Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: ajdI/57LhXljsW7kvsYLtaDmNNDNjhp//29xXY8HT44=
Subject key identifier: DE:F3:86:78:7F:B2:AE:51:3A:98:AB:F6:61:0A:C3:0A:FC:79:4B:BA
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 01967FB46D9D1DE2CA6F9325E43505322F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 1381
Signing time: Tue 29 Apr 2025 04:00:53 +0000
Manifest this update: Tue 29 Apr 2025 04:00:53 +0000
Manifest next update: Wed 30 Apr 2025 04:00:53 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: zLIP6/Sm3F50KxEUpRMXzF97RQqoTALo8HWVkMmXylo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:6d:9d:1d:e2:ca:6f:93:25:e4:35:05:32:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Apr 29 04:00:53 2025 GMT
Not After : Apr 30 04:00:53 2025 GMT
Subject: CN=def386787fb2ae513a98abf6610ac30afc794bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:6d:c2:20:81:5f:3d:52:c3:a8:77:95:67:
26:06:44:9a:f2:a2:ca:73:28:69:53:bf:d2:a8:4b:
12:10:24:7e:fe:be:d0:1e:ea:55:ce:20:02:b1:49:
11:31:94:95:1b:7a:88:96:af:d9:d9:b9:ec:d6:41:
29:cb:a9:a8:2a:ec:a6:7d:82:e0:b8:bd:dd:1c:a2:
72:17:d0:1b:f6:18:2a:33:cd:01:b4:28:7b:04:8f:
20:41:d9:b5:df:2b:c6:61:62:8c:ab:99:b8:69:b8:
b5:ad:24:ce:2c:85:01:56:c0:3f:00:fb:8b:8c:85:
a9:15:aa:eb:f1:df:f1:e3:3f:15:fb:73:d3:31:ab:
19:ee:91:6f:2a:4f:ee:29:2a:fb:fa:e4:52:c6:86:
8e:a5:fd:a2:04:97:6a:2a:4b:9d:26:43:e4:6a:39:
15:8c:24:73:86:cd:7c:cd:a5:74:aa:8a:57:d0:56:
07:29:8d:6c:54:8c:99:25:87:1c:57:fc:ef:bf:04:
b3:48:45:41:84:41:49:cf:d7:4e:53:c7:d9:6c:1b:
e6:cd:84:1f:2e:93:5e:03:b0:0e:08:03:cf:08:45:
ad:d8:56:38:b8:cb:a0:77:de:7c:de:6c:28:be:37:
e3:86:e4:8f:44:5a:5f:93:14:d7:36:dc:f3:b0:fa:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:86:78:7F:B2:AE:51:3A:98:AB:F6:61:0A:C3:0A:FC:79:4B:BA
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:59:6f:62:fc:bb:1f:73:b9:90:ba:c5:6d:1b:1b:e1:f3:
a3:6c:95:69:51:ec:f5:7a:d9:96:07:42:95:11:6a:3b:d0:a4:
fb:7e:51:b7:ac:c7:10:6b:c1:a4:76:49:71:1f:32:01:9a:7a:
08:b7:74:f8:51:07:82:34:3c:c6:4c:7b:52:08:82:a6:f8:55:
e7:52:58:3b:c4:0b:20:e2:38:1c:ba:ec:e2:8e:12:5b:bc:86:
09:f8:70:69:e1:db:75:f6:5c:06:40:9b:97:5f:22:ca:a7:a9:
bb:97:7a:0c:83:a9:d4:a1:c3:49:e2:dd:cd:c7:5c:0d:61:c2:
53:16:b4:d4:c0:25:ce:ba:9d:16:48:f3:95:1c:d2:1e:db:90:
97:5c:c8:19:a4:47:72:7e:bf:5c:af:59:20:01:02:2b:ed:f3:
6a:e8:dd:9e:39:24:eb:47:65:34:e5:96:62:e7:c4:77:6e:53:
9b:50:dc:9d:0a:2d:be:54:10:f5:80:d3:51:c7:05:22:98:26:
04:b1:af:74:e2:28:86:aa:48:0a:3b:ae:e0:90:38:9d:17:49:
d4:1b:4f:50:18:a3:f7:eb:b5:6a:f2:41:52:91:9b:f5:97:00:
c3:d8:d3:07:f9:ef:1c:59:66:f3:11:88:9c:2d:71:29:a0:1f:
bd:90:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:09 2025 by rpki-client