Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
File: beisSVlyXk_tHDMNIrXNBgJBpRQ.mft (raw, json)
Hash identifier: NfVLy9NuUHwYEDPXkVWSMaOihS0XtHvhhSGncp5Jk9U=
Subject key identifier: 5C:FD:10:D5:70:7E:93:08:B1:21:79:7F:4B:15:86:BE:A9:BB:DB:C5
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Certificate issuer: /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial: 0196771EAC3D419AC3DF272BC033CBDBE29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
Manifest number: 0436
Signing time: Sun 27 Apr 2025 12:00:20 +0000
Manifest this update: Sun 27 Apr 2025 12:00:20 +0000
Manifest next update: Mon 28 Apr 2025 12:00:20 +0000
Files and hashes: 1: 0YIOVBW-uwL5vGELnsoWXjbdbbc.roa (hash: YnwOh3rBgK7q6cV+gaFLtLus1V2Wyasj+jLsXsDsPIs=)
2: beisSVlyXk_tHDMNIrXNBgJBpRQ.crl (hash: A/FGmenxyVV0NdrkkYOUpGv3PLfxRdEl1maAuS70Fzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ac:3d:41:9a:c3:df:27:2b:c0:33:cb:db:e2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Validity
Not Before: Apr 27 12:00:20 2025 GMT
Not After : Apr 28 12:00:20 2025 GMT
Subject: CN=5cfd10d5707e9308b121797f4b1586bea9bbdbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:9a:99:20:f5:2f:ac:9d:d8:3c:90:87:f1:
45:c7:71:28:99:7b:18:f9:43:90:dc:be:ed:d5:a9:
56:d2:94:02:33:f3:2c:c6:43:0d:e9:23:80:32:12:
27:34:d9:ea:17:c3:52:c0:8b:b0:4f:3f:e0:5d:1c:
d5:9f:4e:cd:55:08:c4:f8:e2:d2:ab:d5:1c:0b:86:
fd:b4:ba:08:92:b3:6f:23:b2:5c:ed:c9:0b:82:fd:
e0:4a:9d:de:28:e7:16:01:f5:28:f1:09:a8:22:42:
9b:ac:33:63:25:db:ff:3a:fe:4b:9a:9b:27:d4:75:
ff:e4:7d:10:f9:fb:05:58:de:38:af:75:01:2e:0e:
c6:cb:82:af:4c:bd:a1:e9:f9:97:cd:28:f2:31:25:
44:f2:bb:82:02:03:e1:18:58:86:4e:af:88:03:2b:
d0:5e:d4:96:18:bf:b3:49:e1:bd:e6:a2:b9:d7:18:
e3:ce:ce:0e:f8:68:e0:54:67:61:9c:2b:91:86:64:
08:f2:da:10:1c:1b:0b:f8:6a:68:65:14:98:71:dd:
e7:e9:31:c0:0b:7c:11:0c:73:e4:5b:03:fc:c1:ef:
53:e5:8f:9d:19:ae:56:30:f9:bd:81:17:0c:f6:ea:
e7:77:92:7b:ba:31:38:97:ac:d0:4d:d0:62:86:08:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:10:D5:70:7E:93:08:B1:21:79:7F:4B:15:86:BE:A9:BB:DB:C5
X509v3 Authority Key Identifier:
keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:90:95:39:80:15:f6:68:19:4d:2f:16:17:86:9a:bd:c2:40:
b5:78:f9:58:13:69:65:2b:ed:6f:e0:39:93:b1:8f:b7:3b:d9:
f0:e0:ec:31:a1:35:c2:43:9f:c6:27:4a:db:2f:2f:8f:63:41:
d2:36:63:ae:60:9d:a7:24:85:d9:bc:b7:91:8c:c4:e0:a6:6d:
86:cb:13:26:d5:5d:e0:4f:bb:5d:a3:66:47:2b:4a:6f:26:43:
93:5c:93:76:65:8e:f1:70:59:7f:5e:b3:3f:50:38:5e:74:0b:
a2:f9:3f:ca:8c:2b:be:cc:4c:c7:50:4d:9f:55:46:3f:2d:0d:
be:da:b1:a1:76:f1:c9:64:a3:7d:41:6d:a1:df:44:d2:38:67:
06:07:fc:0d:f5:d4:29:54:d1:f5:f6:a7:5c:a1:fe:d2:52:26:
88:f0:1c:fa:fe:df:c1:0f:95:ec:fb:9b:25:48:6d:67:c5:6a:
eb:9d:42:9b:10:5a:0c:ba:ad:88:91:17:27:a6:60:8b:1a:1d:
ec:1c:6e:13:52:34:b9:b6:24:18:5a:1b:bd:4a:cd:aa:5d:82:
19:88:3b:29:fa:48:23:00:cd:76:36:92:4a:5d:70:b8:cb:24:
91:34:6a:5a:5f:ef:e1:06:d2:24:bc:6f:5f:34:5a:fb:f5:06:
92:ae:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:06 2025 by rpki-client