Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: 34as+sUWXVHNe4tjheOQU45b4eFEFiPKNFhcYsUoUWc=
Subject key identifier: 11:93:6D:74:37:00:BE:EA:42:55:67:A7:CC:A0:73:A4:6B:9D:DC:56
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0196741DD768ECD1CEE410BC707624B02C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 22:00:34 +0000
Manifest this update: Sat 26 Apr 2025 22:00:34 +0000
Manifest next update: Sun 27 Apr 2025 22:00:34 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: AbytawDDaGw6QlQiq7uEd/4BbxyIaKECxhxFKDROf50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:d7:68:ec:d1:ce:e4:10:bc:70:76:24:b0:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Apr 26 22:00:34 2025 GMT
Not After : Apr 27 22:00:34 2025 GMT
Subject: CN=11936d743700beea425567a7cca073a46b9ddc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:d4:f9:ce:c7:1c:5f:67:fa:24:2b:2c:ef:
e1:34:90:d6:2b:23:17:1a:39:0c:d4:b5:dc:52:a9:
74:50:16:04:69:f9:84:55:a2:bd:97:3c:e2:65:49:
de:1d:5c:37:cd:1c:59:39:36:7a:85:dc:77:4b:dd:
de:40:2d:be:a4:13:4b:09:1b:03:25:27:5b:91:4b:
52:53:de:b5:64:1a:ec:8c:2c:6a:5c:b1:7f:9d:c9:
8d:5b:aa:44:46:18:2e:dd:23:c5:82:47:1d:f0:c6:
cc:b0:04:72:24:7a:85:bf:66:cc:37:fe:0e:b9:30:
c8:d4:26:b0:be:61:c6:81:42:eb:c9:e6:2c:60:78:
7e:58:35:a5:f4:87:c9:3d:c0:ed:7f:e9:f5:9c:c4:
2c:c6:e5:b2:f0:90:0f:8f:6a:ab:b5:38:28:80:29:
6f:18:b4:67:4a:c5:09:8f:82:5c:da:e1:6d:99:36:
c1:ba:ed:e8:d7:53:d6:d3:26:b6:16:75:88:04:e1:
a2:83:08:2d:ac:d4:c2:fe:d6:ed:a7:80:7d:29:92:
47:3e:1c:cc:87:07:a2:45:53:6e:f5:7e:2e:03:28:
bd:a5:f7:21:0b:d1:d3:89:b9:cd:d8:e9:2e:a8:f0:
ad:39:5f:f2:d4:dd:ad:af:2b:4c:2a:c4:34:2d:82:
68:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:6D:74:37:00:BE:EA:42:55:67:A7:CC:A0:73:A4:6B:9D:DC:56
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:2a:c1:46:8e:80:d0:0d:e5:02:3c:ca:75:6b:5c:cf:60:
17:1f:02:88:6f:00:6c:c7:32:ff:b6:80:b6:b9:1d:ff:5f:82:
8c:32:6d:6f:47:22:db:ff:29:eb:33:52:01:07:04:b4:24:56:
d3:56:07:1f:01:e4:a2:2e:38:7e:3e:40:fe:4c:06:36:3d:ff:
3b:be:e7:4a:ab:fe:a9:e9:29:6a:50:d3:3d:83:31:3d:96:8b:
0d:02:c5:4a:88:ab:fd:f5:a2:1d:c2:89:86:07:c5:dd:bf:d6:
ab:db:72:8c:67:ac:e8:7e:c7:ad:02:2d:93:62:23:74:28:cc:
8e:a6:31:77:22:54:ac:67:d5:c6:3e:a0:93:49:ba:fc:77:4a:
82:a2:9e:a2:2d:e6:54:5a:0a:4a:f9:15:3a:46:85:d3:ef:df:
df:af:b2:6a:d4:b4:f1:d5:37:f6:6d:8e:b5:4b:1f:fc:d0:50:
dc:5d:10:f0:e9:cd:c6:ba:15:a1:7f:ee:4f:e0:64:65:35:6d:
77:c5:56:ba:9e:dc:b2:08:64:3e:7c:00:a4:d9:88:10:75:65:
d9:2c:d4:a8:08:c6:ad:5a:17:7f:f1:ea:f2:4a:74:94:2a:a8:
89:ba:97:af:59:74:16:89:cf:9c:b2:9b:06:0b:19:5a:42:7d:
61:12:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:36 2025 by rpki-client