
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier: fpER+Muq9Y4tacRpN7LBI8ovCEiGoctPLEVMJIEq0Sk=
Subject key identifier: 33:0C:2D:0D:D8:FD:CD:51:48:3F:D3:2D:34:B5:07:B4:C2:E1:D1:BC
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial: 0196827E93E814C27A3EDCD88AFFA2EECA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number: 0499
Signing time: Tue 29 Apr 2025 17:00:55 +0000
Manifest this update: Tue 29 Apr 2025 17:00:55 +0000
Manifest next update: Wed 30 Apr 2025 17:00:55 +0000
Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: yrZ+odBQZiTEnGY1YpZRll5xvCWhGamb4rCDgOZIr2U=)
2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:93:e8:14:c2:7a:3e:dc:d8:8a:ff:a2:ee:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Validity
Not Before: Apr 29 17:00:55 2025 GMT
Not After : Apr 30 17:00:55 2025 GMT
Subject: CN=330c2d0dd8fdcd51483fd32d34b507b4c2e1d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:76:e4:54:54:31:aa:c0:1a:33:e1:7a:c8:
cc:7a:43:9c:ac:30:bf:98:92:38:50:cc:ff:9f:53:
3b:7f:99:fb:b9:55:80:03:5b:e9:92:c7:db:f3:ce:
c7:36:78:a4:07:be:56:a8:3f:7e:70:a8:ca:85:b1:
30:f8:21:bf:d9:42:a8:89:5d:d8:12:bf:b2:fc:62:
38:a5:00:a1:86:cf:57:36:6c:75:4b:38:af:2d:71:
df:1c:8b:2f:49:fc:a8:33:80:07:97:28:99:42:70:
1d:e5:a9:21:c3:60:c4:ef:05:52:10:a0:47:3f:22:
a5:d8:ca:b4:97:d6:7b:87:d1:35:76:99:4d:4e:a8:
0e:f5:76:bb:89:5f:a2:ec:ed:93:0b:e4:75:68:33:
dc:d8:49:fb:bf:76:3b:e8:cf:f9:3c:30:7e:d7:c3:
c7:d7:9c:0e:2a:7f:62:67:7a:1f:8f:ca:62:c2:27:
34:f4:ca:25:95:c9:15:b2:2f:2e:65:d9:e9:f0:ef:
e6:4c:49:23:b0:2e:15:f1:69:70:5d:3a:61:70:d6:
29:2d:bf:5b:7a:bd:22:c4:dd:b1:96:04:85:ea:dc:
f3:41:9a:9e:82:b0:15:ec:0f:cd:a1:f5:34:80:56:
b4:cc:5d:a3:31:b4:f4:ca:a9:a1:47:07:38:ce:4d:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:2D:0D:D8:FD:CD:51:48:3F:D3:2D:34:B5:07:B4:C2:E1:D1:BC
X509v3 Authority Key Identifier:
keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:02:3f:ee:b3:61:53:2b:54:b1:db:83:c8:91:af:1b:04:
ac:b1:53:c5:4e:00:e9:12:1a:05:fc:21:68:c9:30:b9:92:1c:
7d:77:75:01:20:89:81:ab:3a:2f:a1:bb:89:b7:48:f5:98:6c:
70:8d:49:15:84:66:b9:30:d9:e8:97:95:98:cd:bd:85:32:75:
74:cd:2d:11:4e:6d:ed:85:c6:fd:c7:f4:6f:4d:60:6b:df:0e:
ba:6f:71:18:34:52:89:33:dd:3b:36:ec:78:4b:9d:da:f1:9b:
c4:6f:63:e5:b2:c3:33:e2:ac:1a:85:7f:1a:ca:fa:0b:10:03:
ef:0b:1b:56:31:ae:19:da:74:ea:ca:68:df:34:e3:0d:25:16:
74:c9:fd:6e:e2:f3:f6:0e:e2:4e:8e:0f:08:a0:54:30:2a:da:
f7:1d:ec:32:4e:d5:ad:f0:1d:df:5f:a0:d2:d6:ec:62:fc:e6:
8e:38:83:14:1f:87:0a:96:e9:01:fd:9d:e8:41:16:d0:4a:12:
71:d8:54:1c:22:fe:52:a5:65:43:cf:8f:fd:63:df:e3:c4:39:
9b:43:bc:67:11:2c:0d:66:ce:d1:20:bd:5a:bf:73:d7:ae:d4:
68:27:d4:34:54:35:49:60:b9:c3:f5:96:c5:79:12:6e:b7:80:
97:4e:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:54:01 2025 by rpki-client