Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: RCyDmQbGHDDkXoSQXI5g99EEViJbh/GqdOjYCgmo8bw=
Subject key identifier: 09:BF:2C:03:4F:46:42:04:2D:74:EB:E9:68:45:7E:48:E0:64:3C:2B
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 0196C49585BE28B4E67E49934C5DEBB1B47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 14C9
Signing time: Mon 12 May 2025 13:00:55 +0000
Manifest this update: Mon 12 May 2025 13:00:55 +0000
Manifest next update: Tue 13 May 2025 13:00:55 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: Nt+xHw6Lu2uREorwGAHRE8I2REBtIZmv7oNGgOWwOGg=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:85:be:28:b4:e6:7e:49:93:4c:5d:eb:b1:b4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: May 12 13:00:55 2025 GMT
Not After : May 13 13:00:55 2025 GMT
Subject: CN=09bf2c034f4642042d74ebe968457e48e0643c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:5d:d7:ed:2b:95:ff:7f:d8:40:9e:5c:6a:
49:4f:c9:d3:86:39:d0:2b:a3:03:3a:d7:1b:fb:42:
ba:b9:fa:10:99:10:10:0b:37:87:bc:3e:a8:a2:d6:
f3:48:5d:74:e6:78:48:8e:9b:bd:cf:2e:8e:23:c2:
90:74:a7:d2:b8:58:c7:75:a4:be:4f:31:8d:bf:3a:
6a:fa:af:02:46:1b:84:ca:ac:b2:e4:2b:8a:1f:02:
4c:73:a5:4e:73:f5:ee:e5:21:07:36:10:7f:78:7d:
98:bf:a2:c3:c9:68:97:76:ee:5e:7d:8a:52:55:a9:
73:87:f0:3c:4a:65:69:3c:fc:cf:bd:f8:7e:f0:ae:
05:47:34:75:86:7a:6d:45:a8:3a:47:b4:dd:b0:be:
d0:b0:fd:82:48:4e:75:39:97:c2:3f:c5:5d:24:f4:
5f:a7:d8:cb:83:aa:07:0b:b9:eb:35:23:df:f5:54:
53:ea:2c:c9:08:45:86:34:7e:0b:4c:0d:e6:0f:db:
89:ab:4b:91:7c:7e:34:12:f2:96:7e:8f:65:46:c8:
24:1b:96:d8:03:06:f8:be:af:9c:7e:8d:b1:f4:8e:
d8:71:ab:82:0e:a1:1b:70:87:58:80:bf:91:e4:32:
05:57:df:0e:a0:04:90:fb:da:e5:9c:8b:fb:06:82:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:2C:03:4F:46:42:04:2D:74:EB:E9:68:45:7E:48:E0:64:3C:2B
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b6:1e:94:33:bb:f5:a9:06:a6:0c:8e:79:60:32:61:7c:7d:
78:48:29:78:35:98:0f:bd:b4:5f:84:4d:c3:61:84:05:1d:18:
1f:f9:18:c8:aa:1b:32:64:3f:d3:47:b2:39:5c:37:fd:b2:43:
14:14:13:50:37:85:9e:37:31:c8:83:88:c0:39:15:96:8c:4b:
38:cd:fc:15:5e:90:ed:17:34:12:3b:bb:1f:23:7f:9a:79:f5:
ad:62:bb:e1:3e:7f:d1:0a:91:77:c4:f5:6c:6f:e7:62:1e:ef:
d4:9e:e6:fd:be:a1:3c:6b:c3:ad:63:b8:b2:a3:0d:47:97:e9:
be:fd:0b:6e:be:5a:29:2c:1d:11:4f:65:f5:5f:1a:2e:3e:41:
ae:be:da:3a:20:c5:9e:45:df:e0:71:1d:4c:a2:d2:d3:1f:d8:
ff:4e:00:84:a3:0f:55:c4:02:0e:b8:13:97:f3:1c:74:f1:d8:
a2:4e:91:c8:06:1f:a7:41:dc:80:66:fe:63:8e:49:a8:1f:f1:
77:68:b2:84:25:b8:63:5a:ac:8e:a3:5d:d3:57:c2:ef:cd:ac:
c3:ed:b6:8a:ad:6f:77:d2:91:34:c8:f9:1b:d9:67:40:87:18:
f6:a9:84:0b:f1:9c:94:11:e8:07:40:61:5c:11:c9:e2:8d:32:
db:9a:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:17:36 2025 by rpki-client