Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: ZZVs9lj5BNqaWEQr1EbA5NhD3zzvvtOWw34SlUgh6vc=
Subject key identifier: 24:D8:62:08:C6:AA:59:59:B0:42:9F:8D:0A:96:DB:48:F5:F4:F0:9A
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01967F4656DADEFE0881F790F1D9A47EC5DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 02:00:38 +0000
Manifest this update: Tue 29 Apr 2025 02:00:38 +0000
Manifest next update: Wed 30 Apr 2025 02:00:38 +0000
Files and hashes: 1: A_nsrTfQ71u0UrzEQ6SNUm_3G2U.roa (hash: SR5+osvS+osGxE2DJ2TfgoITwWWe9DsyWc/ATbIOEEM=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: 6hNJOcXt0lx+4voaWlr3LGsbk+Kg3z4pLSd5CXmoLOQ=)
3: IDbbddFc14SqQa3mZmElYtVTmQY.roa (hash: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=)
4: rk3ppAboxW06rE2L20ZKn9egqD8.roa (hash: 0BLnKXlmHhtn6//IbmeMPsDs46xu8jcRpBXK8EK9HJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:56:da:de:fe:08:81:f7:90:f1:d9:a4:7e:c5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Apr 29 02:00:38 2025 GMT
Not After : Apr 30 02:00:38 2025 GMT
Subject: CN=24d86208c6aa5959b0429f8d0a96db48f5f4f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:bd:43:3f:51:54:9c:b2:b3:d7:97:9d:3a:
a8:ab:ae:f7:18:7a:fe:38:75:2e:2d:70:7b:6a:1f:
42:ee:8e:c2:4d:f2:fa:a4:60:d9:6e:3a:0d:bc:8a:
e8:c5:3a:2f:d6:a7:87:f5:1d:50:d5:81:09:c8:1f:
06:e0:d7:72:82:82:4b:54:54:5a:8e:c8:54:1a:75:
b7:ef:0d:da:cf:23:8b:c0:1f:a6:e6:8c:56:d9:2a:
6c:6f:6a:b4:e4:98:40:b4:20:55:94:24:99:0c:f9:
a8:ba:41:9e:f4:17:13:ae:82:9c:f4:33:e8:cf:5d:
83:a6:eb:bb:3b:ec:9e:9a:72:66:6b:79:b3:fb:df:
43:0b:31:4a:8f:06:0d:17:00:8a:67:2e:4d:6a:dd:
36:94:d6:42:b9:c7:e1:56:70:42:58:1b:78:35:4a:
9f:5e:3e:ff:1d:b0:09:4d:b7:77:cc:93:5c:b7:5c:
9f:16:cf:72:16:6e:4b:a8:f3:98:ec:a5:51:12:7d:
01:6d:f5:8e:f6:83:2b:a8:9d:a8:5e:f1:a8:d4:1e:
56:94:97:61:e0:56:5f:1a:52:7f:48:1d:95:d1:14:
96:be:eb:d1:2f:2b:20:d2:6c:59:c3:a6:08:2b:0b:
c8:57:d3:f1:d8:e9:25:db:29:53:ef:e1:0d:17:0a:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:62:08:C6:AA:59:59:B0:42:9F:8D:0A:96:DB:48:F5:F4:F0:9A
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ae:86:aa:10:93:8f:da:25:7a:15:bd:c9:05:dc:f8:1f:c5:
f0:bd:08:3c:e9:6c:5e:94:2c:36:43:a3:1c:ec:f1:d5:a8:a7:
15:47:5a:c9:88:8e:59:47:2f:31:a1:ee:af:d6:97:5d:67:69:
1a:bb:d6:38:bb:53:2d:d0:7a:ac:25:8c:54:41:ee:ee:2a:e6:
ba:b4:0a:01:c2:7f:b8:a3:a4:94:9c:32:07:5a:e3:20:e5:34:
59:fb:0d:15:ed:38:b0:61:52:3f:e2:0f:eb:cb:4a:89:b6:e1:
1a:14:ba:27:71:8a:75:41:38:3a:5a:10:e3:ea:98:01:98:a4:
d2:44:34:58:cd:c8:1c:d7:b7:8f:c1:71:02:9f:52:8e:f7:0e:
07:ef:37:6d:31:79:44:d6:bb:4f:5f:87:8e:53:e4:da:2b:76:
e8:f6:44:97:6e:57:82:1f:8f:51:97:d7:38:e0:54:de:65:3f:
bd:ec:d2:f9:7c:91:ed:3f:48:3f:3f:49:a9:45:00:bf:58:ba:
a9:64:74:42:c5:83:25:9a:29:c3:b7:9c:a0:a8:3f:61:ae:2c:
59:00:a4:78:7f:44:d4:9e:5d:7c:e2:13:99:29:e3:7f:c8:19:
68:f2:80:02:f4:d6:01:b0:1f:e2:ac:5d:74:9e:19:9b:70:97:
bf:69:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:45 2025 by rpki-client