Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: PCjELQeDMYG9kmP+SjtLbseOtnhZTJ7ILc/F7OmH68k=
Subject key identifier: EC:DD:87:89:94:4B:71:C3:DB:AD:65:DE:65:EB:C6:51:7C:23:C7:8F
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 0196778D07909C99C61C876DE79453BBE5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 14:00:53 +0000
Manifest this update: Sun 27 Apr 2025 14:00:53 +0000
Manifest next update: Mon 28 Apr 2025 14:00:53 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: 9UK0O4e/1FcS0zCNOIRdGjAubsPGHNbaASynR7qjZyc=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:07:90:9c:99:c6:1c:87:6d:e7:94:53:bb:e5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Apr 27 14:00:53 2025 GMT
Not After : Apr 28 14:00:53 2025 GMT
Subject: CN=ecdd8789944b71c3dbad65de65ebc6517c23c78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:ce:55:34:e3:7d:2a:7a:7c:0d:d6:dc:24:
46:dc:46:2c:fd:82:03:27:fe:23:cd:19:f7:09:1e:
b8:88:5a:d6:65:96:9a:09:92:a8:6e:3e:78:3a:68:
51:68:9d:f6:c0:ce:97:b2:e2:33:89:1d:93:f3:9e:
75:04:d1:30:4f:e1:ce:fb:b2:f0:ff:be:5f:fc:9a:
d1:16:16:94:87:b7:f0:f4:db:eb:f5:a9:02:bc:73:
0a:ee:ae:04:ab:65:36:ad:48:23:9b:19:2f:41:0d:
20:6d:a7:e8:55:66:5a:77:6c:75:fc:cc:09:d9:50:
66:cd:8e:96:41:32:fa:33:55:68:dc:f6:0e:fd:5b:
c3:4b:a1:78:74:e2:8d:75:ba:1d:b2:7b:88:60:dc:
c6:f0:e4:e9:93:a3:00:1e:24:ed:dd:65:8d:d8:2d:
1c:47:e3:36:0f:db:06:48:e3:16:01:64:9c:6c:26:
1d:c0:fe:53:7d:08:dd:13:8e:e5:26:bb:46:16:dc:
70:2b:33:f7:7b:13:05:22:90:14:8a:59:54:65:86:
d0:54:26:9b:07:2d:d0:2d:4c:2e:4c:f5:c3:ee:eb:
d1:92:79:6c:bf:44:54:0c:d2:1b:52:3c:b6:01:bf:
47:35:b8:91:e3:5c:02:d0:23:71:a0:6a:d1:15:3c:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:87:89:94:4B:71:C3:DB:AD:65:DE:65:EB:C6:51:7C:23:C7:8F
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ce:29:1c:5e:bf:eb:c9:87:8c:a9:ee:ec:1c:78:ed:f5:20:
dc:0c:1a:69:5d:50:f1:fe:cd:64:27:8c:59:93:ee:80:f5:c2:
a2:10:56:6f:b5:61:23:f0:6a:a4:6d:75:e9:f5:cc:46:54:14:
fa:4e:3d:77:8e:f1:ac:b0:8a:fb:45:d6:49:e7:69:48:1e:2e:
06:69:92:47:22:40:2f:c9:89:f1:dd:99:84:ac:f0:36:88:95:
ea:47:84:87:2f:21:26:b0:f9:c1:7c:37:6e:6a:3f:6c:fb:bf:
a3:16:1d:0f:da:d8:bb:ef:6c:8c:72:b6:42:d4:01:13:32:7a:
68:ab:60:8f:47:12:04:79:89:83:1d:47:b1:41:b6:35:ce:5d:
19:85:23:07:11:4c:80:1a:ff:7a:31:aa:2d:4c:ae:24:df:77:
db:02:45:08:4b:48:e0:2e:cc:07:54:54:d9:6f:1e:e7:60:3b:
d4:ba:49:e9:dc:0f:e4:13:e9:a0:85:71:7e:0d:32:b1:d1:cd:
81:b7:60:b9:97:3c:3f:5b:7e:39:2d:db:d9:7c:1c:9e:64:85:
3c:0d:8f:c8:24:ef:52:2b:02:40:54:09:1f:2f:fa:85:7a:60:
90:96:c6:0e:2b:b2:ed:e5:e4:3c:46:5e:1a:1f:ae:6c:7b:ea:
76:77:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:04 2025 by rpki-client