Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
File: BswqJrMawkvFKV0kqOEwcfL_DWE.mft (raw, json)
Hash identifier: W37+S36cf0vkjr40K0QM82yhhlWlXB/+btPu/WuWZTg=
Subject key identifier: 40:7F:A9:35:5C:6B:02:75:2B:F4:48:E9:31:0A:64:88:B8:C2:6A:FB
Authority key identifier: 06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
Certificate issuer: /CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Certificate serial: 019671C1B479AA6D325BA5972C9D4E13016C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
Manifest number: 02A0
Signing time: Sat 26 Apr 2025 11:00:41 +0000
Manifest this update: Sat 26 Apr 2025 11:00:41 +0000
Manifest next update: Sun 27 Apr 2025 11:00:41 +0000
Files and hashes: 1: 89qLG1K07SoB9KnzvBmCV6QFSkI.roa (hash: +0xILp3yJ9G90xUu2Ml6EPqNrjSk0rDe+FJWrTAlYPw=)
2: ACSoxiVrVB6X7y6ozamLSgqazeo.roa (hash: y8VDA0ULLPWCFXTUghHVruXhGvY9U4iQhON3EqU1Hso=)
3: BswqJrMawkvFKV0kqOEwcfL_DWE.crl (hash: XTTG5BvvKCzditb26QOT81hwQcprdA9O/v7VczIJC1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:b4:79:aa:6d:32:5b:a5:97:2c:9d:4e:13:01:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cc2a26b31ac24bc5295d24a8e13071f2ff0d61
Validity
Not Before: Apr 26 11:00:41 2025 GMT
Not After : Apr 27 11:00:41 2025 GMT
Subject: CN=407fa9355c6b02752bf448e9310a6488b8c26afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:13:e5:62:ac:81:50:fa:66:3e:d2:f4:00:
72:56:04:ca:c6:48:21:93:df:27:bd:21:bd:3f:d8:
4b:d9:b2:48:2c:e7:52:1f:70:fa:73:3a:ee:b3:ce:
28:d2:32:ae:ce:4d:89:c4:60:0f:3d:06:2b:40:0b:
4e:40:12:99:16:83:7a:93:fe:eb:bf:5d:aa:8b:f3:
2b:3d:d9:a6:50:04:9d:c0:f5:5f:ec:4b:43:3d:ca:
79:d1:5c:5b:2b:0c:e3:b3:86:b6:6a:e7:98:52:e6:
e5:bb:31:13:e8:00:43:0b:27:19:35:0f:c7:95:44:
90:3d:99:e7:f3:68:cd:e3:fe:5c:77:b8:e6:4b:28:
63:87:b7:10:62:32:a4:4e:d5:f1:55:aa:22:a9:6c:
b9:87:97:13:dd:98:40:8a:9c:1f:19:ec:49:e1:ef:
1f:63:d5:97:6c:14:ff:aa:17:70:02:54:99:05:cb:
04:b0:b0:8f:1c:e4:47:b4:41:10:b4:c3:9c:e6:17:
cb:d9:bf:35:4a:65:19:b8:c8:38:55:3c:19:de:df:
93:46:6d:f6:7d:7f:0b:d9:90:84:51:d8:e7:5e:a6:
c5:28:98:96:e5:98:13:0c:9e:96:d0:62:f2:f6:dd:
37:a1:62:cc:71:12:4e:f8:ee:88:15:68:d7:8e:ea:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:A9:35:5C:6B:02:75:2B:F4:48:E9:31:0A:64:88:B8:C2:6A:FB
X509v3 Authority Key Identifier:
keyid:06:CC:2A:26:B3:1A:C2:4B:C5:29:5D:24:A8:E1:30:71:F2:FF:0D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BswqJrMawkvFKV0kqOEwcfL_DWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1cfc8a-27a0-4d79-814f-fd8421bf2ba9/1/BswqJrMawkvFKV0kqOEwcfL_DWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:ed:f6:39:67:d3:7a:6d:9f:14:d3:6b:c3:30:6e:3c:ff:
77:3d:d8:cf:bb:b1:85:ab:93:5e:b3:e2:a5:60:c9:0f:84:31:
03:6a:a0:a4:98:a7:b7:a4:d1:d7:af:1d:cc:d6:95:a6:63:26:
1c:1d:c8:a6:18:a5:87:aa:bf:a4:1d:9c:b5:98:f3:17:c1:69:
73:81:7d:ad:e6:4d:8a:02:65:8d:20:f6:fc:2e:13:17:de:6a:
c0:eb:44:ab:81:4e:4d:03:2c:3a:19:fa:c1:56:fa:b1:a4:06:
9c:00:97:74:b0:88:0b:a6:f2:b3:99:4c:c5:b0:d1:77:67:86:
ba:56:39:3b:67:89:7d:ec:bb:9b:d5:b8:d3:91:85:f3:77:72:
90:d0:7c:a9:1a:d1:86:c7:5d:9f:50:63:75:ba:93:7a:e1:1c:
c3:34:06:69:c3:ef:a3:0f:13:37:0f:4f:33:fb:44:d2:40:a0:
b2:b2:77:ff:ed:63:72:44:d6:4e:ae:af:48:db:25:74:b1:f7:
ff:72:00:67:68:da:fb:d4:ae:f7:a2:22:ba:3f:0c:3c:bf:bd:
49:7b:64:55:01:ac:7f:84:13:bd:95:b0:5b:6e:77:2e:ad:82:
e0:50:88:6f:25:cd:6b:aa:53:96:19:50:7f:31:00:b0:9f:62:
0b:a3:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:46 2025 by rpki-client