Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: 6pYXd3XB4hvf2Ga8MdAWodF2xjDYFiE+6I6dEgC4oik=
Subject key identifier: A6:57:53:1A:33:D2:81:15:13:35:CB:20:31:B6:F7:45:70:30:35:C6
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 019688EE256A238E8BF20CA725486FE39A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 23:00:30 +0000
Manifest this update: Wed 30 Apr 2025 23:00:30 +0000
Manifest next update: Thu 01 May 2025 23:00:30 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: TX9/kJSAMsLXcSn6MiXu4T6l7CZpReoaE1cXKlnbevY=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:25:6a:23:8e:8b:f2:0c:a7:25:48:6f:e3:9a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Apr 30 23:00:30 2025 GMT
Not After : May 1 23:00:30 2025 GMT
Subject: CN=a657531a33d281151335cb2031b6f745703035c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:2d:ae:32:ad:c3:e2:52:6b:8b:d8:86:bc:
50:3b:81:db:13:b2:ec:91:5b:af:35:6d:4f:3c:09:
e2:63:88:f1:b4:c0:40:f9:4d:a9:3a:d4:e1:d7:bd:
62:91:a0:24:c8:ce:8b:28:1c:ce:92:ed:72:4d:b9:
0c:3e:94:25:82:51:70:a6:3a:3a:f6:21:d9:01:da:
0a:17:a9:f2:83:4f:0a:2f:bc:f2:e1:b6:e7:4d:8e:
e7:be:20:1d:a4:12:55:47:30:ed:10:c1:9e:87:40:
da:d7:72:e9:fd:19:8e:64:7e:ea:02:cd:00:e7:7b:
7b:a0:40:87:47:92:bf:66:66:54:0d:b5:14:94:e9:
32:0e:17:af:82:95:10:7d:81:9b:63:47:f0:ee:08:
c5:a6:e6:5d:8f:f2:4b:20:37:6f:da:b9:5b:d3:b8:
4a:f5:4b:71:13:19:7c:15:cd:c3:c0:7f:c3:59:af:
82:19:04:10:a8:9c:8c:f1:3e:94:98:85:9f:ba:16:
b0:b6:e9:17:9a:42:d2:13:79:35:00:9a:0b:2f:35:
ed:6f:cf:3e:0e:51:19:22:16:83:a6:7d:84:8d:ae:
ea:cb:a5:87:e3:7c:a0:f4:79:c6:b6:74:0e:bd:e9:
bd:44:0d:e7:88:0b:6f:da:e9:02:28:48:26:16:b3:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:53:1A:33:D2:81:15:13:35:CB:20:31:B6:F7:45:70:30:35:C6
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2f:23:f9:c4:0d:6b:24:bf:03:2a:5e:ac:54:97:e6:85:35:
17:3e:b6:b0:ac:1a:ed:d7:8f:b6:6c:a7:3b:43:a4:b7:2d:95:
67:52:28:ff:b1:0d:6a:ca:28:f1:4e:a6:d4:a3:88:b0:ec:f6:
18:eb:fe:fb:c5:1c:37:5d:f7:ee:7d:89:16:a0:2f:43:10:27:
8f:6b:eb:d7:0e:e1:70:83:b0:f9:1b:f3:a7:be:f0:df:04:73:
a4:e6:fd:05:ae:0d:16:f1:16:80:d0:23:6f:07:85:bf:a6:85:
cd:e7:e4:4d:ab:78:e8:ea:24:9b:ff:88:4a:92:6f:b3:a5:78:
f7:43:fc:6a:73:0a:00:7c:c2:c4:73:5e:7c:21:bf:83:bc:21:
c7:b8:7f:db:0b:3a:ff:6b:9f:4d:4a:f5:e1:09:74:c6:a1:2c:
36:98:fd:74:cd:ae:12:79:91:57:b3:57:66:d5:e3:f9:0e:a2:
ae:14:c2:00:8f:0f:4c:7d:cf:8d:dd:c3:7a:34:4a:50:7c:37:
ca:ee:05:8b:e2:95:90:1a:5c:ca:f7:38:f7:9c:12:a6:18:19:
c2:84:6d:d1:f0:05:78:4c:98:cb:1f:20:9d:44:99:b5:f4:dd:
dd:17:12:92:1b:cc:51:31:da:de:78:9f:6d:2c:60:77:f4:76:
e8:42:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:05:27 2025 by rpki-client