Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
File: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft (raw, json)
Hash identifier: 196T7tBOpCncY+SET7p0pawwC4uoubtddLzj4yzZhOs=
Subject key identifier: 07:C0:5F:30:2A:B5:BE:BC:43:ED:35:77:47:85:4E:E5:29:53:3D:0E
Authority key identifier: 07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
Certificate issuer: /CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Certificate serial: 0196C12680590B139977052BC279821B7FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 21:00:47 +0000
Manifest this update: Sun 11 May 2025 21:00:47 +0000
Manifest next update: Mon 12 May 2025 21:00:47 +0000
Files and hashes: 1: BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl (hash: KdUbdZAdrytSgHomhrS31igLtwn6JMpvIzvJVEb0KG0=)
2: x6seRwBOq_CRZGJqhRd1EBp_kiI.roa (hash: rR2gIHJRwQudNQFzsP+C+tD9iC/4YNN6FWVD4AJ320s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:80:59:0b:13:99:77:05:2b:c2:79:82:1b:7f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0735daa8cfe25dd12a2c26e0ffcce97636748ebd
Validity
Not Before: May 11 21:00:47 2025 GMT
Not After : May 12 21:00:47 2025 GMT
Subject: CN=07c05f302ab5bebc43ed357747854ee529533d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:be:ec:18:c6:b9:1c:41:d3:90:4d:c7:9e:
8f:27:17:f9:59:76:2f:7a:06:57:81:d7:0f:1c:32:
7b:a0:cd:dd:27:7a:da:35:9d:5b:b8:6d:c3:98:99:
0e:0f:9b:61:1e:55:07:48:8c:94:69:28:c5:36:ff:
38:48:6f:22:28:ea:ee:79:d6:5d:00:3d:1c:5b:fb:
1f:bb:ee:32:a3:d4:45:04:2d:e8:d9:ac:66:89:6c:
68:d6:ea:bc:f8:e5:e0:ab:89:08:31:43:5b:69:7d:
62:50:bb:c2:6b:1a:8c:99:c9:85:d0:46:50:93:6c:
a7:ac:99:7e:ed:82:03:18:cf:95:71:c0:39:4e:20:
ae:6c:23:8e:8d:cf:36:41:2d:8f:17:87:bd:77:b4:
8c:15:3e:44:95:b2:c4:12:fa:fa:8a:9e:58:68:29:
bd:4e:43:3f:a9:fe:b2:17:99:83:0f:93:dd:a7:84:
27:01:b5:05:8f:d3:85:12:1d:d8:bf:d5:65:45:e3:
8a:b9:a1:58:66:fd:a0:57:19:12:15:3e:f4:88:29:
16:28:ff:ac:92:aa:6c:6d:fc:75:4e:97:fe:9d:e3:
71:de:80:5d:4b:e7:8b:8c:ff:00:cb:a1:b3:54:ca:
21:21:b5:6a:5c:bc:5b:cb:2b:88:7e:16:50:8f:47:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:5F:30:2A:B5:BE:BC:43:ED:35:77:47:85:4E:E5:29:53:3D:0E
X509v3 Authority Key Identifier:
keyid:07:35:DA:A8:CF:E2:5D:D1:2A:2C:26:E0:FF:CC:E9:76:36:74:8E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a4bf5-40cf-447a-97e0-679cf0210d49/1/BzXaqM_iXdEqLCbg_8zpdjZ0jr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:1c:28:f8:6b:2a:61:27:41:d6:ec:9e:56:73:b6:f1:cc:
1d:ae:3b:d3:a0:77:60:3f:c0:94:ba:f5:9c:ac:62:e9:ca:5c:
1e:dc:23:0b:6d:63:47:fd:d0:c3:62:d0:e6:3a:80:51:65:f0:
2c:b1:75:3e:83:73:18:e2:33:89:e5:6f:1a:71:73:16:3b:e4:
7d:08:c0:1b:40:09:3a:9c:50:9d:c3:f5:21:98:01:10:98:57:
4f:53:12:bb:41:3f:d8:59:3d:75:d9:7c:1d:8e:23:f0:2a:49:
5b:f3:ca:02:c1:66:d4:9a:5f:46:49:37:94:d1:10:bb:2b:89:
94:6e:e8:d0:f6:4f:8f:13:fb:16:1c:1f:a6:ea:e2:22:d1:41:
5a:44:cd:73:bf:e1:f2:4a:94:b6:9a:1a:82:7e:0c:3c:f7:60:
b2:e4:0c:42:23:bd:4d:8b:be:a2:1b:12:02:4f:59:ac:ae:71:
91:8f:12:52:c0:6f:86:e2:67:77:0f:c8:27:4e:8a:51:ee:63:
0e:a0:bd:29:1e:62:c5:0a:9e:68:ef:d9:67:5f:7a:22:7d:f7:
3e:b4:70:47:e4:38:4e:a5:6b:1f:ab:8b:67:46:e1:c8:36:ab:
34:5b:03:8e:dc:9a:88:b3:2e:a6:c7:c8:e5:2c:c7:02:34:ff:
3a:32:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:56:34 2025 by rpki-client