Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: 3TjJiaB+2o/Q98/euYRg6T7bdPjAU+oJxQu1758OXi0=
Subject key identifier: B2:3C:67:CA:D7:C5:08:DE:30:52:20:2A:B0:D3:2B:74:4D:CD:71:FF
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 01968DA71170463A35614E4C028CE0264E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 151E
Signing time: Thu 01 May 2025 21:00:58 +0000
Manifest this update: Thu 01 May 2025 21:00:58 +0000
Manifest next update: Fri 02 May 2025 21:00:58 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: PxqBDc7ZB4bAUJxhSGC9XoY5RAqU0UtYYpGWa6cR7F8=)
2: zuoKD31gcVRQUR2NG9ebmxdQlUY.roa (hash: 6Yq+wArquNdBN7wmHKv+2fAgO8zmiD+Zj0gA9mY9jzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a7:11:70:46:3a:35:61:4e:4c:02:8c:e0:26:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: May 1 21:00:58 2025 GMT
Not After : May 2 21:00:58 2025 GMT
Subject: CN=b23c67cad7c508de3052202ab0d32b744dcd71ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:1a:2d:11:31:24:e6:5c:ef:27:d4:a0:80:
1a:a4:2c:cb:03:df:b1:21:08:14:3d:38:e0:24:20:
59:0a:15:c2:2f:90:59:40:ea:6d:e5:d7:6a:7b:c2:
bf:a3:34:ad:dc:59:78:47:ba:e4:fc:f2:bd:95:86:
84:48:d1:57:ba:20:eb:50:cb:b9:08:2a:31:67:78:
47:b2:79:5f:3b:ee:e0:ae:41:6f:69:ac:35:26:9f:
61:ee:01:19:12:26:d5:7e:b0:17:32:3a:71:ea:bc:
75:b4:4a:8c:01:09:01:c0:07:d1:0f:1d:51:c8:de:
c6:f7:07:c5:8e:e6:d5:e4:ec:11:5e:c4:71:1c:4e:
8e:8c:d8:4c:65:9d:b8:9a:e8:64:6f:80:cb:8f:84:
8b:05:00:5e:cf:15:7c:73:b0:d1:f1:f0:9a:97:28:
da:cc:d2:ec:00:54:41:a3:67:76:55:27:46:c9:19:
e1:63:43:a4:cc:db:84:da:3d:c0:6e:60:b0:45:cf:
a7:e5:76:56:ea:2b:21:2f:19:6f:dd:39:96:c6:a1:
f7:15:e6:b5:5d:04:fb:6f:65:94:d6:c2:5e:ed:90:
70:6e:df:29:f1:93:e4:a7:c1:47:e6:06:9a:24:2a:
a6:3e:f2:cd:1e:94:5b:f0:38:a1:fb:3b:46:9d:ba:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3C:67:CA:D7:C5:08:DE:30:52:20:2A:B0:D3:2B:74:4D:CD:71:FF
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bc:20:8c:8e:75:fd:08:a6:e7:25:bd:f7:6d:30:90:c5:f5:
e5:f8:42:aa:09:e0:6e:fc:f0:d7:77:6f:ef:e8:f6:52:84:9c:
11:a2:1c:35:cc:0f:3c:3a:9d:25:3a:e8:74:39:d9:fc:9a:3c:
2b:09:e9:57:7f:be:8e:c4:99:f4:80:c8:80:05:c6:c5:72:08:
62:34:88:05:10:af:b0:43:ac:2d:62:f5:46:f8:06:aa:29:56:
73:b4:d2:b6:23:8a:bb:1f:d9:f1:57:de:a0:f5:c9:4b:42:6b:
95:23:1e:31:2f:26:9e:3c:75:e0:a3:5e:82:1b:52:00:3c:96:
78:48:88:23:1b:e8:03:4c:d2:6c:85:38:d6:1f:7e:cd:e4:50:
10:7c:80:8b:72:f2:85:2a:96:75:42:f1:87:6b:93:84:b9:3c:
47:93:9d:f8:0b:e6:8e:68:52:98:ac:b3:e4:7f:6f:9c:02:2d:
dc:dd:37:8b:36:29:1c:a6:44:a6:ef:14:5a:f8:a5:b3:bd:5c:
30:9e:b5:33:dc:5f:fb:43:42:a7:e6:1b:d3:25:f4:cc:85:23:
24:f6:a0:06:4c:cf:df:be:25:4a:42:9c:00:5a:0d:0c:65:45:
68:b6:c9:a8:b9:f3:e5:f0:05:43:dc:22:12:d1:26:e6:e2:a8:
9b:68:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:14:48 2025 by rpki-client