Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier: lecBdloWjB8P83o2FW+esoyD7UiFTsFjOag5TSz2zq8=
Subject key identifier: C2:D8:DC:7F:77:A3:F3:2C:97:1F:EB:53:2D:9F:2F:95:F0:C1:5A:BF
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial: 019674F998A27B6B6D454F8F959B1A2BA02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number: 14A4
Signing time: Sun 27 Apr 2025 02:00:36 +0000
Manifest this update: Sun 27 Apr 2025 02:00:36 +0000
Manifest next update: Mon 28 Apr 2025 02:00:36 +0000
Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: NxJ5Xd6NKRrpac5tE8czvndHliewqpBCS2ZJVaXNcGU=)
2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:98:a2:7b:6b:6d:45:4f:8f:95:9b:1a:2b:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
Validity
Not Before: Apr 27 02:00:36 2025 GMT
Not After : Apr 28 02:00:36 2025 GMT
Subject: CN=c2d8dc7f77a3f32c971feb532d9f2f95f0c15abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:c5:c5:59:bf:d1:2d:fb:8f:51:16:64:19:
61:a5:d6:bb:c5:ad:29:77:9e:77:d5:80:b3:e9:35:
9f:4b:d0:0a:c3:45:c2:71:ca:62:d2:e1:ff:0e:a7:
95:73:66:3e:c5:da:48:bd:6b:2e:89:96:5f:d1:25:
d4:0f:82:fe:53:45:45:67:f6:82:8a:6a:4b:27:36:
68:26:bf:b4:df:af:a7:f8:69:05:05:15:c8:5d:03:
36:94:b7:1c:99:10:25:f5:c9:6e:74:2d:62:07:9e:
5e:79:a4:d5:92:cb:6b:78:a9:75:58:9b:e2:96:ef:
61:db:5f:0c:ee:a0:c3:bf:34:c1:64:b2:1d:6c:c1:
24:8f:77:4b:a5:84:4f:c3:e0:c1:3d:77:97:d3:db:
1b:99:c6:99:f7:ad:b9:99:82:b0:7a:da:0c:35:cd:
bb:23:9c:ac:dc:17:65:08:ef:77:0e:31:69:cf:87:
30:1f:65:74:81:b3:ba:38:b9:ab:b9:23:1e:40:f2:
e5:51:d2:d2:69:30:89:1f:06:16:cb:84:34:9c:29:
f4:56:c3:b6:58:a9:2b:05:1e:0b:21:8c:f0:50:a3:
d0:e0:d4:5d:30:02:44:3d:0d:fc:b3:93:5f:9a:d5:
67:b1:25:a7:f4:8a:50:e5:9d:b7:35:fe:75:db:6e:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:DC:7F:77:A3:F3:2C:97:1F:EB:53:2D:9F:2F:95:F0:C1:5A:BF
X509v3 Authority Key Identifier:
keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:5c:b3:53:b1:ee:92:ed:1b:f6:9c:73:f1:5e:67:b5:24:d2:
c8:f1:a5:6b:61:7f:10:79:3e:07:f3:bf:9e:b6:c2:48:d2:af:
4d:ce:52:f7:56:26:c2:2f:3d:f8:6b:26:5e:6e:e2:a1:99:a3:
d5:36:16:20:d1:fa:8e:d5:7e:a3:ca:af:d0:de:70:1e:3e:c2:
2a:ec:3a:60:d4:61:cc:79:fe:8f:22:66:bb:85:b8:d4:a1:1e:
47:4b:4f:91:09:84:74:13:12:e0:ee:4d:a1:ec:1c:92:43:28:
9e:15:ee:cd:84:eb:3a:12:64:9f:1e:b8:a4:e4:7b:a1:bc:b7:
14:5c:5f:e9:70:cb:cc:52:0d:26:a0:0c:62:d4:72:b8:af:40:
3e:a1:65:c3:ed:ed:97:83:4c:b7:d0:90:a6:27:94:8d:ff:2a:
df:5e:04:af:7f:b7:c8:e3:4a:3a:e9:1f:a7:0d:50:6e:86:49:
d1:79:fc:20:7a:ac:c1:95:01:d1:77:32:62:9a:b3:fb:d8:76:
5a:df:91:6d:69:35:59:32:76:74:be:5a:57:a0:98:bd:5e:cb:
81:68:eb:49:a0:67:c6:3c:90:d8:67:26:e2:4c:27:dc:d0:02:
4f:c3:78:d7:af:50:45:0f:db:60:75:12:c0:65:a3:91:b4:35:
8d:e4:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:12 2025 by rpki-client