Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: uT5PYqF5lseElemDkNuEBqg0DbCW+DDNFf5DiEGJrzY=
Subject key identifier: 29:D6:E3:A0:8D:B7:87:B0:B8:D0:91:8E:9D:AE:0C:F1:B8:B6:44:50
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 0196759E5AA5A81D735ACB8006A6A6B4441D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 14AD
Signing time: Sun 27 Apr 2025 05:00:34 +0000
Manifest this update: Sun 27 Apr 2025 05:00:34 +0000
Manifest next update: Mon 28 Apr 2025 05:00:34 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: vY8mjPdVc49NCzkrbSLd1hFogqNqQ99YZe5Jow6Vhd8=)
2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:5a:a5:a8:1d:73:5a:cb:80:06:a6:a6:b4:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Apr 27 05:00:34 2025 GMT
Not After : Apr 28 05:00:34 2025 GMT
Subject: CN=29d6e3a08db787b0b8d0918e9dae0cf1b8b64450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:07:2f:c0:05:7c:c6:a2:e0:65:39:e4:0c:
3b:16:1a:30:04:d1:7b:90:fe:fd:c2:2e:5f:f5:0a:
af:81:ae:60:cc:d7:47:7b:34:5c:2a:5e:e1:1e:8a:
e0:c9:b7:8a:0b:6f:23:c0:5f:1c:3c:f9:cf:23:8d:
2e:a8:74:f6:f8:10:0d:16:d3:28:4a:a4:7a:48:94:
ed:25:7d:2a:4a:69:3c:70:16:61:e7:f3:8e:3a:5f:
2d:3f:a5:74:50:61:dc:8e:4a:91:67:2b:f3:74:1a:
01:dc:6a:3f:e5:03:28:f5:e3:0e:eb:29:4d:7c:4e:
7e:50:5d:8c:33:56:06:53:15:62:2b:4a:ac:10:7a:
42:bc:5c:57:61:19:ad:11:e1:7b:0b:17:3a:69:66:
16:83:44:1e:b1:d3:72:40:68:d7:b8:27:d0:d0:a4:
08:f8:56:27:d2:5b:d0:af:fe:89:d2:2e:f5:67:c6:
f8:97:a3:e7:cb:b7:b3:a9:7b:21:90:bb:aa:6e:a5:
8f:d3:0d:b7:65:da:d0:ff:b9:eb:ae:62:e5:27:58:
0e:48:9e:9c:f5:21:fa:1c:87:76:50:05:da:16:f7:
d4:96:50:38:96:4c:9c:e4:b5:b1:ae:41:d8:e9:ad:
ed:17:d6:7d:0d:87:33:43:ec:d0:34:ea:30:3e:9f:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:E3:A0:8D:B7:87:B0:B8:D0:91:8E:9D:AE:0C:F1:B8:B6:44:50
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6b:03:03:5f:1d:57:86:c0:43:55:e1:0c:a9:f7:70:51:84:
8f:1c:73:36:d0:28:62:17:bc:bf:97:ee:c2:4d:b0:16:f1:5a:
b6:2d:1f:f2:56:07:1d:71:36:43:0d:23:b6:4f:2c:a9:56:7a:
b9:9d:2c:36:50:83:50:00:c9:b7:cd:29:ab:b2:33:b1:15:71:
c7:ec:e4:6a:09:70:6c:79:ce:57:f7:41:f3:4d:5f:56:0a:6a:
5c:40:2a:33:b5:ad:d8:32:5d:e0:68:1c:36:31:fe:b7:5e:e3:
67:50:50:36:86:aa:b8:ce:37:2e:e3:65:db:93:da:dc:d9:12:
7f:d8:a9:d7:75:e2:28:aa:ca:59:06:b7:19:b9:e1:ce:ec:00:
af:44:c2:9e:a2:84:b7:ce:67:19:0e:fc:0c:24:0f:24:bb:07:
8e:77:10:7a:eb:21:ca:3c:f7:45:69:26:f4:90:cb:4b:55:b1:
a1:4a:2f:0a:03:be:89:2e:91:0a:d7:78:f1:3f:5f:59:23:36:
79:f5:15:d5:58:14:00:a2:b1:66:b5:36:83:39:3a:cd:04:49:
06:89:d6:fb:a2:88:df:4c:e3:39:b6:ae:96:4e:45:69:25:b9:
7c:90:a2:bc:df:f3:b6:d3:df:88:2d:a4:e8:5e:67:52:11:f1:
98:2c:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:09:16 2025 by rpki-client