Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
File: BAfWwkhET2tcN42w_-wPiZJW66M.mft (raw, json)
Hash identifier: oy6XElLKcE9bYMID1I0KZETNAicDG0Wgh6Gv7ndcfpg=
Subject key identifier: 1F:1B:A2:4A:FF:D1:7A:EF:4A:86:DF:31:FA:71:9D:4E:BD:6E:F2:47
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 01967ED8A0C2B22525E1423C0C0E838F85DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
Manifest number: 07E7
Signing time: Tue 29 Apr 2025 00:00:48 +0000
Manifest this update: Tue 29 Apr 2025 00:00:48 +0000
Manifest next update: Wed 30 Apr 2025 00:00:48 +0000
Files and hashes: 1: BAfWwkhET2tcN42w_-wPiZJW66M.crl (hash: EtRAH9OvRF+bBNucHUFfzpXISOB5Pjx9pHDAXGpDHJY=)
2: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (hash: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:a0:c2:b2:25:25:e1:42:3c:0c:0e:83:8f:85:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Apr 29 00:00:48 2025 GMT
Not After : Apr 30 00:00:48 2025 GMT
Subject: CN=1f1ba24affd17aef4a86df31fa719d4ebd6ef247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:73:fd:82:0f:7c:d3:a5:76:21:24:0a:ea:
78:04:89:dc:94:97:d6:42:a7:21:78:37:36:5f:05:
58:1f:7a:5d:08:38:16:02:08:10:6f:d3:7c:ea:22:
39:5a:56:ac:0a:72:45:e8:7b:43:b9:d4:6f:90:9a:
3f:4e:7e:6b:e7:41:7c:8c:26:ad:1a:be:c8:d2:3a:
24:e2:b9:6b:1b:7f:1f:9b:2d:d5:49:aa:62:8c:14:
99:13:d2:81:c6:44:4f:51:37:24:c2:8e:31:85:17:
0c:0b:e3:f7:06:57:a4:2f:fc:fb:84:f9:9f:8d:49:
22:2e:92:9b:01:33:6a:c4:0f:e0:1b:e2:db:a0:4c:
e4:42:bb:5d:5f:33:17:c2:b6:ba:3a:d4:82:e5:a6:
68:53:f1:b1:e8:e9:b8:41:5d:26:8f:ba:02:0c:dc:
73:e3:b9:04:35:7f:4e:7f:16:13:a2:be:72:f2:94:
1d:db:40:d1:ff:45:74:1c:c2:71:ad:89:47:76:42:
2f:d7:d1:99:04:d9:6b:d9:86:28:39:28:6c:a6:69:
e9:90:9a:35:38:05:f6:56:0d:10:a6:15:e8:c2:04:
58:1a:7f:85:98:09:28:c8:8d:0b:84:7d:3b:23:1e:
f4:54:22:c8:52:b3:ab:38:b1:b3:06:19:db:a8:c4:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1B:A2:4A:FF:D1:7A:EF:4A:86:DF:31:FA:71:9D:4E:BD:6E:F2:47
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:24:d6:5e:59:ee:49:af:76:a5:2f:c8:c8:f4:59:a9:95:fb:
a9:64:dd:e9:67:91:66:7c:7e:6c:2a:62:9d:d8:a8:fc:af:63:
68:f3:c2:2c:55:ff:7c:b9:23:2c:bc:b9:8a:c5:9b:61:78:e9:
ea:c6:f7:43:80:7b:27:be:20:44:3a:f4:1d:27:bf:ba:28:7e:
74:f2:06:a7:e8:ce:90:ac:fa:d6:82:fc:d5:27:42:91:aa:76:
9a:d1:49:4a:a3:c3:21:69:f6:8d:43:b9:96:c3:e5:c7:1e:37:
4d:4b:28:64:29:d3:fd:3e:b1:db:8b:97:46:38:17:8f:7f:a9:
6e:d1:b2:99:a1:a3:01:58:ca:75:d8:b3:9a:0d:3c:63:11:35:
6f:36:b8:01:38:1c:d5:8f:73:0a:82:cb:2c:c4:c7:61:f7:f8:
c1:cd:f7:3c:6d:9d:3d:2e:2a:87:1d:82:d2:eb:92:90:55:4d:
f2:b1:b6:86:87:87:0c:5c:97:6d:a8:dc:1b:ea:dc:97:0d:cc:
0f:89:09:b2:c0:a3:bb:ce:63:8b:b3:fd:e9:00:e4:69:58:96:
4a:93:c4:bd:f5:0f:f0:a4:8f:bb:7d:76:53:87:50:cf:b7:db:
0a:b5:3d:d3:07:65:a6:9a:63:2b:55:de:ad:2e:96:ac:99:96:
1c:fb:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:02 2025 by rpki-client