Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File: B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier: +U2pcIVpv8aFVwNigT8jnejD1+LRkCIx+h1TO8H8bG8=
Subject key identifier: 82:C3:16:E3:7F:74:FC:9C:C2:81:3A:F8:6A:11:80:87:A3:53:1A:BD
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial: 01968A3797D6FD44CDE509BBDB13E78CD26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number: 01D2
Signing time: Thu 01 May 2025 05:00:21 +0000
Manifest this update: Thu 01 May 2025 05:00:21 +0000
Manifest next update: Fri 02 May 2025 05:00:21 +0000
Files and hashes: 1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=)
2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: jcVqxaNGt/82ncO3jMkSDq5Dl7hbc3S5ehT89BvAF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:97:d6:fd:44:cd:e5:09:bb:db:13:e7:8c:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
Validity
Not Before: May 1 05:00:21 2025 GMT
Not After : May 2 05:00:21 2025 GMT
Subject: CN=82c316e37f74fc9cc2813af86a118087a3531abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:d2:12:fa:7e:1b:bd:f8:2c:ed:d6:a5:76:
81:42:01:70:93:ff:40:14:2c:c1:f3:a8:ab:bd:4b:
2f:de:48:6a:fb:1a:2b:9d:22:bb:fe:ed:00:c8:d0:
42:74:9d:5f:47:bc:8a:d5:ce:b2:bd:9a:fb:5b:5b:
be:8c:00:63:33:97:0c:e5:96:5f:e8:06:4e:cb:90:
1a:9b:b8:92:84:0c:fd:4a:bd:c2:fc:8e:e7:5e:37:
13:a1:72:93:d5:3d:e7:51:a2:56:de:51:68:80:11:
fa:cd:8a:4e:28:17:62:00:9a:90:3d:4c:98:4f:60:
1e:77:6f:b7:b5:cc:88:ac:17:1c:ab:6d:d7:b9:a7:
24:da:8c:ea:b3:8c:55:0e:f5:8c:84:9d:34:fc:27:
16:43:75:b6:dd:41:cf:75:c9:67:8e:64:8b:ce:0c:
72:57:b7:3e:1a:51:16:43:92:b3:e7:cc:bb:b8:98:
9d:4a:4a:9d:ff:b2:8e:fe:96:8f:3b:e0:d0:12:93:
b1:8a:00:3f:a1:fe:95:31:c5:03:cf:3e:c6:9d:1f:
60:7e:88:15:a4:a5:51:57:36:be:69:52:87:af:10:
d1:7c:e3:97:ef:8d:81:19:d2:1e:c8:16:a4:c4:8c:
aa:9a:ad:b7:63:d3:bd:39:34:99:2f:2e:04:e0:70:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:16:E3:7F:74:FC:9C:C2:81:3A:F8:6A:11:80:87:A3:53:1A:BD
X509v3 Authority Key Identifier:
keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:67:d7:f7:be:1b:0c:7a:cb:75:45:62:e6:ad:6a:d2:31:62:
46:5d:46:c8:2d:ba:ba:e5:6f:15:a0:3e:43:21:86:70:91:96:
8b:f4:eb:1e:2d:28:f7:c2:a8:32:13:20:8d:48:e4:f1:a3:58:
2a:e9:13:60:60:cb:4f:55:66:f7:06:d6:e7:f4:8e:1c:bf:0f:
78:64:fb:c1:d3:07:8f:b8:00:13:58:4b:cc:bd:28:79:12:82:
9a:d8:82:3b:2f:16:94:a2:a4:30:ac:88:11:5e:1b:98:be:72:
7b:ac:d1:14:64:03:52:cf:e0:5a:bb:05:b8:99:0f:23:7e:94:
52:f3:19:ba:ee:b0:b8:ff:bb:c1:31:22:10:f1:4f:5b:43:27:
ce:26:30:63:78:6a:6c:94:83:7b:b0:03:5d:94:df:7b:ae:a8:
f0:7e:af:f4:55:37:82:d6:48:36:22:b5:1c:dd:98:34:88:4f:
29:f6:23:bb:b5:b5:e5:b9:ef:4e:b7:42:d8:65:54:4c:63:cf:
1e:f9:6e:c4:a6:95:dd:12:d0:d4:20:4d:47:7d:cb:c5:d0:fc:
4f:a2:b4:9e:1a:84:a3:c2:3a:b2:53:67:8b:23:87:3f:e6:70:
9e:9a:f0:36:57:d9:00:33:5d:b8:55:f9:5f:96:ee:67:96:3b:
8d:d6:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:47:09 2025 by rpki-client