Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File: 14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier: tVeZKZF2E+pfe98vcPE3skXfSYEbLfIEksqAJ5KTBzg=
Subject key identifier: DF:D7:35:F0:CB:4E:0D:D2:9A:BF:EF:43:08:6A:69:AB:37:CA:0D:A9
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 01967679E44D07FE90D979A0D5E39D1AEA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number: 1247
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: 7pZLtd7GNVMQLs0xEeyv9GwerfUWdnSEnbIdXAxAlj8=)
2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e4:4d:07:fe:90:d9:79:a0:d5:e3:9d:1a:ea:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=dfd735f0cb4e0dd29abfef43086a69ab37ca0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:0d:13:1f:07:4a:e0:71:fe:17:47:54:54:
5e:29:f5:f7:2d:16:13:cf:af:77:a9:61:f3:ae:2e:
7b:41:78:34:a1:4c:30:b1:a4:78:a1:38:8a:45:c7:
5c:3c:a2:17:14:7a:b3:e9:4c:f9:80:cb:02:7a:34:
a4:8c:79:c9:b7:f2:4c:d9:fa:1d:ae:1e:8f:dd:91:
c5:95:fc:19:63:5b:71:cb:72:ff:f9:14:db:99:7c:
d2:91:8e:ca:92:82:b9:00:71:01:9e:13:86:11:da:
9a:43:10:d0:05:a5:3d:34:52:7d:ad:94:2c:db:68:
45:8f:51:83:9e:b0:65:41:03:2a:7f:dc:73:db:79:
d1:60:20:ae:d7:20:0c:ce:61:d9:8f:4f:b3:02:59:
96:bd:dd:84:f8:39:ea:12:df:71:a4:a7:39:cb:79:
45:32:d4:e0:4f:4f:58:54:8f:0d:3c:26:1e:6c:4b:
61:a5:94:e2:10:73:cc:ab:8b:8c:ca:c1:f6:8d:31:
1b:53:ef:28:37:ca:c9:55:29:bc:84:74:35:11:e1:
6f:fc:56:11:1a:ae:b2:91:5c:a3:b7:c0:ea:c5:8e:
6f:61:a9:e7:3a:b2:e8:a0:1f:d2:a9:50:1b:a3:fb:
5f:3e:8b:ba:d0:bc:27:8c:52:2e:c3:a4:6d:23:6a:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:35:F0:CB:4E:0D:D2:9A:BF:EF:43:08:6A:69:AB:37:CA:0D:A9
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:22:0e:bc:67:41:d8:c5:79:de:a6:ef:a1:7e:ce:11:76:8d:
ed:6c:43:3e:c6:0e:51:4a:da:61:64:bf:21:d9:74:49:19:e8:
5f:b8:55:64:e1:74:e7:f7:c8:d0:13:c0:c5:21:d4:df:d9:0d:
f4:6a:d4:41:70:16:37:8f:72:b7:9b:b9:42:ac:55:c1:dc:0b:
eb:d1:ab:8a:07:56:a0:71:42:4d:e3:11:0a:72:e4:d3:cc:68:
65:0d:de:0d:f1:9e:8a:73:21:eb:ac:42:18:1f:79:d8:44:ef:
52:6c:5b:31:b1:4e:61:53:9d:14:1b:6b:5e:c2:a3:79:89:2e:
48:5d:46:20:3b:ff:0b:42:a9:96:56:b1:d1:c7:9b:3e:9d:06:
45:c6:05:7c:70:b1:9c:ec:73:21:93:ab:25:31:3b:87:58:54:
c9:f5:a5:9b:89:65:a3:cd:d1:2d:9f:91:3b:86:12:88:0c:5e:
bb:93:93:13:e4:fd:9e:70:37:c1:b1:85:42:77:28:48:a0:7a:
f2:db:0a:9c:7c:a5:3f:fc:e9:94:53:54:75:09:20:fa:f1:88:
2e:ec:86:a6:f2:70:ed:bc:81:72:6f:f9:ed:c4:8a:60:b8:53:
ec:f1:e0:21:e5:24:8d:3d:ce:00:25:be:e4:20:f4:63:16:59:
e4:ab:61:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:27:17 2025 by rpki-client