Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: mBbzuEDgNKC9BNdoKJZ7fD3S2fAa8ueZ4zPNySW0OIc=
Subject key identifier: 12:F9:F6:9A:54:77:DF:77:1B:BE:D0:44:13:72:73:95:F9:6F:00:78
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 0196843578A7F38CF215A7AAF0532486A521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 01:00:18 +0000
Manifest this update: Wed 30 Apr 2025 01:00:18 +0000
Manifest next update: Thu 01 May 2025 01:00:18 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: s3QUcVW6+Gpgt8t48Q2tsSfZF3dP2fdbB+GbEX4mrbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:78:a7:f3:8c:f2:15:a7:aa:f0:53:24:86:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Apr 30 01:00:18 2025 GMT
Not After : May 1 01:00:18 2025 GMT
Subject: CN=12f9f69a5477df771bbed04413727395f96f0078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:d0:da:16:c9:f9:93:3f:91:a6:e0:3e:25:
e4:bc:89:fa:5c:35:04:ed:59:da:ff:50:21:b3:71:
64:39:47:a3:2f:3d:da:8a:a8:07:dd:f6:ee:26:7b:
3c:2c:a2:66:0a:7a:b1:59:b0:bd:f7:17:88:ba:d5:
68:f4:1a:63:64:6c:86:60:57:01:ae:03:f3:02:de:
fd:b8:8f:47:c5:3f:bc:f4:99:67:a7:44:5e:71:77:
95:2e:d8:60:1d:3d:bc:08:c6:28:e0:3c:9d:7c:5c:
31:73:75:8a:2b:ae:fb:ce:89:d1:22:bb:61:d8:2a:
6e:f5:c9:dc:19:72:08:25:24:c0:54:69:a3:6c:c3:
44:4c:e2:42:8c:d9:ec:bb:f2:7d:d1:5d:7d:04:2d:
30:a6:88:f1:b2:8e:7e:4d:cb:e0:d0:9c:48:c9:55:
0f:c5:95:18:9a:38:c1:e8:e8:33:f4:44:e7:65:04:
09:da:c4:3a:70:15:9c:26:da:2d:4c:8d:99:a1:c9:
5a:78:cd:d0:b1:90:2f:40:39:a0:1d:e7:b2:9b:8d:
39:fd:3a:51:72:5f:3d:f3:a2:47:3d:0c:48:05:57:
a3:40:31:c5:a1:a3:8e:5b:90:8d:38:5f:14:82:e0:
70:c0:fd:4a:89:73:0b:d6:f4:72:98:ed:bb:c4:d3:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:F6:9A:54:77:DF:77:1B:BE:D0:44:13:72:73:95:F9:6F:00:78
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:b9:c2:3d:75:64:f0:b8:49:74:a2:43:d8:e3:0a:e8:0c:
0b:b3:57:bd:0d:f3:3d:4f:ec:b8:85:24:4b:7d:d3:64:32:1f:
e5:d9:b6:a9:76:91:b5:da:24:02:25:6e:ba:45:21:4d:c5:4f:
14:31:a2:b6:ed:16:b9:dc:16:f1:ab:15:4e:54:cf:86:87:6c:
d4:41:6e:19:b1:86:5d:6c:20:46:6a:56:7f:c3:a9:e5:41:96:
8e:d8:5b:01:81:23:9f:f9:da:34:26:07:48:cc:b9:86:22:bc:
29:f8:35:f6:0d:eb:a6:8a:e4:a2:cc:54:1e:30:ea:73:43:b1:
99:b0:75:97:74:41:e3:43:88:9d:67:98:0c:49:4e:04:79:e6:
d8:29:7f:d0:3d:ba:eb:81:cc:6e:88:62:fb:96:0e:39:2b:e7:
49:c1:0f:93:1a:6c:9a:76:6f:c9:26:09:0a:9f:50:8e:cd:11:
27:a1:02:f6:2d:e6:d4:55:e2:4a:4e:96:af:e4:95:dd:b6:99:
85:c9:60:f8:cf:32:05:30:4a:a4:64:0c:a0:73:32:7b:51:b9:
7f:d1:98:fb:f6:fa:63:b3:d1:fd:8c:34:40:92:08:83:d5:37:
70:b5:f9:a1:e0:25:c4:dc:2d:d5:5f:93:0f:e1:c5:cc:37:c0:
77:7c:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:14:59 2025 by rpki-client