Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: C1+zzpXlcfbsPO08Qs4jXFQYPVrBGxuM28T4VV/R0+Q=
Subject key identifier: 8C:28:DA:F0:53:96:AB:62:4F:55:19:61:EA:6E:BC:5B:A7:E4:B2:2C
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 0196759E3F34BFF73C481E619B7427C2858A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 05:00:27 +0000
Manifest this update: Sun 27 Apr 2025 05:00:27 +0000
Manifest next update: Mon 28 Apr 2025 05:00:27 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: N+mPgDdJ4OelYMelURY0PTGD19DxQaACcr/8fws7Uq8=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:3f:34:bf:f7:3c:48:1e:61:9b:74:27:c2:85:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Apr 27 05:00:27 2025 GMT
Not After : Apr 28 05:00:27 2025 GMT
Subject: CN=8c28daf05396ab624f551961ea6ebc5ba7e4b22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:c0:15:ed:76:c2:0f:74:b3:41:bc:eb:96:
3f:fd:a0:9e:eb:1d:7e:cb:49:c3:8e:b3:7c:a2:3a:
94:48:44:d7:f1:95:03:54:91:95:30:77:f6:b6:1d:
9a:29:ff:69:80:ee:ee:ac:af:a2:57:9f:64:f0:3c:
c5:c3:e3:d1:da:02:18:1c:8d:02:41:35:8c:f8:1f:
46:90:3c:3f:86:59:fa:04:8a:54:4f:db:2b:24:8d:
95:19:85:e8:3d:8c:49:ac:b2:5e:70:b9:f7:96:49:
36:38:73:22:6d:d3:5d:a5:c4:f8:39:c4:3d:44:e9:
0f:be:3f:74:52:98:79:3f:9f:36:81:90:e8:d6:82:
42:fc:af:cd:34:bf:eb:2f:93:90:cc:c3:a7:20:e9:
7f:69:1e:23:e8:e2:31:da:40:7b:a0:8b:a1:91:69:
08:dd:d3:b8:10:11:f9:08:ef:0f:04:25:0a:cd:70:
a3:12:94:3c:d5:fa:28:71:d9:9d:75:28:95:3c:73:
3e:b6:6e:91:e7:41:98:e4:86:82:40:dd:a4:85:b2:
f4:d6:0c:01:6f:a7:e7:dd:59:83:d6:7b:3c:c2:50:
e2:19:24:d4:cc:f8:0f:31:cd:36:04:e2:46:c6:b2:
b1:85:b0:db:73:70:49:27:ef:8b:56:5e:1d:d9:86:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:28:DA:F0:53:96:AB:62:4F:55:19:61:EA:6E:BC:5B:A7:E4:B2:2C
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:54:61:1f:a0:b9:39:e5:04:94:95:10:b9:b3:7e:e8:2d:7c:
4c:fa:e8:4d:62:ba:5e:83:51:90:32:e3:3a:25:9f:31:49:f4:
7b:c3:0f:2a:1f:c7:20:b3:85:c5:5a:eb:1f:a5:f5:ba:65:16:
60:28:b5:62:d2:f6:50:b8:e8:b3:a2:fe:59:56:71:3f:a0:fe:
2c:37:de:63:cc:7e:0b:e5:e2:be:72:2c:ef:b9:85:32:f0:14:
13:bd:1a:47:4b:73:15:28:50:71:49:8d:16:7e:e0:15:ce:f1:
b5:a1:d7:b8:f7:44:e1:81:6b:0d:20:d0:58:fd:c1:8f:7e:8b:
88:6b:e5:9f:9a:bd:b5:de:fb:cf:0b:ed:36:67:24:f4:1c:5c:
23:dd:c3:2b:ab:c2:46:65:52:82:c9:36:4e:cc:51:21:af:85:
f8:f2:9d:94:4c:18:0d:8d:66:ae:f2:93:d0:ab:0e:60:ba:29:
5f:1b:cd:81:4a:6e:9d:99:0c:bc:45:2a:4a:1d:c4:7e:b2:2b:
72:2b:c3:a9:b5:0d:07:48:ef:f6:d6:f3:55:0c:73:18:dd:97:
a3:ad:ca:64:31:c3:a1:63:f4:fc:07:a7:dc:28:56:47:0d:72:
63:96:03:5c:07:38:3d:c0:40:f0:a4:32:53:06:e3:32:f6:ef:
91:bd:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:53 2025 by rpki-client