Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: /U0XX3eT+1McwJ1QWJN1UdPwOmlrP0VjYaKjKvuOtQE=
Subject key identifier: 9A:1E:B2:5E:B0:9C:9A:06:06:3E:BA:57:ED:58:97:16:24:38:F3:F3
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 01967B69707FB5C54B98717996558967C64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 12B1
Signing time: Mon 28 Apr 2025 08:00:29 +0000
Manifest this update: Mon 28 Apr 2025 08:00:29 +0000
Manifest next update: Tue 29 Apr 2025 08:00:29 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: rk5cccXDHM83NLUc3BMKwMB0K9m5CHUQ8uHdcdZz0LQ=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:70:7f:b5:c5:4b:98:71:79:96:55:89:67:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Apr 28 08:00:29 2025 GMT
Not After : Apr 29 08:00:29 2025 GMT
Subject: CN=9a1eb25eb09c9a06063eba57ed5897162438f3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:62:e3:ec:02:61:56:7f:a6:f7:4b:48:ad:
f6:d3:29:c8:6d:f2:22:6d:dd:07:15:fd:d1:ba:56:
95:fb:ae:94:e7:3d:6a:55:c0:37:24:ce:2e:d9:dc:
ac:c3:7d:91:bb:b0:f6:09:fe:21:5c:d6:ea:c9:dd:
26:15:b1:c5:31:ce:7d:b3:ac:b4:03:89:74:98:01:
a4:c9:ee:77:a6:da:c0:eb:f6:a6:cd:fc:f4:fb:3f:
d8:0c:8a:a8:1e:d3:50:bb:2a:7f:4a:d5:09:a6:04:
1a:2a:42:20:0e:bf:fa:05:77:c9:7c:8c:bf:5e:9d:
fd:2d:ed:d5:89:44:4b:7b:e8:42:fe:3e:db:47:fa:
2d:f0:50:ac:a6:69:f3:1b:b1:6d:aa:0b:d1:e5:96:
ec:0c:61:44:3b:a4:63:8a:f7:b7:a4:77:f9:33:30:
26:19:2e:6d:5c:90:e3:90:65:bb:99:df:87:82:26:
64:63:7b:04:40:9a:83:46:d4:93:76:af:29:fe:2f:
a9:13:ef:55:15:77:fb:95:f6:63:d7:c8:95:b5:94:
c0:dd:6d:3e:cd:1f:3a:c4:f3:96:63:f0:e8:81:0c:
67:4b:73:89:a2:fa:d7:7a:c0:9e:e5:51:5a:8b:4c:
b0:94:ac:57:2b:c1:96:6b:da:48:17:f2:b7:f8:21:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:B2:5E:B0:9C:9A:06:06:3E:BA:57:ED:58:97:16:24:38:F3:F3
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:db:f8:26:3a:f8:8c:a5:88:b6:f4:09:0a:29:65:16:ce:d5:
65:a2:2d:34:00:4c:10:bf:10:74:01:68:6c:81:fb:e2:72:30:
cd:7e:30:e4:0d:6f:f1:f7:99:53:39:09:c5:0c:d8:5c:24:1c:
01:82:1c:0c:17:c6:e4:9c:9f:41:0e:fd:bd:0d:15:4d:5b:bb:
03:97:29:d8:ea:64:4a:23:e1:81:ab:2e:7c:8a:35:fb:9b:ff:
54:50:d3:3b:73:8a:a9:9f:7d:2e:d3:ec:d3:d9:0b:f5:ab:58:
21:af:46:53:bb:f2:eb:e7:77:48:59:43:3b:0c:42:3e:a6:1a:
09:ab:2e:43:a5:e5:55:ab:0e:9f:f6:84:90:95:6e:8b:1f:bf:
66:46:74:f5:14:a3:89:f1:e0:8d:76:29:cd:89:7f:9d:9b:a2:
ff:1b:6a:9b:8d:93:7a:cf:d6:1d:d4:a1:c9:98:56:04:46:ee:
e0:e6:99:ba:89:8f:ed:e0:c8:99:0e:b6:21:58:48:b1:59:bc:
fb:ab:ac:dc:9d:8a:44:0b:b7:05:eb:8d:85:3d:50:2c:21:8f:
88:45:b8:d4:5a:60:ea:d2:f3:f5:e1:89:7a:6c:47:92:55:a9:
7e:3c:38:bb:f4:c3:12:5a:9a:64:fd:10:49:c8:87:6c:eb:b8:
11:9a:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:44 2025 by rpki-client