Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: VFAcpxCnTOthI3dKxGD21oGijQ6vhC5BcIU5HZb+gbM=
Subject key identifier: 90:6A:C2:9F:8C:93:B6:1D:5D:D1:8D:69:00:57:B8:37:E3:45:6F:56
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 01967F7D2A29B9A15D3AA9F776F5C24BE609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 03:00:31 +0000
Manifest this update: Tue 29 Apr 2025 03:00:31 +0000
Manifest next update: Wed 30 Apr 2025 03:00:31 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: 32tJRhnwGmhL6LDdnT4Ty4abRxk5hmvjUT5tmbm8+6o=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:2a:29:b9:a1:5d:3a:a9:f7:76:f5:c2:4b:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Apr 29 03:00:31 2025 GMT
Not After : Apr 30 03:00:31 2025 GMT
Subject: CN=906ac29f8c93b61d5dd18d690057b837e3456f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:d8:88:11:5e:38:d7:e1:93:c7:18:93:23:
09:fc:02:d6:76:36:b6:4b:d4:d7:23:41:8c:96:65:
fd:c9:3c:ec:ce:7e:c1:bb:76:07:d9:8e:6b:9c:01:
57:24:56:2f:cb:fd:00:67:63:f8:26:84:07:04:53:
49:f6:e1:d2:ae:7f:12:08:b3:85:0c:e7:44:0f:78:
b2:72:d6:fe:2b:ea:4b:d0:a0:7d:24:63:d4:e3:f0:
a6:2c:6e:cd:21:a8:26:7f:32:bf:fb:b7:3f:7e:94:
0c:fd:2f:0d:fa:ed:12:17:29:c1:0b:e8:30:0e:e8:
3e:57:53:28:2e:27:01:4d:96:e1:cf:9d:8a:49:55:
50:1f:57:83:7f:4c:cc:3f:a4:c8:e9:d1:94:1a:ef:
10:49:e1:af:8f:a2:5a:ee:da:fd:c3:3e:e4:6a:23:
ff:57:90:48:5a:0f:11:85:19:48:4d:e6:61:f5:94:
7b:b8:87:3e:9a:a0:35:2c:8c:5c:12:e5:8a:13:56:
f6:8e:b8:90:a1:d8:44:4b:a4:21:44:ec:d9:89:f0:
0e:e2:62:01:83:04:e2:f4:42:99:b1:75:98:26:f1:
fa:80:1c:86:3f:75:34:b3:dc:57:da:50:b8:87:1d:
42:6a:b7:ee:ec:fa:e6:40:bc:f7:82:4c:97:4a:4d:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:C2:9F:8C:93:B6:1D:5D:D1:8D:69:00:57:B8:37:E3:45:6F:56
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:63:9e:3d:52:12:1d:0f:4e:49:23:28:7c:a4:29:e4:2e:
70:ec:88:af:af:13:ae:fc:98:bc:cb:80:41:4c:1a:f4:51:92:
cf:bb:ac:97:87:08:31:88:64:8b:63:7c:45:44:f7:dc:67:17:
19:8b:07:bc:1b:1c:69:f3:3b:44:90:26:48:16:66:49:58:9a:
6b:7b:4e:16:5f:62:ab:dc:bc:53:1a:e1:be:6c:44:6f:82:6f:
1a:2d:02:f5:b9:73:a1:ad:ce:61:ce:6e:c5:a8:ec:e6:f3:75:
45:75:6b:79:37:3e:bb:b6:a4:9f:84:c7:82:f4:85:36:ea:91:
a2:83:58:28:86:76:4c:ec:3d:5a:de:ed:35:03:34:48:d0:c7:
8a:b0:a7:f8:05:cb:63:a9:c2:f5:c4:3c:af:30:1b:9d:06:6f:
3c:86:bf:c1:59:2c:64:6c:68:f1:aa:06:06:5f:b8:e4:ae:7b:
f1:dc:3e:6f:e7:28:4a:98:1f:f5:4b:97:47:a8:01:0c:77:ca:
f8:de:de:d0:3b:0d:c0:93:9d:5c:94:d6:54:68:34:c7:d9:90:
e2:e8:21:b7:93:2a:0d:8d:77:dd:83:ed:6b:eb:7d:df:b8:b8:
14:82:42:c9:09:00:f4:7c:36:44:c2:06:36:ae:7c:f9:e6:cf:
4c:44:5c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:53:53 2025 by rpki-client