Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: ecFqEFRwuLdUg9/xfGSSQ6qZTp3g88qyN/sLrSRs4bc=
Subject key identifier: B5:B4:90:0D:CE:35:D3:2B:1E:56:F9:64:F0:BA:6C:F7:B2:4F:97:99
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 01967D2156000CF3A8CDB79EA2D9EEFFA8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 115E
Signing time: Mon 28 Apr 2025 16:00:58 +0000
Manifest this update: Mon 28 Apr 2025 16:00:58 +0000
Manifest next update: Tue 29 Apr 2025 16:00:58 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: k2Mk8vfY8iedAIksVxHkQlr14sYsZ8LFvRU3XPq7zHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:56:00:0c:f3:a8:cd:b7:9e:a2:d9:ee:ff:a8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Apr 28 16:00:58 2025 GMT
Not After : Apr 29 16:00:58 2025 GMT
Subject: CN=b5b4900dce35d32b1e56f964f0ba6cf7b24f9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:8d:05:19:36:53:b4:09:27:4c:d4:c2:c5:
1e:00:43:b3:57:a9:7d:0a:20:8a:09:20:e1:35:a9:
8c:43:2a:9f:99:a0:4a:8d:22:f2:ea:ea:2d:73:ef:
92:de:f3:ea:d7:fa:f3:23:31:4a:96:cb:ce:4f:73:
cc:ea:56:13:db:1f:f0:9f:9f:fe:10:88:06:b1:28:
0c:de:ae:9e:c7:89:31:93:0e:14:6c:fd:fd:55:69:
5f:56:af:be:41:c0:37:ad:d9:ee:57:70:ed:a1:01:
23:0c:c3:33:2c:f0:2b:36:50:10:1f:ac:fe:82:a7:
14:49:7d:e8:b9:7e:64:d5:b2:56:7d:5e:43:33:4c:
82:5c:bf:7d:09:43:6b:7d:27:fa:51:f5:1f:d5:b1:
74:50:5c:cc:e8:2c:07:43:ae:30:8d:3b:dd:b1:e3:
32:fe:e4:03:ee:4f:13:50:37:ec:50:f8:c0:7e:bb:
ff:95:5f:51:b9:2c:df:2f:ec:8f:2a:6f:f2:49:26:
10:42:b5:83:11:1c:1b:8e:36:5e:5d:68:27:76:6e:
51:24:ba:32:62:a5:78:62:30:c4:e8:16:4b:c9:42:
1a:6a:b1:27:98:9c:7e:af:c9:86:6f:14:67:25:2a:
2c:3a:3d:b4:ce:4f:3b:22:a4:00:3b:42:4f:d6:86:
c5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:90:0D:CE:35:D3:2B:1E:56:F9:64:F0:BA:6C:F7:B2:4F:97:99
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:a7:9e:eb:00:79:b2:f2:76:00:51:80:79:ed:cf:88:62:
ff:fb:ae:eb:53:9c:ec:bc:a0:9f:a0:71:85:36:c8:38:46:92:
19:7f:c2:d7:2e:86:9c:c1:52:3e:a4:d6:0e:c1:31:02:c1:b8:
3f:25:2f:b2:d0:08:36:e8:72:0c:1b:2c:2d:44:cf:eb:73:c9:
b7:f9:b5:db:6c:ef:5b:c2:d0:55:64:68:e6:b6:16:79:77:e0:
3f:e4:c4:49:09:50:7b:cf:4b:08:47:90:95:e1:a1:62:a0:5e:
e7:60:f2:97:c2:fd:35:83:91:28:e8:5f:12:a6:92:fb:7c:af:
64:99:af:62:5b:13:2e:f6:7e:38:28:2b:9b:9c:6c:3f:44:5e:
21:d8:2b:4a:ad:c1:fe:10:d7:20:b2:8b:20:c5:7d:d7:a0:12:
4d:61:ea:2c:65:0d:60:73:f2:39:e4:0f:0c:2f:2d:1f:31:7e:
5c:af:8f:cd:50:25:9e:67:97:a2:4f:19:e8:4b:28:18:ac:0d:
ba:9e:c1:e6:75:03:43:71:50:f6:f6:2a:45:ef:6e:c9:10:c0:
73:58:01:a4:19:66:9d:ba:31:43:bb:cd:bc:97:25:28:16:89:
0d:05:b9:09:e9:fd:f2:18:87:75:f0:e7:70:13:dc:4a:bb:96:
c6:a2:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:29:30 2025 by rpki-client