
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File: bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier: VRFK6WwF81PuL3SfIu70U7KPTMSfU882KLOIsKJ7lGM=
Subject key identifier: 33:BD:25:B9:4B:A4:A3:F9:8C:98:33:A6:13:83:7B:C1:FE:79:14:B8
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer: /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial: 0196797B54B43C863268CF89B4AF0E680847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number: 019C
Signing time: Sun 27 Apr 2025 23:00:47 +0000
Manifest this update: Sun 27 Apr 2025 23:00:47 +0000
Manifest next update: Mon 28 Apr 2025 23:00:47 +0000
Files and hashes: 1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=)
2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: HtSj+a23X0U9LzOCR+63HVNx/AiXqZmKOYy7AfOEci4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:54:b4:3c:86:32:68:cf:89:b4:af:0e:68:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Validity
Not Before: Apr 27 23:00:47 2025 GMT
Not After : Apr 28 23:00:47 2025 GMT
Subject: CN=33bd25b94ba4a3f98c9833a613837bc1fe7914b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:d9:6c:05:a6:2f:84:ab:60:8e:c3:eb:cf:
c6:06:6f:47:78:f9:8b:69:90:41:4b:a6:29:b5:5c:
4e:55:71:72:14:1f:88:a6:ae:80:d2:e9:81:91:25:
9c:75:0d:f0:a1:33:25:56:69:bc:bd:dd:5d:c2:38:
4b:e1:53:1b:cf:a4:f5:a3:13:3c:a0:e9:ee:67:54:
5d:1b:d9:8a:24:95:5e:42:a7:cf:fa:ad:b9:59:2b:
ca:b4:55:dd:44:28:c8:1a:b7:38:68:75:bf:46:5e:
87:7c:35:91:1a:14:d3:8b:f7:e1:0d:87:f3:aa:0b:
51:62:77:6b:01:97:7d:2f:e2:91:e7:8f:c1:db:17:
5a:77:81:fe:cb:3c:28:7d:eb:fb:77:9f:ea:23:d7:
c3:35:5f:90:cd:85:34:62:fc:67:b4:f1:c2:94:01:
02:7f:88:65:70:78:97:56:48:28:62:a8:fd:96:69:
e9:44:25:9d:64:7d:19:a4:d7:9c:30:b5:80:97:af:
35:ae:ee:56:64:66:81:36:e5:16:7c:de:f5:9d:d1:
a9:67:d9:53:18:61:25:ef:e4:a5:ba:2e:67:3d:7d:
34:78:69:29:39:ba:be:24:6a:19:0b:a0:11:41:fd:
38:f2:bc:7d:60:8e:dd:84:df:91:8d:81:8f:e2:0a:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:25:B9:4B:A4:A3:F9:8C:98:33:A6:13:83:7B:C1:FE:79:14:B8
X509v3 Authority Key Identifier:
keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7d:31:15:8b:54:49:c0:58:4d:62:e6:62:d8:d3:6b:04:35:
20:fa:e0:8b:ff:a3:d9:29:ca:6c:13:a9:54:61:40:1e:6c:ed:
cf:bc:54:a6:66:ec:11:d2:d9:1d:1f:80:71:25:cd:2a:21:78:
ef:66:cb:eb:7f:5d:84:75:9b:92:fd:31:58:25:c4:b3:34:e8:
b0:57:d5:d6:0a:e2:16:c9:76:61:90:4c:dd:ba:65:2b:ff:3b:
6f:3f:88:3f:7d:dc:4f:ec:88:90:df:34:14:e3:0d:aa:21:4d:
bc:4f:da:26:22:10:2b:d9:80:18:56:77:bb:86:46:69:ee:f2:
0a:5a:b7:50:3f:b8:26:7e:8c:53:2a:62:56:d9:f0:73:b5:07:
0b:55:92:99:60:86:9c:27:4e:c2:9d:78:20:ae:bc:83:1d:3a:
96:7a:60:87:ff:c7:83:03:c5:19:c7:59:99:cd:7a:34:b0:ba:
99:56:61:7a:5a:ec:6b:f1:2f:40:e7:1b:3d:01:46:3f:ee:3f:
a8:db:c0:d6:a4:0e:f8:4c:6f:81:35:ca:2e:7e:e1:3a:76:ff:
d8:6e:27:da:de:a7:4f:82:59:2b:c1:5b:17:92:3e:67:4d:0a:
c9:f8:3f:12:d6:22:4d:ed:d6:3e:6a:6f:71:50:64:8c:8f:1c:
c6:5a:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:44 2025 by rpki-client