Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
File: BgPfkU3wTkf1a9li8vncPwQ0pdM.mft (raw, json)
Hash identifier: BFE5IDgK55A3tp2nT3fpbafjBTZRs708v23EX2BsFXc=
Subject key identifier: CB:5F:CE:7D:14:31:FC:5D:62:41:48:D7:53:15:F3:33:F1:2E:36:D9
Authority key identifier: 06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
Certificate issuer: /CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Certificate serial: 019682106942D1F3EBAE252801267F92E698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
Manifest number: 0760
Signing time: Tue 29 Apr 2025 15:00:35 +0000
Manifest this update: Tue 29 Apr 2025 15:00:35 +0000
Manifest next update: Wed 30 Apr 2025 15:00:35 +0000
Files and hashes: 1: BgPfkU3wTkf1a9li8vncPwQ0pdM.crl (hash: F38Q8XOOhajHi+RzrR+cMHLpDh2YFqieRvs06Fse0pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:69:42:d1:f3:eb:ae:25:28:01:26:7f:92:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0603df914df04e47f56bd962f2f9dc3f0434a5d3
Validity
Not Before: Apr 29 15:00:35 2025 GMT
Not After : Apr 30 15:00:35 2025 GMT
Subject: CN=cb5fce7d1431fc5d624148d75315f333f12e36d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:3c:e4:a0:4a:1e:61:92:e7:90:29:6f:7b:
82:25:0c:95:5e:54:c4:e9:79:0c:a1:69:76:19:63:
1b:ec:23:16:80:71:3f:75:bb:69:f8:03:59:f9:83:
c1:21:e7:31:51:31:a2:3b:0e:08:e2:fb:8f:2e:d4:
fa:71:5a:5e:33:a8:f8:4a:29:c8:08:20:90:e2:83:
40:c9:8c:f0:aa:c3:c0:26:58:9b:77:0e:b8:85:9b:
cb:b6:29:3a:9f:f5:85:f8:7a:5f:30:18:32:c7:53:
2f:97:d8:1d:3e:7b:57:b2:da:58:d0:6a:be:5d:73:
63:08:be:2e:35:11:9a:3e:59:a7:07:5d:72:44:9b:
41:ec:91:8c:c1:1d:6e:7a:9e:ee:b5:d7:27:ea:ba:
46:47:3b:25:8e:8c:d6:dc:15:32:11:00:5e:92:3a:
76:54:bc:02:10:0a:cd:65:d0:aa:9c:5e:e7:ea:73:
79:a8:98:79:a5:54:18:7a:3f:ae:a5:01:60:c6:ff:
53:d2:75:d3:33:eb:6b:72:ef:f5:11:24:3d:5c:e4:
62:cb:42:15:a2:58:e9:a7:48:a4:0b:d9:9d:c4:eb:
95:4f:69:bf:af:80:16:99:38:ba:1a:3e:74:59:9d:
2e:97:8c:ac:6b:26:39:40:7a:82:49:6a:14:b5:83:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:CE:7D:14:31:FC:5D:62:41:48:D7:53:15:F3:33:F1:2E:36:D9
X509v3 Authority Key Identifier:
keyid:06:03:DF:91:4D:F0:4E:47:F5:6B:D9:62:F2:F9:DC:3F:04:34:A5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgPfkU3wTkf1a9li8vncPwQ0pdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9b5e26-0148-4f9f-a46a-bc8425c60604/1/BgPfkU3wTkf1a9li8vncPwQ0pdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e1:26:15:a5:89:4f:eb:c0:54:c1:a8:94:ad:4b:03:b5:cb:
45:60:7e:b7:0c:5d:f9:a7:94:dc:d8:ec:bc:f4:73:68:6d:b8:
98:d9:2c:80:a3:c8:39:4b:3e:a6:f6:17:0a:bf:75:ad:55:62:
cc:14:4d:7f:14:79:a4:45:4b:34:f2:a2:e3:0a:40:5f:09:c9:
fd:ff:ae:0c:77:6e:2e:a8:f7:84:8c:e3:c5:3f:f7:73:db:c3:
8a:31:f4:7e:ba:f0:64:3a:da:c6:2e:be:1e:58:ca:5b:d8:38:
13:24:79:71:52:a6:22:9b:82:b7:cb:d4:45:3d:f1:fc:3a:93:
c7:cd:6f:84:88:ad:1a:fa:04:f8:d9:85:79:e7:da:ff:23:57:
d1:30:a8:a4:78:a6:23:a4:e7:eb:63:de:45:e3:e1:42:f7:69:
d1:81:7b:5a:12:05:4b:b9:95:4f:58:cb:fe:34:d4:b5:22:08:
cf:0e:f5:ba:10:b3:20:5d:e5:42:d7:ea:15:c0:f6:6c:74:db:
ce:22:4b:db:10:e9:b7:a1:ba:e9:25:7e:0a:9b:04:5b:32:76:
ab:29:66:1f:9a:1b:ae:1d:b9:66:19:b2:7f:c9:b0:d4:09:34:
3f:e1:d1:3b:12:00:17:23:8d:f4:eb:bf:d6:b7:43:d3:c6:6d:
2f:b7:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:10:58 2025 by rpki-client