Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File: bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier: BQkzmxc3mdogD9iXSgxTyCP+LcCZLDzR8BKFJQaQDRk=
Subject key identifier: A6:FE:6D:25:E2:72:4E:D1:ED:B1:13:2D:06:95:E5:CD:44:1E:DF:76
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial: 01967B6984FB3F398B28B220919F0360D0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number: 14A5
Signing time: Mon 28 Apr 2025 08:00:34 +0000
Manifest this update: Mon 28 Apr 2025 08:00:34 +0000
Manifest next update: Tue 29 Apr 2025 08:00:34 +0000
Files and hashes: 1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: vB4DJH7HQ/32HlJdWRlPO8le9hoGnM4RNq8hveqdzho=)
2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:84:fb:3f:39:8b:28:b2:20:91:9f:03:60:d0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Validity
Not Before: Apr 28 08:00:34 2025 GMT
Not After : Apr 29 08:00:34 2025 GMT
Subject: CN=a6fe6d25e2724ed1edb1132d0695e5cd441edf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:27:6d:ba:88:06:53:c5:04:f2:27:fd:96:
0f:b6:04:5b:36:f9:a5:b8:aa:04:3b:c1:99:f3:5c:
eb:f1:f0:3a:79:31:a3:68:15:03:02:b9:bb:54:96:
70:ca:6f:24:35:c0:eb:94:be:c9:97:60:4d:4b:e4:
83:fc:a5:fb:26:72:dd:24:f9:3d:98:64:29:52:d1:
6a:6a:aa:30:7d:f4:d0:df:8d:d2:12:dd:ac:80:17:
6b:ce:b1:12:74:6b:d5:3b:ff:b1:e4:01:84:55:43:
d6:ec:52:21:dd:9d:22:91:c7:26:b7:80:cc:30:c7:
25:d9:2c:33:1a:82:e8:6e:75:81:be:b3:b3:15:20:
e7:54:00:d3:77:84:11:3c:7b:38:b1:f7:c2:f7:a7:
75:f6:98:c8:59:3d:66:1a:d4:f5:47:4f:81:0f:5d:
47:02:96:ff:f8:b1:2b:a1:25:09:8d:8c:4e:d0:5e:
3c:4a:69:6f:d8:89:b0:2c:85:84:b1:22:19:a5:6c:
a3:50:6f:76:93:ff:e8:a9:8c:0e:3a:ec:5d:8f:45:
f6:5a:c5:5f:31:02:c0:f0:45:7d:c8:0c:01:e1:ff:
6c:35:b5:4d:07:e1:33:d2:4e:a3:31:02:e4:65:c9:
18:36:2b:c1:a6:cf:8d:2b:62:ea:b1:d9:a3:71:d8:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:6D:25:E2:72:4E:D1:ED:B1:13:2D:06:95:E5:CD:44:1E:DF:76
X509v3 Authority Key Identifier:
keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:3d:e7:ed:f3:8d:67:40:ce:40:20:cb:c2:fb:9d:1f:e2:
d9:6c:e0:c7:25:2c:15:8c:44:27:f5:54:e2:be:f6:90:de:71:
e0:99:77:72:b9:e3:ac:8c:be:2f:d0:b7:92:d5:8a:91:fa:ed:
d7:25:8d:56:5f:6a:b4:35:b7:01:22:3d:54:66:f2:8c:48:43:
7b:43:5b:27:0a:38:0e:63:8d:ab:f1:a1:12:0f:83:1d:9a:61:
7d:6f:af:6a:04:6b:e4:d2:23:2a:97:11:a8:37:a1:54:92:e9:
8c:59:ae:00:60:80:93:de:49:a3:ab:7c:a5:5b:65:18:3d:cc:
6d:e9:62:ed:b2:83:41:40:b6:80:ee:38:28:48:92:b8:00:a3:
fc:03:b9:b4:31:96:dc:28:2a:32:13:a4:ac:25:74:9f:57:d5:
c2:fe:eb:49:d8:4b:6a:cb:d6:de:9b:1a:08:27:f7:82:2b:97:
32:05:55:22:3d:d2:ed:cf:0b:fd:fa:cb:51:5e:4e:dd:54:97:
91:a4:cc:d2:ac:40:5d:b0:91:d6:9f:91:f2:53:99:45:c4:d9:
f8:fc:a1:47:c1:08:9d:ec:cb:8d:5d:19:68:70:df:90:33:68:
96:ce:c8:ad:15:e3:7c:07:3b:ca:9f:09:d6:25:59:b4:5f:a6:
14:77:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:48:44 2025 by rpki-client