Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: QkVrBZqrAl9PuNCZo+xhZn7n9Uif+kgJ7vNUep/K+fc=
Subject key identifier: BC:4D:3A:D9:79:95:C4:B6:87:92:DD:3C:46:9C:FB:08:5A:17:FB:78
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019686C92811F921C5536285863E7D7AA1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0852
Signing time: Wed 30 Apr 2025 13:00:51 +0000
Manifest this update: Wed 30 Apr 2025 13:00:51 +0000
Manifest next update: Thu 01 May 2025 13:00:51 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: K7RYIx33P0bhI8aUQiEElt8b2Pk08t57P/NU7oLS4a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:28:11:f9:21:c5:53:62:85:86:3e:7d:7a:a1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Apr 30 13:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=bc4d3ad97995c4b68792dd3c469cfb085a17fb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:c9:a9:f6:bf:3a:46:ae:f1:55:0a:92:0b:
98:6d:ee:0f:f3:ba:aa:94:46:b8:57:d3:c0:4b:53:
a6:4b:9f:92:59:5a:6b:58:b4:d6:6e:91:2d:6c:1a:
5d:9d:dd:7a:75:cc:85:a0:15:50:ee:01:c1:4c:e7:
d8:7b:12:3a:3f:4b:cd:bf:d3:a8:82:e0:78:16:f4:
c7:f4:2b:27:cb:01:7a:91:cf:92:05:6d:d7:3d:98:
8b:5b:33:fd:b8:63:5f:b1:0a:9e:44:a1:74:9e:5e:
0b:5a:01:d3:36:8e:03:a7:83:ce:f3:18:3a:91:91:
4a:4c:cf:3c:ce:24:32:f4:31:a6:13:55:64:82:80:
40:49:96:22:03:77:2e:47:9b:cf:27:44:67:8c:a5:
70:c1:5a:56:b1:53:bb:4d:82:ee:82:e8:da:e5:c2:
0c:fe:37:8b:ac:3a:0d:de:39:f7:97:4f:b8:c0:ef:
64:ba:4e:14:ca:72:f0:04:f8:99:23:58:f4:89:3f:
e2:f9:c8:1d:4c:73:e9:7d:96:ff:e9:4e:92:ea:50:
47:54:fc:80:01:7e:d0:c0:a5:3a:e6:66:0b:51:71:
18:d0:1f:13:d3:18:eb:54:5d:57:2a:5a:15:3e:a4:
6b:c8:58:5a:89:d4:cf:62:05:4e:13:f0:ec:7b:6a:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:3A:D9:79:95:C4:B6:87:92:DD:3C:46:9C:FB:08:5A:17:FB:78
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:7a:ce:15:8e:8d:6e:07:75:a6:ad:2c:b8:f5:ce:d6:61:
c8:29:16:4c:67:4d:e0:3d:ee:c0:a7:ea:91:2c:23:06:5d:52:
d5:2b:20:a0:e6:49:8f:8b:f9:3c:b8:9b:2f:de:0e:ce:00:ce:
14:08:78:cb:03:9b:4d:17:6d:d3:a8:6e:15:ba:16:b6:4e:2f:
42:8e:5b:2f:2a:05:b8:a0:67:b7:58:67:fa:e8:1a:11:45:48:
a8:70:99:62:2a:00:cd:53:aa:ba:33:b8:10:3c:0b:f8:10:33:
f9:1d:2b:3f:9f:4e:69:5b:4e:5f:62:85:96:ef:68:b2:ca:88:
4c:70:af:98:bb:fe:70:90:53:aa:21:e4:6a:06:5c:0f:7d:31:
7f:79:e1:46:0e:4d:64:29:d6:c6:8c:b4:34:67:09:b9:02:48:
e6:8d:fa:4e:cb:e1:05:a1:9d:a1:a9:ed:65:08:0d:f7:31:bc:
95:60:93:d3:57:78:68:5e:21:70:0a:30:db:9d:da:31:5e:34:
dc:fd:fc:77:38:b3:e4:0a:21:ea:c8:bd:97:60:62:04:5c:34:
40:57:82:14:ad:88:8d:a3:ec:f1:c3:82:d9:e6:61:ab:44:61:
e9:90:0e:64:74:af:f3:7e:42:f8:8d:cc:aa:35:65:13:78:b5:
ae:51:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:55:45 2025 by rpki-client