Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: L7hFwtNQ9lCGVync/2AcGOw/uOlOPtUbNOJ0B8Wow8Q=
Subject key identifier: D0:09:D8:D0:EA:A6:3B:9E:5B:A7:70:23:A6:5F:C2:A8:E9:6D:CD:D5
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019676E7BC040AD795EF31D2E01993818D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1515
Signing time: Sun 27 Apr 2025 11:00:20 +0000
Manifest this update: Sun 27 Apr 2025 11:00:20 +0000
Manifest next update: Mon 28 Apr 2025 11:00:20 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: 7JEp7dt07QvCoJBA8ccmHTIT2GY6Zm3gjdxc5JjpoLQ=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:bc:04:0a:d7:95:ef:31:d2:e0:19:93:81:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Apr 27 11:00:20 2025 GMT
Not After : Apr 28 11:00:20 2025 GMT
Subject: CN=d009d8d0eaa63b9e5ba77023a65fc2a8e96dcdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:46:3f:57:38:43:6b:76:5f:bc:c9:a9:f2:
35:cb:14:89:bf:50:51:42:49:ae:26:44:dd:a6:1a:
08:19:c4:4c:77:d9:0d:16:f7:9e:82:07:eb:08:4e:
4f:c0:d1:70:c3:6f:89:15:49:c5:c5:67:fa:b8:b5:
5d:64:ba:a4:47:aa:64:59:f0:de:0b:90:ee:d6:da:
16:2c:56:5a:9c:d3:96:54:63:37:2c:06:93:34:44:
60:10:c7:d9:b6:2f:dc:ca:88:23:2e:e7:2a:85:0e:
08:c1:d0:fc:64:c5:64:30:d8:ba:a2:89:0b:3f:12:
37:4f:3f:f9:40:df:cb:d5:65:06:a0:37:3f:98:07:
a6:07:9b:01:19:47:66:1e:4b:0e:e8:a2:da:4d:4d:
5a:a7:28:2f:51:41:6d:7d:9a:e2:98:b6:9f:93:18:
94:a3:96:7b:f7:05:59:82:c5:45:1d:1c:2c:ce:b5:
4a:29:16:c0:f9:ea:c0:03:3c:22:78:71:74:58:a2:
f4:ac:a3:3c:32:71:3d:93:dc:7b:7d:e9:0b:37:e5:
81:d5:bb:75:15:af:f5:33:13:f9:bc:5d:48:a2:94:
70:fa:6b:38:2c:d3:fc:dd:ed:cd:4a:a9:5a:33:ed:
e2:27:8d:12:4f:85:88:25:01:01:57:ad:52:2b:a6:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:D8:D0:EA:A6:3B:9E:5B:A7:70:23:A6:5F:C2:A8:E9:6D:CD:D5
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f7:b3:53:cf:71:41:9a:74:f7:2b:dd:90:70:33:6b:51:b9:
fb:1a:74:ca:3e:f0:c8:ad:4f:cd:a6:ae:24:bd:d0:97:82:83:
64:40:d6:62:c8:de:d9:a5:23:0e:0a:c1:1e:93:b5:bc:f3:47:
78:a2:8c:bd:2f:93:b1:6d:6b:9a:93:0d:52:8b:e3:68:aa:11:
c9:cc:7e:1b:48:c8:50:e4:13:77:df:7d:7a:a3:45:7e:9f:f9:
38:7a:93:49:5b:0f:50:a9:a4:7f:0b:58:7c:fe:2a:1a:42:46:
d9:a8:0d:ce:c3:36:26:65:d9:dd:e9:c4:7a:55:8e:5c:d8:ee:
3e:ce:8f:8e:be:49:71:ea:5c:ea:fa:d6:cd:33:6e:5f:84:78:
47:07:fe:5f:e9:10:92:1c:34:e6:57:9c:99:f2:79:24:30:f7:
41:3e:05:d2:f5:91:37:84:e0:4b:d7:0f:d7:2b:e3:38:64:eb:
ac:7d:9a:a7:fb:31:1a:42:84:05:db:39:96:c9:da:37:df:dd:
a2:3b:46:4c:56:62:be:36:74:f6:8f:e1:6d:30:da:7d:8a:7c:
54:7f:3f:1a:23:9d:32:4a:90:06:95:9d:90:9c:5b:e5:17:5f:
51:2f:1d:e6:2e:58:e4:c2:7a:c5:92:8d:9e:31:c4:74:ce:bb:
18:0c:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:52:32 2025 by rpki-client