Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier: vuLU7JqO3ouuPVdA74l8VadSfw7+IvGZ44dUIWGRjgM=
Subject key identifier: 99:C1:8B:38:47:4B:79:3D:D2:3A:3E:EB:1B:46:02:99:5D:63:E3:02
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial: 01967ED8C0FEDC1FF56EF42ABFB496F197CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number: 09A1
Signing time: Tue 29 Apr 2025 00:00:56 +0000
Manifest this update: Tue 29 Apr 2025 00:00:56 +0000
Manifest next update: Wed 30 Apr 2025 00:00:56 +0000
Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: XXgJoXIfEfktZwS4Gjxpvbr/SVNRI7NMNfZk9ECnlWk=)
2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:c0:fe:dc:1f:f5:6e:f4:2a:bf:b4:96:f1:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Validity
Not Before: Apr 29 00:00:56 2025 GMT
Not After : Apr 30 00:00:56 2025 GMT
Subject: CN=99c18b38474b793dd23a3eeb1b4602995d63e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:0b:74:33:31:98:52:9d:5b:c0:98:e7:3b:
26:94:b5:29:60:78:da:60:c3:13:01:12:6c:ae:13:
4d:61:11:2d:12:8f:b9:95:d6:7a:74:66:cf:4a:e1:
e9:1a:55:e7:a1:1d:b9:35:a8:e0:ad:24:d0:cc:58:
d6:a7:c0:d9:4e:ad:bd:2e:0b:b3:04:0a:05:b1:a5:
52:e8:1d:e9:15:ab:ac:7f:87:bd:70:4e:2d:5a:8c:
89:dc:10:8b:f2:0d:d0:17:64:48:48:5d:fd:e1:49:
0c:94:2a:9b:e2:30:ae:97:13:df:a8:40:69:e2:b1:
57:12:48:6a:67:6d:f4:86:08:98:40:d4:b6:8b:cc:
41:71:0c:cf:36:e1:64:40:74:96:dd:56:eb:93:15:
3f:01:66:6a:5e:e8:d4:09:11:14:b2:a9:c8:56:35:
80:69:96:e9:0e:d5:4d:7a:1e:b1:94:c1:dd:20:32:
1c:27:4a:a0:42:02:16:f5:cc:05:95:4e:ed:55:e3:
d9:da:84:2b:81:11:0f:4f:28:df:78:c9:05:01:73:
d5:95:6d:e5:91:ad:77:26:3c:ff:9e:74:d4:da:9a:
26:7a:81:c1:94:3a:c8:91:a0:c5:33:4e:2c:3f:96:
2c:b5:f8:84:67:69:d1:4b:b6:2b:28:6e:00:8b:7a:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:8B:38:47:4B:79:3D:D2:3A:3E:EB:1B:46:02:99:5D:63:E3:02
X509v3 Authority Key Identifier:
keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:2e:45:f2:87:ba:9a:c5:27:23:52:bb:81:88:f4:fb:0a:
72:88:04:93:ee:b0:29:b9:ce:e2:2a:a8:05:45:4e:dd:1c:07:
6d:6a:b5:81:2c:4d:d8:77:97:e5:4c:29:66:3a:2d:52:18:e0:
2f:3c:15:35:01:bf:fc:f0:b2:21:5e:ce:f9:36:69:aa:6f:ae:
90:8e:e0:0a:ce:60:7b:07:b9:f7:89:90:66:53:97:00:28:13:
13:8a:e5:68:26:46:72:94:8d:99:bd:2d:69:f9:2d:2c:5c:68:
50:e4:ea:db:eb:75:d3:64:40:51:33:88:2d:25:eb:95:96:74:
79:1c:bb:50:4f:d7:08:1b:e9:5a:a8:dc:18:70:7c:9a:00:ac:
d9:38:a3:88:fd:76:01:6b:d1:31:c4:d8:3b:15:eb:32:9f:c3:
ff:61:63:05:51:35:96:ce:ae:eb:ca:0e:95:44:25:d7:ca:39:
2d:2b:fd:48:0b:a7:a2:f0:c9:2e:21:e0:e4:3e:ce:15:5c:5d:
1d:9e:63:52:62:6d:10:a8:41:69:30:36:1f:a6:95:3e:7b:c0:
89:89:21:24:bd:fe:0d:55:24:2c:6d:9a:3a:ec:7a:8a:37:a9:
29:79:d7:07:79:47:73:02:ca:06:c0:37:8d:b7:d7:b4:06:da:
e8:9f:1f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:34:02 2025 by rpki-client