8:20:e4:9f:2a:85:b8:a4:00:51:ad:b0:
bf:41:73:82:98:0b:90:2c:35:e9:09:b2:3e:c3:1c:13:55:c2:
11:eb:34:40:d0:73:dc:fb:cc:23:8c:90:1e:8a:0e:a9:79:b0:
28:e1:de:e2:8c:4b:de:c5:f5:7c:91:b7:30:89:a5:b9:ee:3a:
03:8f:27:b7:f9:7c:94:e3:56:fe:b1:82:85:fe:15:6e:bc:07:
c7:f4:e2:49:58:e8:96:2e:2b:ab:5c:20:b4:cb:56:8a:22:e1:
6b:fe:f9:17:d4:b7:f7:80:89:da:4a:18:eb:d8:a2:20:2d:91:
3f:9d:af:61:47:6c:ab:17:7d:75:1d:cf:67:16:8b:7b:60:17:
bb:05:3b:60:37:96:65:be:9d:66:87:04:b7:9c:9f:21:55:70:
32:14:cd:b0:62:11:ef:22:c0:35:d4:a7:ce:c1:cb:12:b3:8c:
3d:d1:39:12:fa:86:c7:4e:3a:dd:87:23:1c:66:f2:12:22:e7:
32:8e:72:bb:72:ec:ec:df:0f:21:c4:d8:f3:94:a9:ff:64:4f:
3b:32:c4:b6:51:ef:57:e1:83:8f:2f:73:b9:81:0a:05:fa:e3:
22:39:82:7f:fd:fd:08:d5:b9:32:77:ab:67:e4:a7:f8:1e:fb:
78:48:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:27 2025 by rpki-client