Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: n4vQv7/bvhPtKHyogaprJNfQ8SC1QQps+y+k04Z9yDI=
Subject key identifier: 04:03:DE:11:EB:4E:B9:FA:15:91:6F:39:97:F3:45:87:D6:E0:5E:A6
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 0196767A5886B0E4E8CEEBFE8F0444594CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0230
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: fSI7siH1FRsuo+HjuVfWF/gxLfCD1NFVw9MFMXzO/5w=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:58:86:b0:e4:e8:ce:eb:fe:8f:04:44:59:4c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=0403de11eb4eb9fa15916f3997f34587d6e05ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:e3:d4:f7:42:61:17:ce:8f:8b:a1:f0:41:
d5:17:68:d4:d7:7f:b8:e7:49:94:40:c3:5f:0b:8e:
5e:9b:b1:03:6f:8d:7a:4a:e7:58:dc:89:8d:31:62:
c6:6b:7f:f9:29:8e:f6:37:49:b6:be:83:a5:0f:a2:
0e:7f:e4:99:50:f3:c9:91:be:88:54:75:e3:ae:07:
ba:fd:88:c1:d4:37:e3:9e:a9:f6:40:52:fb:92:a8:
a4:de:f2:a7:fe:2f:bf:c1:46:e1:4e:df:36:19:4d:
6b:71:7e:c9:ac:37:00:f1:c7:53:11:91:b3:56:94:
3d:a5:8a:31:5d:5b:47:d0:5b:22:17:0b:bc:fc:00:
33:cf:7c:29:7f:20:69:43:e4:ff:d9:cd:df:03:71:
95:c0:2c:bf:83:55:ed:d6:d5:ab:fa:b6:c3:a8:f3:
bd:51:c3:77:ba:7a:33:2e:13:b8:45:fb:61:7a:6c:
30:94:37:dc:3e:79:64:03:27:f0:b8:05:62:ce:3d:
65:75:6a:b3:8f:3e:e9:fa:30:9b:fa:c9:ff:b1:bf:
49:68:e9:b8:1e:f3:f6:95:6b:bd:1c:80:8e:dc:15:
76:01:8a:95:ed:5f:5a:3c:f9:14:b1:51:84:c1:a6:
2c:13:ee:1c:0f:da:1c:a5:86:9c:6a:9a:0a:06:a9:
50:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:DE:11:EB:4E:B9:FA:15:91:6F:39:97:F3:45:87:D6:E0:5E:A6
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:41:80:8b:8d:08:df:fe:61:4a:07:4e:c1:b5:c9:41:aa:
30:ae:73:7e:71:87:83:8e:87:9c:ed:27:9a:e1:00:19:b8:4a:
67:d9:00:1c:3a:d8:d8:32:51:90:e5:d6:ea:70:72:0a:96:40:
b8:5f:14:74:62:3b:c4:fe:82:6c:42:78:c9:82:f6:32:e0:e5:
e0:49:7e:8a:1d:db:78:47:64:f3:4a:47:68:b4:08:59:3e:a7:
32:24:b7:ad:19:86:7a:c2:26:bd:50:8f:b8:bb:f2:92:d5:8b:
3f:bd:ed:70:d2:9b:28:eb:e9:db:94:1c:8b:6c:ef:04:a6:41:
63:8f:46:84:40:f0:49:0a:b7:d0:b0:82:5f:ec:11:bc:65:94:
47:d6:8b:c9:05:78:50:e2:2f:60:a7:ad:5d:49:4a:1d:13:0e:
5a:25:4e:67:e5:2f:36:a7:25:19:e6:94:e0:07:34:b5:ea:af:
86:8f:7c:2d:71:81:ee:45:d5:43:f2:42:56:41:d0:75:71:76:
c7:87:6b:94:8b:5f:c5:f0:b7:68:bb:7e:3b:10:1f:e4:fb:05:
03:da:c6:60:94:e7:29:0f:ed:3f:78:e8:b3:14:b3:1d:60:44:
94:e7:bb:24:e7:72:65:6a:f7:be:53:cc:19:8d:90:10:90:f4:
e6:0e:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:40 2025 by rpki-client