
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier: FwhAoMR+7eG+2tr1RFpfWwxrliw32qt6YH0V4BMURMM=
Subject key identifier: D9:DB:11:5F:72:A6:5C:21:34:8E:3A:D7:80:F8:C4:14:17:01:42:3C
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 0196729D46C896CA33D70EE31DAC8BAED72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number: 144D
Signing time: Sat 26 Apr 2025 15:00:31 +0000
Manifest this update: Sat 26 Apr 2025 15:00:31 +0000
Manifest next update: Sun 27 Apr 2025 15:00:31 +0000
Files and hashes: 1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: /n9pDXMHKZplJJbNxeh/nc1OGkmP4f3MzOP/PtIQ+fc=)
2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:46:c8:96:ca:33:d7:0e:e3:1d:ac:8b:ae:d7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Apr 26 15:00:31 2025 GMT
Not After : Apr 27 15:00:31 2025 GMT
Subject: CN=d9db115f72a65c21348e3ad780f8c4141701423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c1:28:de:b1:f3:f9:e9:e9:18:70:4d:c8:43:
1d:76:56:a3:7a:1e:d1:86:5f:35:bb:a3:aa:18:16:
4b:1c:32:ec:22:4d:70:72:49:d7:f8:48:52:bc:fe:
10:4d:f5:cc:4a:64:7c:b0:d7:77:ae:d2:84:ab:49:
07:0b:fd:a6:6d:07:88:55:b1:01:48:0e:9d:ba:e9:
75:72:d2:cf:b9:5b:d5:38:ee:38:8e:39:89:26:e6:
4f:85:bf:88:44:44:05:e0:96:48:6d:f0:e5:94:42:
ff:8e:c3:91:d0:97:ac:56:05:de:32:e7:74:79:d3:
78:bd:51:e9:23:de:f0:cb:a7:3d:38:ea:23:a3:aa:
72:37:da:cc:be:9c:19:a9:63:d6:8d:30:4e:0e:04:
99:8b:5a:df:99:0d:c8:18:0d:fb:8c:74:39:59:ee:
0e:27:e3:bc:aa:f7:21:d7:f7:0c:cc:7a:67:07:88:
ea:ed:74:ff:76:ea:bb:92:c9:19:e0:3c:62:80:c8:
bf:43:f0:f2:b6:f9:8b:22:3b:fe:55:e0:77:c5:70:
f7:96:82:ab:2e:05:4e:a2:6a:51:e4:12:86:2e:c0:
07:19:2f:b0:c4:31:3e:c8:6b:32:4a:fe:0f:2a:30:
d3:91:c2:f1:e5:e2:dc:80:18:84:05:66:75:d0:71:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DB:11:5F:72:A6:5C:21:34:8E:3A:D7:80:F8:C4:14:17:01:42:3C
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fd:7a:1e:20:10:08:c2:8c:d0:f2:64:6b:a4:20:ba:7a:2d:
50:fc:e4:40:4b:17:0a:15:29:3c:23:d8:7f:fb:ce:91:b2:70:
49:52:32:98:a4:8c:6a:3c:42:51:14:58:85:37:b6:3f:30:bf:
a0:19:80:20:66:46:4a:23:04:0c:ae:22:a0:f9:c0:67:bc:ce:
20:c2:ea:d7:fd:d2:14:8c:fd:d4:a0:73:35:c3:a0:85:6a:87:
79:e9:59:46:63:cc:2e:7d:7f:ca:f3:a1:a9:d7:2c:14:d9:1f:
e9:30:34:40:03:7b:3a:76:79:27:84:68:83:e6:58:da:53:4b:
2a:7c:c2:1b:87:59:4c:fd:d2:57:ad:0b:17:fb:88:bf:01:a4:
4a:fc:e5:f2:4d:ef:dd:4d:15:f5:b9:0c:69:67:8b:d8:8d:1d:
54:99:09:7a:de:62:ab:4d:cf:da:61:e9:dc:9b:46:0d:bf:9f:
4f:20:02:5f:b2:2f:72:76:33:1e:66:5f:ae:5a:92:88:e9:91:
c6:90:ec:cf:9d:1d:83:07:36:13:75:1d:2f:19:ef:44:d9:df:
b3:bb:19:1c:48:cd:cd:5f:cd:8c:b0:86:71:2a:96:27:8c:a3:
20:7b:19:e4:26:ee:fb:c4:21:f7:d1:bb:78:32:9f:a4:a0:78:
d8:5c:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:14 2025 by rpki-client