Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: mrTiorv1RNjRpjaiS7JYg9Q3u02sGdVpRHI3BRKrKeo=
Subject key identifier: 40:C9:FA:D4:7C:42:2E:30:E0:B8:0E:6F:F4:9A:ED:1F:0B:96:21:01
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 01967EA182166D3050AFEBE57F05D99FA134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 23:00:35 +0000
Manifest this update: Mon 28 Apr 2025 23:00:35 +0000
Manifest next update: Tue 29 Apr 2025 23:00:35 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: q7lxF5MpIBAlO4aYk6BVcUmHGuyAdYlJBg3p8TqRYA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:82:16:6d:30:50:af:eb:e5:7f:05:d9:9f:a1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Apr 28 23:00:35 2025 GMT
Not After : Apr 29 23:00:35 2025 GMT
Subject: CN=40c9fad47c422e30e0b80e6ff49aed1f0b962101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:32:11:5a:ff:c1:d0:af:70:4e:54:cf:94:
14:70:73:bc:ae:28:40:59:ce:eb:2b:46:ae:08:d8:
7c:dc:b8:ab:1b:53:28:0f:f7:fb:ad:aa:4c:67:87:
7f:44:86:44:5d:65:ab:d1:63:ba:a7:a8:59:60:3e:
73:3b:3d:fe:cd:65:e0:5e:e1:3a:89:33:9a:1e:f7:
23:50:26:dd:60:15:db:2d:d8:a0:80:ec:b9:c0:eb:
95:45:6d:db:fe:3c:37:f9:b3:a1:ad:8f:2b:e3:ac:
60:0a:8f:06:fc:9a:c8:99:86:99:d9:81:c1:5f:9a:
4a:cc:8a:70:98:f9:f7:de:5f:58:f8:9b:ec:d7:a9:
a7:57:a0:7b:c8:b8:eb:e6:91:6e:71:c7:70:7a:d8:
18:bf:3d:1f:ab:a6:6c:9f:62:52:9c:7d:9e:a9:e1:
65:18:44:06:b4:26:c7:f8:83:34:6d:08:2f:dc:f4:
d7:2e:27:bf:4c:ff:52:08:ae:f2:e9:b0:9e:5a:78:
c3:da:ee:7e:97:9f:37:ab:7e:73:3b:78:b5:19:91:
c5:62:ab:03:3d:da:f1:f0:cc:f3:9f:1c:a2:8c:20:
1d:d0:02:1f:6b:01:b6:67:c0:11:50:b6:4a:8c:7b:
fe:7b:f4:67:5b:24:39:8b:8e:14:83:81:35:52:bf:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:FA:D4:7C:42:2E:30:E0:B8:0E:6F:F4:9A:ED:1F:0B:96:21:01
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:d1:9a:66:c9:f0:47:bd:bd:b9:4c:c6:30:e6:11:6f:2d:
e6:4a:4e:da:9d:af:cc:89:05:14:a3:c5:f8:82:95:c2:1a:a2:
d9:c5:26:02:5a:ab:07:4d:ce:c5:1a:6d:58:de:06:9c:02:e7:
ea:9b:fd:5a:0b:88:36:92:d4:fd:3a:c3:4a:59:86:7c:c1:91:
f6:4f:0b:dd:cc:23:be:c2:51:8e:80:b4:2a:1f:1c:43:8a:a6:
4d:cf:cf:62:3f:72:a8:15:b3:9f:77:a4:79:6b:ff:a3:d4:c6:
37:9e:80:3e:f0:4d:a9:dc:0b:da:1a:3d:ef:e8:94:4e:b3:f2:
24:97:e3:2e:eb:4d:30:e5:cf:75:79:4d:74:c0:90:a0:5a:6c:
8f:5d:c9:75:af:82:0a:08:a5:a4:2c:0a:d4:95:b9:5b:a0:28:
44:90:38:2c:f4:91:2f:63:2c:a9:59:84:61:c6:56:2a:f9:14:
2e:98:07:4c:fb:d4:d3:43:c8:94:8f:b1:dd:c2:8a:b7:a3:2c:
bb:ee:5d:8b:66:14:d5:ec:5c:38:9d:51:80:39:69:09:8a:91:
68:84:6f:b0:2a:f2:bf:62:95:ca:3d:d9:f5:3c:59:e9:bf:81:
1a:49:45:3d:aa:a1:29:2e:66:ce:28:59:75:68:72:47:75:89:
c3:c5:ee:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:47:58 2025 by rpki-client