Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: oDKo6HPhdgWweHYK1M+PDPzduArCOW/KpphvRvuouZ0=
Subject key identifier: 82:D0:72:F9:61:0F:32:06:0F:4C:26:3F:EC:82:8C:73:4B:2F:E3:88
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 01968359CA14142E281B0A84C99FA9C24E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 21:00:21 +0000
Manifest this update: Tue 29 Apr 2025 21:00:21 +0000
Manifest next update: Wed 30 Apr 2025 21:00:21 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: axkbXWwf4U0ORhaRlivPQugUtbo/31KMlFTHwLIkIhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:ca:14:14:2e:28:1b:0a:84:c9:9f:a9:c2:4e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Apr 29 21:00:21 2025 GMT
Not After : Apr 30 21:00:21 2025 GMT
Subject: CN=82d072f9610f32060f4c263fec828c734b2fe388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:b1:c4:2a:57:e4:68:3b:f5:be:04:61:f8:
fb:49:aa:30:40:99:43:e6:16:c2:46:09:33:49:59:
9a:36:8e:b8:42:8b:22:40:19:1c:55:80:67:db:81:
e0:0b:0d:36:49:ff:1c:aa:1a:ff:33:17:21:89:35:
ab:4a:f9:64:1b:f4:97:f8:2f:e2:68:49:d9:2b:97:
ca:6f:d7:86:ed:46:1a:46:a6:27:d6:0c:2e:6d:7b:
81:fd:8f:8e:e7:66:9a:bb:1c:0a:a9:e5:40:60:f3:
7c:47:51:02:da:6b:01:9a:b2:ff:bf:f6:59:25:a3:
e6:33:42:2c:5d:d9:f9:a9:f7:17:b6:f9:d7:f8:27:
5e:a7:b7:10:3c:a7:42:ed:65:8c:63:f4:0a:82:e0:
cb:0c:7e:6c:66:71:ad:9c:49:67:42:0a:74:ee:d6:
f9:03:b0:ae:81:1e:1c:3b:1b:d4:d7:19:79:e4:cb:
81:ec:4f:c2:b5:b8:1d:cf:d1:10:98:b0:29:4b:0c:
7f:b8:41:e1:ff:b2:33:47:7a:dd:43:be:48:8b:f9:
c4:2f:33:d4:d8:12:e4:70:39:f5:2f:c3:b0:83:30:
69:96:9a:bf:3b:be:0c:a5:62:45:e6:f4:8b:e1:b7:
5f:79:c0:75:0e:ed:da:f1:e0:26:f3:2b:2f:fd:39:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D0:72:F9:61:0F:32:06:0F:4C:26:3F:EC:82:8C:73:4B:2F:E3:88
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:30:bc:ad:ed:45:e1:87:ab:44:db:01:4c:98:17:e8:56:36:
02:29:41:b7:a8:e1:87:d3:20:7e:2f:d8:fa:f8:bf:3b:d4:23:
3d:a0:b3:1b:32:ad:fe:b6:17:e3:83:57:26:b8:a1:e6:4a:1d:
2b:b6:38:11:7d:a6:2e:24:f0:28:46:ba:4a:ca:9f:a0:7a:f3:
a1:86:1b:ea:0f:d4:31:a0:b8:ad:85:99:39:7e:a6:24:a3:a0:
f2:65:6e:54:e9:26:36:70:22:8b:52:7a:b7:1e:f6:77:7b:59:
08:60:79:e0:02:24:0d:d0:cb:d8:ba:ff:1e:3c:c6:3a:f8:42:
3d:3f:a9:a0:1a:f8:d5:a7:2f:6c:18:20:c2:e1:38:ac:51:58:
d9:c0:6b:04:bb:b2:48:02:c9:0a:7f:65:c1:75:81:f6:d2:d2:
92:0b:b2:70:00:e8:c2:23:d3:17:75:da:35:5e:58:b3:9d:39:
f9:67:81:ac:ca:fc:51:67:83:23:a9:8d:c4:e1:ae:b8:f7:27:
6b:b8:9a:1b:c5:28:a0:42:6d:78:27:69:b0:ec:e8:32:6f:37:
e3:a2:5c:34:e8:66:b3:2e:d2:47:74:09:a6:b2:91:0b:1b:a9:
db:bc:0f:fe:81:8d:4f:cf:96:8e:4e:3a:71:d5:fa:26:6b:2b:
df:ba:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:22:48 2025 by rpki-client