Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: czSQMwnGwU6f9obtHNFsp0hPubaRv9xs4ngxoJ6bmgI=
Subject key identifier: 1A:CF:C6:30:E6:7B:2C:06:0C:0F:8F:8D:A6:27:A6:41:37:BF:31:1F
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 0196B2C5C14FE3DEE3321117B08991F7341E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0B2F
Signing time: Fri 09 May 2025 02:00:26 +0000
Manifest this update: Fri 09 May 2025 02:00:26 +0000
Manifest next update: Sat 10 May 2025 02:00:26 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: eZUitgORL/LITNEcBmYJ37isZ5WtbZHzCS5wrCb8IdM=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:c1:4f:e3:de:e3:32:11:17:b0:89:91:f7:34:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: May 9 02:00:26 2025 GMT
Not After : May 10 02:00:26 2025 GMT
Subject: CN=1acfc630e67b2c060c0f8f8da627a64137bf311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:49:0b:3d:c9:9c:ae:71:ca:2e:97:e0:86:
7c:bb:f3:77:34:98:42:55:f5:64:58:f6:87:57:1e:
fe:51:5a:f6:9d:56:84:12:33:63:96:b8:c3:e0:8f:
7c:61:49:62:c7:e3:a5:30:31:fa:8c:72:6b:43:91:
8d:4e:fc:53:4a:82:7b:cb:ab:e7:3e:41:6a:4d:c5:
c6:e0:86:2b:91:4b:cd:4b:f4:58:dc:89:2a:9b:de:
7b:04:e7:61:dc:db:9c:63:2f:71:97:ac:7f:dc:9f:
19:bd:38:ed:52:56:04:93:03:b0:9e:0d:e5:ab:cb:
e4:22:3f:38:57:ed:5c:63:57:08:b6:d3:81:ad:d2:
09:57:c5:21:e0:cf:bc:3b:57:24:36:0a:de:49:15:
78:2d:88:df:f5:2a:98:65:7f:f7:cf:e3:cb:37:8a:
3f:37:85:65:ec:61:20:a4:47:bc:17:6e:84:43:74:
e1:0d:5e:58:0d:75:eb:03:ec:78:f6:dd:58:11:1f:
4a:24:bc:03:f8:1f:64:07:d3:ff:d5:37:20:6d:72:
6a:fb:dc:65:01:9c:6a:c7:69:83:11:0e:a2:93:27:
c6:eb:fc:5d:7f:6f:2f:78:13:30:54:47:e6:98:6d:
7d:3f:5d:d8:99:24:9e:3b:6d:9e:f8:d2:fc:28:61:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:C6:30:E6:7B:2C:06:0C:0F:8F:8D:A6:27:A6:41:37:BF:31:1F
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:11:d4:02:97:fa:56:21:fb:73:ea:bc:e5:9e:e3:1a:eb:56:
bc:da:a5:38:c2:16:ad:04:37:2d:6a:4a:64:b1:22:79:9c:15:
25:a8:1a:ab:9d:ff:4e:e8:00:7d:f6:72:fd:12:15:37:64:a5:
bf:1c:2e:df:cb:0e:5f:be:d8:60:16:b8:81:a6:be:66:67:d1:
16:18:9b:ac:6c:7e:43:76:8b:9b:3f:e6:34:1c:85:b1:13:ad:
79:c9:ba:78:90:a0:da:04:e8:1d:d6:69:66:07:d0:9d:3e:e7:
09:06:d4:59:e9:6a:6f:ad:af:88:43:79:18:1c:b2:4b:3e:7f:
96:9d:85:a9:48:4f:34:fb:65:9f:2e:70:ca:f8:f3:9f:35:d9:
a5:c6:d4:3b:7a:49:00:2e:a9:09:71:c5:cd:0e:65:e9:8e:70:
45:13:e4:af:9b:a8:59:b5:86:84:e3:cf:b6:0e:d5:23:39:f4:
8e:8f:86:64:c6:6d:d9:1e:99:99:03:da:28:56:3a:95:b8:49:
bc:b5:22:51:ad:51:30:9a:d0:aa:9d:82:87:3c:24:9c:df:23:
d3:00:53:c7:ba:ff:53:29:ba:03:f3:8c:6c:98:a6:10:40:de:
b5:e6:9f:e6:dc:86:30:7a:87:d2:fa:ee:63:ef:fb:92:8e:c3:
83:ba:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:52:34 2025 by rpki-client