Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json)
Hash identifier: Nz/EqNz36NQ67Khe+/PpxFciSpVIs64Hy5MGAehdKCU=
Subject key identifier: A0:0D:E9:43:21:E3:7C:25:48:47:34:68:28:96:50:BA:1B:DB:39:6B
Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4
Certificate serial: 01967DC5AD5FF3FA497CB71AE5CD4360D48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
Manifest number: 11EC
Signing time: Mon 28 Apr 2025 19:00:28 +0000
Manifest this update: Mon 28 Apr 2025 19:00:28 +0000
Manifest next update: Tue 29 Apr 2025 19:00:28 +0000
Files and hashes: 1: _HGowDUCSG2pcAysO4ogxA6yosc.roa (hash: UPTC6ZbpFxK2iqUZ6z67RcYvcbR0/gldSq3kNUHLLJI=)
2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: tPh8m8kC8Mp8rGwiTg5zEpADPk1HjLze51f8D5XWVr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ad:5f:f3:fa:49:7c:b7:1a:e5:cd:43:60:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Validity
Not Before: Apr 28 19:00:28 2025 GMT
Not After : Apr 29 19:00:28 2025 GMT
Subject: CN=a00de94321e37c2548473468289650ba1bdb396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:16:58:3a:f2:90:12:e1:d7:6f:5c:8c:a4:
42:f2:62:0d:be:25:af:90:c3:1a:aa:91:10:47:00:
04:6b:f3:3a:76:ae:b5:6b:1a:b8:65:94:2e:6b:88:
d4:95:54:c5:c1:40:42:a2:db:d0:9a:1f:46:da:10:
e3:78:3c:cf:1b:e0:a9:dd:45:79:2a:a6:8a:12:10:
87:40:6a:05:f1:db:6b:07:30:1b:58:5f:89:74:05:
45:95:c1:23:13:35:2a:bd:3a:d6:3e:90:5d:8e:11:
91:37:45:ab:16:3d:c7:0f:e0:50:40:7d:6a:5f:38:
be:0f:99:6e:58:d7:29:b1:93:0b:73:02:fc:7e:c8:
b4:a8:62:82:4f:a4:81:b5:f4:fa:37:97:17:88:b1:
ee:e1:26:7b:38:f6:ea:f5:6f:e9:d1:09:c1:41:f8:
86:15:4a:36:bb:3a:f7:7f:a0:b9:cd:59:21:03:69:
b7:d6:4d:78:7e:3a:c1:cf:cb:b9:af:9c:ee:62:b0:
0b:9e:b1:5a:00:0e:99:85:f5:39:98:23:9d:7c:af:
af:d0:00:6b:7e:cc:fc:60:51:93:6a:97:c2:f3:e6:
34:f5:89:8a:98:f3:ca:54:be:54:c5:ac:8d:72:91:
c3:92:68:c1:62:3c:ee:2b:39:96:87:6b:62:4f:55:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:E9:43:21:E3:7C:25:48:47:34:68:28:96:50:BA:1B:DB:39:6B
X509v3 Authority Key Identifier:
keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d5:6a:ed:8e:f1:71:02:51:2a:f5:d1:12:6e:b6:7c:db:ad:
3d:63:17:9d:54:4a:c1:2e:5a:57:d5:21:54:5b:b4:62:5c:cf:
8b:ef:00:a0:ea:ae:e8:21:77:73:26:40:8a:28:01:3d:51:25:
81:37:a7:31:0d:a1:3e:f0:57:53:8b:48:0e:f7:9d:b7:66:89:
12:01:27:a1:71:12:d5:96:d8:db:10:9f:a4:83:0a:1e:76:b9:
ca:6e:fe:34:32:a5:ce:f4:54:9d:8a:9a:e0:41:79:ba:cd:86:
66:95:ca:12:10:28:e2:c5:0e:18:39:21:68:a2:25:50:25:f4:
25:51:d4:37:3d:56:2f:2c:c8:ae:4b:17:9b:ef:b2:90:50:93:
d4:12:40:73:95:be:23:7f:4e:db:d9:29:4a:b8:ab:ac:7b:4f:
37:1d:08:59:65:d5:2c:8f:4a:33:a6:cf:2c:26:27:f7:d9:66:
96:70:22:af:90:13:02:7e:78:7a:1d:64:aa:bd:d2:42:60:88:
f2:f2:1a:3a:7e:ae:8b:ac:5c:fc:cb:4c:ef:ec:e9:97:18:74:
f8:df:fc:e9:8b:92:90:d5:3f:69:05:fb:6b:81:2c:aa:f6:32:
d0:b6:0c:3d:1d:62:bb:c2:af:e7:b1:d2:0a:e4:54:8d:2c:b0:
b2:5f:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:18:10 2025 by rpki-client