Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
File: bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft (raw, json)
Hash identifier: i3xADZMPmHj/hGuYVG4/pG6K45reYvORX9Zg8sw8XL4=
Subject key identifier: 08:66:C1:D7:E7:BF:52:36:11:F8:0A:93:DE:17:99:5A:F0:62:C6:A4
Authority key identifier: 6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
Certificate issuer: /CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Certificate serial: 0196B4EB0D2E1CA15805338EBD784B1447E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
Manifest number: 0450
Signing time: Fri 09 May 2025 12:00:25 +0000
Manifest this update: Fri 09 May 2025 12:00:25 +0000
Manifest next update: Sat 10 May 2025 12:00:25 +0000
Files and hashes: 1: 1FWlz0UmXvJd0zwOuSc3rrGoFsg.roa (hash: Z9j2Ppjp4Qt36VWExXtwgn0OhYcd4t+T5FV+FimtPqA=)
2: bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl (hash: RTMe8x++vEMQamHo2ajZn80RO4Hkg6fExJdw7mxsDGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:0d:2e:1c:a1:58:05:33:8e:bd:78:4b:14:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3e9d725e7f55fab8691c9d054d8b9ccdd13768
Validity
Not Before: May 9 12:00:25 2025 GMT
Not After : May 10 12:00:25 2025 GMT
Subject: CN=0866c1d7e7bf523611f80a93de17995af062c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:77:bd:26:8f:c5:b8:30:03:80:d4:a5:fc:
4e:53:8b:fa:52:54:59:7c:17:7b:72:71:3b:78:0a:
8d:20:4f:2b:b3:20:d0:21:f8:1a:a0:9d:57:1b:9c:
16:41:f1:25:72:89:73:6b:07:a1:13:5b:cc:05:47:
7f:03:29:d1:f5:a4:a2:1e:f8:06:d9:3e:63:57:85:
2e:a5:51:8b:ee:7d:ef:f0:4e:10:73:90:f6:97:3c:
cb:40:bf:22:3c:d4:bd:10:98:79:f6:30:5f:6d:81:
23:4a:3a:47:a8:da:d8:2d:99:cb:a7:9f:19:54:0a:
fb:c0:7d:ff:7c:48:02:3d:d9:16:c5:b0:83:4d:c0:
5f:e3:d8:55:3f:54:6f:bd:09:2f:cc:ff:2d:35:10:
00:ae:f9:81:ec:32:5c:73:95:15:51:a2:6e:e5:89:
63:8c:fe:29:1f:f2:f0:d1:0a:4e:b0:9a:74:83:43:
a2:56:e6:d3:61:98:08:d4:ed:45:b6:01:b8:c1:50:
07:9d:aa:81:eb:78:af:b9:10:81:7f:53:d2:8f:84:
03:5e:2f:74:56:47:44:75:01:18:15:17:e5:10:6b:
6c:00:72:e8:d1:62:e0:a3:5d:7a:cd:10:f5:b4:4a:
9b:28:47:4d:35:a4:da:f1:0a:4a:3f:88:8f:b7:67:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:66:C1:D7:E7:BF:52:36:11:F8:0A:93:DE:17:99:5A:F0:62:C6:A4
X509v3 Authority Key Identifier:
keyid:6F:3E:9D:72:5E:7F:55:FA:B8:69:1C:9D:05:4D:8B:9C:CD:D1:37:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz6dcl5_Vfq4aRydBU2LnM3RN2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/5c44e9-0ab0-413f-8d5a-aad6d3a4bdae/1/bz6dcl5_Vfq4aRydBU2LnM3RN2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a2:9b:22:70:ed:78:be:9b:52:e3:f7:5a:f8:0e:3b:0a:72:
26:b3:ab:08:01:43:3b:2e:90:8c:58:88:3f:94:63:13:ce:8b:
24:91:3e:31:d3:0d:57:8f:ec:87:47:f1:7b:ab:96:34:4f:00:
3d:4a:76:67:43:b2:e7:2a:e8:b6:d5:fb:49:ba:8a:a8:61:e6:
16:cc:7d:41:ba:ca:e3:54:89:12:70:fa:26:47:40:dc:10:ce:
61:9f:91:ce:e4:40:3e:6b:b3:24:fd:01:19:23:e0:ba:20:06:
09:69:4c:25:22:fd:e2:c5:d4:1c:85:0d:6a:36:66:50:87:57:
1a:f3:aa:52:61:6b:5b:a1:e9:de:fd:c0:f5:72:c0:92:b3:97:
a5:9f:7e:b1:33:52:a8:8c:56:33:e4:68:89:55:4d:e2:7f:3a:
a9:77:d8:1c:ec:03:9b:bd:01:e6:92:b9:d2:97:6a:49:6f:f0:
c3:ef:01:64:d3:b1:18:f3:e8:16:fb:7c:55:ec:0d:dd:0b:84:
a3:c3:7b:80:31:36:73:ba:67:d7:28:a5:3e:0b:a7:4d:89:0f:
c3:99:fa:c6:ae:6e:d2:44:e1:08:23:10:03:56:7e:5c:9b:8d:
8f:c4:dd:b1:de:97:f5:a9:33:b4:a7:dd:bb:89:00:b1:b2:7d:
31:0a:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:18:59 2025 by rpki-client