Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: iMPxqaOPXyWVgEjsBHsZiAoWTQf6fto3vSEOdf3hmNo=
Subject key identifier: 61:7F:2E:1A:96:9A:39:AC:11:12:F8:26:E3:42:95:4B:F3:C0:D1:78
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 0196A4657EE76BBD43ED34FF35A435B1D026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0BC0
Signing time: Tue 06 May 2025 07:00:37 +0000
Manifest this update: Tue 06 May 2025 07:00:37 +0000
Manifest next update: Wed 07 May 2025 07:00:37 +0000
Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: Aui7Qwbo/GTesZBkdlksipHzaa44feCANYuvWJBz72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:7e:e7:6b:bd:43:ed:34:ff:35:a4:35:b1:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: May 6 07:00:37 2025 GMT
Not After : May 7 07:00:37 2025 GMT
Subject: CN=617f2e1a969a39ac1112f826e342954bf3c0d178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:39:72:85:9f:c1:05:cb:f9:a9:61:fb:1f:
86:ea:16:9a:fd:0e:9e:11:2d:6b:91:9a:e0:21:3c:
d5:e2:26:c5:6e:0f:a7:b5:26:b3:71:03:5c:17:c2:
d3:15:2b:81:27:07:03:71:3a:e5:fd:fa:ed:d1:21:
2c:ae:be:e3:8e:99:45:31:a2:9b:92:77:44:2e:cd:
fa:4f:90:39:c2:91:9c:ff:2a:dc:5c:a5:05:ca:8d:
13:50:cc:f8:b0:d3:3f:8c:e7:32:55:f9:9a:36:3c:
76:9a:5f:b1:0e:1f:2f:1c:91:e5:71:68:74:ae:0d:
63:f2:67:b9:86:5f:8d:93:c3:e0:9e:b3:2f:97:47:
ec:09:f9:f9:79:ad:98:77:58:a7:37:c9:26:d6:5a:
58:e9:77:56:bc:6c:ac:ab:b4:fe:9f:72:8c:74:cc:
ca:5b:40:53:81:3a:cc:d8:02:6f:0b:0b:c8:c3:49:
85:de:0d:41:08:33:60:74:68:df:54:fd:a7:e0:9c:
c5:be:37:46:a4:47:ad:d1:1d:b5:1b:e6:1c:b8:57:
4d:0f:14:ba:ee:57:24:c7:cb:58:e6:a0:11:b4:9b:
c7:bb:b4:5b:2a:bb:6f:da:bf:ba:7d:e3:90:80:db:
32:44:5d:4e:97:5e:f0:0e:19:f3:31:ac:ee:b2:ab:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:2E:1A:96:9A:39:AC:11:12:F8:26:E3:42:95:4B:F3:C0:D1:78
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:22:fa:ee:c1:cb:7a:e6:5b:da:0c:76:b6:59:34:8f:30:34:
30:f3:2f:5d:1e:46:8c:a1:e8:14:78:74:75:7f:bd:92:dc:5d:
61:f4:25:1e:2f:be:31:1b:ba:54:ba:40:39:9a:85:3a:b0:79:
43:79:a8:0d:99:48:58:8d:9f:09:e1:17:53:e2:0b:ff:75:2d:
0d:55:64:53:30:87:3d:ec:0f:8a:84:99:60:2b:9b:7d:a1:00:
be:e9:e6:ea:64:76:c2:26:d3:fc:d6:d6:2f:f4:bc:02:46:e3:
ad:7f:3d:e1:b1:b1:5e:54:fc:4e:30:18:ea:9b:29:fe:14:18:
a4:bf:1d:ef:39:68:73:c6:91:0b:66:78:c4:4c:ec:47:f7:b4:
88:60:50:65:19:51:8d:05:33:6e:d2:d3:74:aa:8b:b8:7d:0d:
79:2b:f5:76:65:78:08:d9:fb:0a:27:d3:00:28:a9:23:93:a2:
17:76:cb:a7:dd:15:5c:e1:eb:ce:e3:5c:e2:b2:f0:6a:54:b2:
14:9a:fe:44:fa:6f:87:fd:c6:44:29:33:4f:69:4b:a4:84:32:
81:f8:52:91:45:18:d8:1e:d2:3d:05:c1:6f:a4:fe:2c:29:ec:
d0:5e:29:8a:ad:42:14:41:a7:94:a1:c0:56:b5:4f:77:4c:71:
8b:fc:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:05:56 2025 by rpki-client