Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: VfM5DFL8OKc0NpJ3ba3re69AsObvIMW+sLFIMPOUUhU=
Subject key identifier: F1:B4:8B:10:46:C8:A5:ED:E3:01:C1:C5:1A:49:D3:5E:62:2B:C7:E6
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 01968992D0F4E0F6E9C3FBD6C9D57DAE687A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 01DC
Signing time: Thu 01 May 2025 02:00:22 +0000
Manifest this update: Thu 01 May 2025 02:00:22 +0000
Manifest next update: Fri 02 May 2025 02:00:22 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: vDEhxJqYJ4BVOGtJ9kXprdlCJrIvRnJgjK2WaqGjiyk=)
2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:92:d0:f4:e0:f6:e9:c3:fb:d6:c9:d5:7d:ae:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: May 1 02:00:22 2025 GMT
Not After : May 2 02:00:22 2025 GMT
Subject: CN=f1b48b1046c8a5ede301c1c51a49d35e622bc7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:89:3b:7e:41:92:06:fb:93:e6:b0:d0:6f:2f:
93:58:67:bd:20:09:52:e3:4b:08:42:22:56:80:db:
fb:74:cb:dc:8d:a5:06:98:20:62:85:bc:86:8f:eb:
5b:1a:5d:13:9b:38:8a:33:b1:1b:14:9a:2f:1a:35:
49:9c:37:97:0d:bd:11:95:cb:d1:53:7e:4e:f9:6b:
a0:8f:e5:48:ae:e5:24:eb:ab:d7:5d:29:00:27:5d:
11:b5:44:b7:28:04:fc:25:e5:5d:58:e3:56:cb:0e:
e2:1a:ba:2d:f2:81:79:75:5e:7f:57:77:7a:d6:ff:
36:b6:d6:6b:17:43:aa:d4:5b:69:3b:0a:13:91:5d:
fb:24:85:1a:37:a1:f6:f2:ed:2e:8e:6b:99:54:aa:
15:79:e4:da:88:a2:d1:62:a8:b0:2b:49:f4:fb:de:
15:7d:b5:2f:e3:7a:60:2e:2b:23:5f:8a:9f:be:94:
e7:3a:90:e3:02:46:f5:16:d3:4f:78:5a:2c:61:5c:
13:ad:a7:0f:d2:9c:ed:0e:1a:3a:80:b4:e3:dd:f3:
25:1a:4d:d5:95:d3:f9:f5:33:6f:04:60:0a:a8:ae:
b8:49:7a:1a:b8:ea:e6:8e:6a:6e:8e:9c:ea:4c:67:
ed:19:c9:54:59:69:e8:1c:02:a4:fa:da:6b:4a:6d:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B4:8B:10:46:C8:A5:ED:E3:01:C1:C5:1A:49:D3:5E:62:2B:C7:E6
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3c:26:5d:d3:d5:d6:35:42:05:41:fe:1f:dd:ee:fa:af:95:
89:fc:58:ca:15:e3:c5:38:8b:41:c5:bc:a3:e1:64:d3:a6:22:
77:1a:8d:40:82:81:28:0e:7a:cb:8f:90:57:49:b6:3b:c8:bf:
9d:56:8a:e3:0e:c6:0c:ee:3b:03:93:7f:e2:66:86:10:17:9d:
7c:06:65:5e:b3:af:81:56:d0:80:a3:c8:12:aa:5d:39:a4:dd:
f1:a3:e4:d0:eb:39:74:fd:32:dc:6d:ac:ce:56:20:da:b4:41:
6c:9a:4f:8f:83:14:43:52:e8:8e:df:9f:70:e8:41:71:eb:14:
c9:f0:4f:82:5a:0b:80:12:ba:e3:fb:bf:d8:8c:11:36:a5:08:
f5:3b:26:08:4e:9a:fe:09:2f:00:ac:b4:11:f0:5b:25:a6:81:
b7:6c:f2:8e:9f:34:bc:a4:44:79:5f:45:2f:d4:65:a5:15:f8:
83:5e:dd:69:ee:b0:b9:d9:39:bf:6d:ea:68:46:af:8e:b4:a9:
e8:26:5d:15:ac:01:e1:c2:2d:d4:75:11:54:fd:3e:6a:7d:93:
54:60:af:fd:20:47:75:4d:17:b3:65:b4:92:7e:f3:c2:41:eb:
a8:4d:b9:0b:44:67:25:ac:6c:94:94:fa:b4:f9:b5:35:a3:eb:
2a:db:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:30:19 2025 by rpki-client