Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File: BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier: LRuspFQDERpZg2RRp/MQ1mIQXuwwQYRgKAf3+uH88F8=
Subject key identifier: AF:BF:93:86:89:27:2F:74:49:97:FB:0E:3E:2C:65:04:63:E5:7B:E8
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer: /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial: 01967A56A62217BE33A9EF6D1DBDF2BC461C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number: 0BA9
Signing time: Mon 28 Apr 2025 03:00:20 +0000
Manifest this update: Mon 28 Apr 2025 03:00:20 +0000
Manifest next update: Tue 29 Apr 2025 03:00:20 +0000
Files and hashes: 1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: llbDRSghFW2PPf6isU8f2vTcERYBNrDscbUvFAAQ728=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:a6:22:17:be:33:a9:ef:6d:1d:bd:f2:bc:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Validity
Not Before: Apr 28 03:00:20 2025 GMT
Not After : Apr 29 03:00:20 2025 GMT
Subject: CN=afbf938689272f744997fb0e3e2c650463e57be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:31:aa:bd:8c:24:72:2f:d9:93:c0:a7:e4:
3d:3b:b2:4f:06:62:6b:63:74:59:2e:98:64:57:29:
02:9c:70:2c:74:48:a6:9a:2c:0a:d6:9e:d0:85:a5:
87:81:24:f4:c7:b7:c8:40:5f:f9:a0:70:8d:d9:ea:
0e:2d:99:07:28:c6:84:6f:66:09:20:e1:f7:e3:22:
6a:b9:f7:6a:6d:b2:69:aa:7e:f3:c6:9a:8b:f0:82:
da:6f:78:78:54:d7:b2:a6:77:21:26:6f:1f:ad:ec:
8c:21:ac:56:0a:36:ed:ad:e3:03:3b:9d:ae:6f:da:
28:39:17:2d:d4:d3:1e:2f:2f:4e:b5:80:52:3a:9c:
5e:9f:36:29:96:cc:01:06:a6:de:93:16:6d:88:f7:
97:56:df:69:17:98:6d:a8:44:c3:30:2b:b5:72:73:
c9:bc:ab:69:a9:92:61:7f:d1:15:00:cd:de:01:6b:
aa:48:82:dc:74:0d:dd:a6:65:20:43:ce:aa:39:14:
84:9c:55:a8:c4:44:b6:85:7e:e9:58:fc:3b:c7:01:
6d:a7:ef:c9:65:aa:ab:8c:28:68:e4:a9:04:ca:f0:
4b:a4:4f:fa:cf:bc:17:e1:0c:38:71:23:fe:01:95:
a1:a1:a2:9f:90:41:f9:a9:58:45:da:da:4d:f7:7d:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:93:86:89:27:2F:74:49:97:FB:0E:3E:2C:65:04:63:E5:7B:E8
X509v3 Authority Key Identifier:
keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:56:aa:00:11:0c:24:0b:f1:16:39:5f:b3:f0:e2:b2:90:
f3:29:e5:3b:be:fb:14:a7:de:ad:6d:58:8a:88:34:22:59:ae:
36:bc:51:ce:41:45:2d:b3:d2:5f:82:59:b3:de:e1:56:6b:11:
72:50:b6:60:f8:90:9f:f0:40:88:00:98:69:83:b4:86:d2:3e:
99:b3:c1:a7:f4:6a:81:94:ef:18:0c:70:7d:b1:8f:2f:83:c8:
b2:05:39:54:ee:0a:81:44:5b:19:2e:65:94:cc:c0:fb:c1:4c:
c0:5e:d6:7b:e8:af:28:21:83:63:02:d5:03:c4:28:f7:c2:a5:
fd:3b:53:db:51:ed:74:5f:eb:42:a2:4b:14:78:cb:38:72:b8:
8c:5e:7d:90:df:08:1c:49:a6:16:d8:51:23:b5:9d:7b:8e:9b:
46:c8:c1:3e:eb:62:71:d8:2a:c1:8c:fa:df:ed:c4:6e:23:e9:
a7:83:19:8e:22:c7:b1:c6:ec:22:06:ec:d3:b1:e8:3d:2a:a3:
c6:29:75:e2:bf:29:75:c1:5e:b9:9b:aa:ae:ff:27:97:af:3d:
9f:9d:30:ef:02:fc:84:c7:89:87:73:fd:cb:3e:aa:c9:a9:dc:
6f:4e:c3:59:1f:9e:cf:c2:4e:79:21:a8:f4:f7:83:91:90:f6:
a2:76:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:14:42 2025 by rpki-client