Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: ue3xYT78Z1C7KtqeE04ZFPkfNUfYGSu3Ap9bZZ1gZyU=
Subject key identifier: B0:68:3A:2C:C1:DE:D6:83:41:B1:98:36:6E:43:1F:9B:95:D9:04:92
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 0196BDEF031903441C2F80C975AF5B473B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 06:01:19 +0000
Manifest this update: Sun 11 May 2025 06:01:19 +0000
Manifest next update: Mon 12 May 2025 06:01:19 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: 3327Gur/bxU66IY9M9AfsQXr1CBumkqEE1cUsaTnR7E=)
2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ef:03:19:03:44:1c:2f:80:c9:75:af:5b:47:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: May 11 06:01:19 2025 GMT
Not After : May 12 06:01:19 2025 GMT
Subject: CN=b0683a2cc1ded68341b198366e431f9b95d90492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:42:0e:b8:f7:37:ea:3c:6f:7f:68:e7:8c:
2a:08:ae:ff:7d:31:a3:fc:e3:4e:87:e6:f1:61:d7:
ea:21:eb:91:1b:bd:a8:6c:6b:da:24:b6:da:79:eb:
fb:c6:70:be:e4:c3:fe:4c:a1:d3:5c:d6:59:82:b3:
64:6e:44:70:98:38:de:06:66:48:18:48:53:85:b6:
67:00:af:31:d5:ab:27:27:8a:73:82:38:a0:9b:09:
d7:50:a3:ba:d7:98:6c:29:b2:25:4f:bd:51:ec:e8:
0f:fd:17:92:4d:a0:f3:9b:64:26:17:a3:2d:e9:2d:
da:9b:bb:5b:0c:ea:b2:a3:fa:07:f6:87:b1:e8:b8:
c6:2b:85:7a:cc:d7:f4:d1:5f:35:aa:75:93:1b:80:
c5:d9:24:a3:53:42:0c:ce:8d:1f:df:73:96:eb:52:
39:3b:59:6f:9d:a3:97:da:f9:4a:25:96:82:ef:c2:
6d:74:57:23:13:98:87:c3:22:28:8e:15:56:81:7b:
17:85:52:5d:08:8a:d4:a1:07:1f:3b:a8:f8:d4:8c:
b5:e9:e4:fd:33:75:60:cb:24:8b:77:0f:7f:e4:9a:
29:b4:d6:cb:42:94:fa:95:e9:56:d9:95:fd:58:0a:
41:8d:77:45:7d:4e:44:40:a5:02:f2:ef:71:79:d4:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:3A:2C:C1:DE:D6:83:41:B1:98:36:6E:43:1F:9B:95:D9:04:92
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e4:41:01:2c:c8:f9:b0:7d:ce:d7:d7:bb:1c:8d:3e:c0:1d:
fd:8c:50:6a:7f:5a:06:ca:ad:41:8b:70:1d:80:3c:98:9a:a7:
14:25:5c:64:72:53:80:71:37:b3:b8:7b:74:dd:91:3b:02:1c:
1c:02:9f:1b:f7:9e:df:0f:87:70:e4:29:bc:8f:4e:f5:bd:b8:
14:e4:89:ad:42:09:f5:83:34:f2:c4:58:35:58:e4:83:ac:74:
1b:54:b2:14:27:8c:52:68:dc:da:bd:cf:9d:62:0b:71:33:5c:
e2:1a:0f:ea:e9:34:e5:c9:8c:69:46:02:0d:99:ac:d9:70:4c:
d1:6d:80:e1:35:de:98:cd:7a:51:72:81:26:a9:57:64:75:56:
09:93:e8:45:fc:57:b6:2b:ec:7e:dd:0c:b6:cc:bb:dc:da:01:
c7:77:cd:d1:36:52:95:de:a9:b4:dd:7e:27:50:56:92:7d:0b:
98:2c:47:3f:f5:ed:d7:ba:6d:0a:ec:c5:87:81:06:63:4e:27:
b0:2c:9a:60:95:ec:fa:bd:66:6a:26:7f:19:70:ea:17:98:ea:
09:7b:fa:2d:db:16:7f:3c:33:0e:b9:24:ee:60:84:d7:d7:0d:
35:89:2d:a4:5e:63:19:6b:19:e8:1d:c1:ad:6c:af:3b:dd:df:
24:74:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:36:17 2025 by rpki-client