Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: c9V7Go3D4KF0gyS5/r40COQukSO9ljdl2DNwEhVBx1g=
Subject key identifier: BA:51:B1:4B:7A:F5:6F:99:E3:08:E2:54:F8:47:55:54:5E:3C:EC:9B
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 0196AF574E46CA170BC29836DC8D6AB9474F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1255
Signing time: Thu 08 May 2025 10:00:56 +0000
Manifest this update: Thu 08 May 2025 10:00:56 +0000
Manifest next update: Fri 09 May 2025 10:00:56 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: 6ILY2R7nPOmZ9YDTlMymFNuFWIgxt5BC0j5MU566rUg=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:4e:46:ca:17:0b:c2:98:36:dc:8d:6a:b9:47:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: May 8 10:00:56 2025 GMT
Not After : May 9 10:00:56 2025 GMT
Subject: CN=ba51b14b7af56f99e308e254f84755545e3cec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:17:6c:1f:19:56:09:25:7e:d0:96:fc:26:
af:ab:f4:c9:61:68:70:e4:9f:c5:b4:25:19:ca:f8:
02:bd:66:da:e6:ae:06:02:57:00:d5:58:c0:05:f4:
e1:7b:a3:97:b4:88:1f:42:48:e2:a9:43:d6:d5:64:
09:cb:4a:44:a1:31:cc:33:b5:09:35:a4:b0:b3:e8:
25:6d:26:2e:90:71:6f:b5:1e:ab:3f:7a:2f:11:62:
5f:d4:c4:15:dc:5e:38:13:ad:0d:d3:e1:13:e1:0d:
69:ae:4c:e9:18:a4:19:89:54:aa:70:b1:f7:11:22:
35:2a:fc:ae:66:f0:62:f2:28:e9:c6:7b:24:fc:ba:
f9:24:e4:9d:2b:2d:d9:60:ff:ad:dc:fb:19:76:eb:
f0:ce:be:b7:16:60:82:40:5b:0f:3b:e2:a1:38:a4:
2e:f6:8c:f9:86:57:a5:34:76:40:75:71:be:05:66:
d4:1e:96:bb:a7:c1:ec:ae:5a:69:32:4b:dc:20:16:
67:16:8e:df:f9:b5:f3:7c:0e:ad:5e:f3:6b:28:0e:
d8:62:f9:14:09:0c:c6:20:0d:fa:fd:aa:03:3b:fb:
06:b5:28:10:77:ed:f9:20:d6:25:64:0f:81:2f:47:
06:19:bc:e5:15:48:e5:93:29:5d:f7:62:d6:3d:fe:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:B1:4B:7A:F5:6F:99:E3:08:E2:54:F8:47:55:54:5E:3C:EC:9B
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:4c:59:ec:0f:3f:e7:94:aa:a2:87:db:66:a9:34:51:0b:
06:9e:a8:1d:fe:71:86:97:54:9c:73:23:0a:4d:45:31:8a:79:
21:26:40:85:d1:9c:95:91:4e:69:82:1d:e6:fc:9a:55:f3:44:
d8:f4:45:ea:b7:ab:bb:e4:85:cc:62:f4:fc:00:cd:fb:21:37:
e2:e9:ea:26:0d:3c:ff:7c:3c:67:01:10:29:f9:69:06:ba:f1:
05:47:e9:ee:ff:66:b1:71:93:da:24:12:23:36:3d:dc:c7:88:
eb:ad:d5:13:0d:35:3e:4f:d0:e4:0a:af:0a:2f:59:ec:53:80:
b3:ec:e9:3d:06:94:3c:3d:bb:8e:c6:05:22:97:47:6a:12:89:
75:98:6f:94:0d:a1:5d:67:26:70:89:d6:86:2e:53:cb:79:59:
20:41:37:4d:bf:bf:a7:1b:d4:47:22:ab:1e:cd:39:9f:16:26:
34:c9:55:25:5d:da:a9:67:40:e5:23:57:ed:27:dd:4c:4d:98:
0e:5e:a1:2f:49:ab:96:9a:48:c3:72:05:a5:40:8f:82:78:61:
94:76:fb:d9:ce:84:1a:e5:16:cd:84:3a:12:57:8f:73:a5:6e:
80:0e:52:bf:3d:d6:8c:e3:0c:fe:20:fc:a8:84:28:c5:77:6f:
44:0a:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:39:09 2025 by rpki-client