Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: aHF/7gYExcoY3n83ThHdXwQqs1c+l7tPwjGH80lPflU=
Subject key identifier: A6:C7:C8:FB:66:F5:18:73:75:EC:1E:9A:DA:52:3A:B5:ED:E6:44:D5
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01967E33AB9E669B55B3DC26B7CD8634CBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0E21
Signing time: Mon 28 Apr 2025 21:00:37 +0000
Manifest this update: Mon 28 Apr 2025 21:00:37 +0000
Manifest next update: Tue 29 Apr 2025 21:00:37 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: Ez278UKhM8h4Za65gur3kNAYzjHxwxjPoYCrjEkBiR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:ab:9e:66:9b:55:b3:dc:26:b7:cd:86:34:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Apr 28 21:00:37 2025 GMT
Not After : Apr 29 21:00:37 2025 GMT
Subject: CN=a6c7c8fb66f5187375ec1e9ada523ab5ede644d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:1a:ce:24:24:da:3a:fe:a0:c6:2b:bf:12:
b9:cc:e4:81:81:87:66:0f:04:2a:dd:af:df:70:88:
1d:5e:00:51:77:ba:9a:19:d2:25:56:a9:81:ee:b5:
7d:39:99:66:51:b5:1c:f0:05:d1:e3:70:8f:5c:0c:
40:27:ee:11:87:04:c8:66:4a:64:4a:3f:fb:45:72:
fc:2c:46:7c:12:9c:8a:ff:bd:86:59:b7:04:5a:d2:
bb:6d:ed:09:57:a9:cf:b2:92:21:56:34:d4:1e:0e:
c1:28:5e:24:57:01:aa:74:47:fd:78:2b:7a:6e:20:
39:b8:11:88:e4:89:e8:29:6a:70:d7:6a:cd:02:87:
e8:bd:c4:47:c8:eb:c9:4c:8e:1b:e1:81:d9:47:2d:
f4:d4:68:33:2f:9d:65:dd:06:c0:7e:db:72:82:ba:
e1:77:61:73:56:6b:c4:de:a7:aa:9d:17:13:4e:51:
31:f0:e4:49:40:61:7a:86:87:21:95:7e:2c:61:a0:
e4:c2:b4:d4:c0:ef:2f:34:18:49:9d:4f:5d:01:34:
c9:3c:bd:91:b2:be:99:fe:ff:4d:31:d1:d9:75:95:
b6:13:e2:6a:bd:b1:4e:cd:b2:a7:1f:15:e9:5d:5f:
54:56:98:71:96:cc:98:98:55:13:90:83:d4:38:6b:
ac:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:C8:FB:66:F5:18:73:75:EC:1E:9A:DA:52:3A:B5:ED:E6:44:D5
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:83:62:4b:1e:6d:a6:ee:47:38:fc:b1:ab:aa:e1:e8:13:
72:cb:6b:d0:8c:74:d8:be:70:99:9c:1d:60:dd:14:6a:01:44:
65:28:dd:fe:56:d5:fd:2a:6a:59:04:5e:72:2a:df:28:cf:c1:
c2:29:58:a5:6d:cd:59:4a:d7:39:57:48:ca:71:a4:bc:0d:70:
b3:97:aa:51:6a:05:13:44:49:ec:8a:ec:16:93:b3:76:a2:bb:
78:a5:41:2d:a4:cc:fb:69:6e:ce:1c:89:db:48:4d:ed:7a:8e:
ae:c7:79:96:e7:ff:df:a4:a0:a0:87:4e:f0:46:55:b6:15:2a:
f6:eb:95:42:ba:69:4a:2e:21:88:b6:a1:3a:54:ea:13:b9:46:
48:3c:8f:46:ee:82:59:7a:28:43:1e:2b:34:e5:5a:0e:26:96:
74:22:38:3b:58:42:e0:e8:18:31:4a:0e:2a:9f:e0:02:eb:58:
3a:38:2a:20:d2:98:85:50:b1:3d:c2:a4:44:9c:aa:a4:14:3b:
1e:99:6f:b4:78:10:a9:af:d0:7b:35:8a:ec:d4:5f:05:b0:a9:
4b:ab:4c:3f:eb:e7:be:5a:65:82:7c:64:b8:a9:07:6f:8b:3e:
87:45:42:fa:b1:4a:81:5a:82:cf:29:37:48:85:1d:4a:16:f8:
44:f2:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:52 2025 by rpki-client