Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json)
Hash identifier: 10gQOOVWEScUNQ856Qb+zFblaMA/NMlZjSM1dASBZBI=
Subject key identifier: 97:14:EF:EB:4E:B0:01:37:86:DF:A0:AB:FF:D6:2A:E5:5A:B3:14:C7
Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Certificate serial: 0196B823D6AF5415BFEC902BECA5A4CBA92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
Manifest number: 0252
Signing time: Sat 10 May 2025 03:01:18 +0000
Manifest this update: Sat 10 May 2025 03:01:18 +0000
Manifest next update: Sun 11 May 2025 03:01:18 +0000
Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: VQ/U3OwB0gsnX4zAgxx6nIcCMjHz0RvhLQaNrXxMfbY=)
2: xRcmRRI7cJbjjDDpwXYPAzS-KSc.roa (hash: +JILVppUk45vww/N3lSTziP5G1U9pzpXHROPOpD0HAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:d6:af:54:15:bf:ec:90:2b:ec:a5:a4:cb:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663
Validity
Not Before: May 10 03:01:18 2025 GMT
Not After : May 11 03:01:18 2025 GMT
Subject: CN=9714efeb4eb0013786dfa0abffd62ae55ab314c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:f9:b9:a1:5c:ab:4e:37:ec:30:cc:f6:5d:
91:61:89:69:60:de:c0:ea:05:fb:47:fb:2a:cb:bb:
ad:eb:ee:e4:7e:3f:82:fd:a7:54:6b:4e:7a:9d:8c:
76:ac:1c:f5:cb:8c:c7:bd:b7:fd:8e:15:74:49:9b:
a5:d7:78:5a:77:a7:52:1d:de:ab:bf:ea:65:75:53:
43:c4:7b:27:7e:7b:a7:24:24:2c:53:9b:6e:2b:c3:
36:eb:d9:00:ab:6b:87:80:27:d5:83:24:c7:e7:d6:
16:64:f5:db:26:f5:18:41:c1:20:03:42:5b:b1:ff:
f5:31:33:18:e1:84:e9:71:2c:84:70:d7:af:07:1d:
ea:d7:d1:4d:a2:71:c5:68:5f:a7:da:18:7d:2b:31:
80:ba:a7:57:22:fc:84:ce:a1:56:18:a8:ff:32:95:
3e:1e:01:b3:ff:6d:e9:a2:bc:7f:58:d3:c4:4d:fc:
5b:9e:23:e5:21:a3:f2:7f:66:28:7a:13:bd:2e:64:
35:d3:60:f7:82:e8:ca:62:7a:5c:e3:61:84:72:01:
c8:be:3f:7f:e2:5a:05:5d:d5:e1:62:80:5d:6f:46:
fe:c9:26:eb:28:93:d2:98:3f:66:1d:b5:be:56:95:
f6:fd:be:80:60:b8:3f:a2:2a:03:5a:5c:df:d3:1e:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:EF:EB:4E:B0:01:37:86:DF:A0:AB:FF:D6:2A:E5:5A:B3:14:C7
X509v3 Authority Key Identifier:
keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c4:cf:1a:c0:82:6d:c0:55:ed:05:d6:e0:c5:75:22:99:f9:
c6:e4:17:50:32:86:4f:29:c9:bc:8c:77:56:31:03:05:cf:8c:
ab:93:27:c2:be:50:2b:8d:1a:a3:68:c7:c6:ab:9f:87:45:31:
33:a0:eb:aa:25:aa:67:b4:8b:6a:32:e2:86:e6:d2:a3:e2:f0:
86:48:c8:04:8a:7a:74:fd:f7:59:ed:63:c4:ff:42:b6:d9:c7:
59:36:14:43:52:02:d0:51:05:57:f9:f0:ea:54:37:8d:45:ff:
d2:8b:f3:9c:9a:4d:83:6b:50:d8:10:19:6a:bd:31:bb:95:f9:
4f:f7:ff:e3:73:2e:2f:10:78:9e:c6:1a:1d:3b:dd:37:46:48:
cb:4b:ab:ca:10:35:9b:a8:0e:74:4f:53:a4:f8:7a:df:c6:d2:
8f:b4:08:58:11:ee:f9:6a:10:a0:c4:35:0e:c7:a2:dc:aa:08:
57:9a:fd:be:0f:c3:d1:7b:16:e8:67:b5:23:24:68:4b:a3:d1:
50:e5:a1:36:02:5a:76:15:67:8b:c2:47:93:2a:92:1c:d5:ad:
f4:cd:4c:ec:8a:4f:7f:b6:a5:40:c7:7b:cd:fa:10:5d:cb:eb:
7b:bc:9f:d6:33:8c:86:9d:0a:d4:a0:0e:fd:8d:12:95:78:ee:
e7:b3:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:44:17 2025 by rpki-client