Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: RtPzrryfYi0vLfamHSp868xCTQK0Oh/zSqRhcjSrnoM=
Subject key identifier: 90:CA:44:31:2C:53:D8:87:CB:69:F1:56:2E:FB:4B:A7:60:96:D8:88
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0196B710FAC81C2622F9FE7DE3772C0C620B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 22:01:05 +0000
Manifest this update: Fri 09 May 2025 22:01:05 +0000
Manifest next update: Sat 10 May 2025 22:01:05 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: t2NgrppBQIU/2hb3946oic7ePz27BWrY67+zZwsCWRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:fa:c8:1c:26:22:f9:fe:7d:e3:77:2c:0c:62:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: May 9 22:01:05 2025 GMT
Not After : May 10 22:01:05 2025 GMT
Subject: CN=90ca44312c53d887cb69f1562efb4ba76096d888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:46:de:42:91:28:5e:7f:cc:fb:4a:f5:e6:
a9:41:b5:37:ef:31:80:28:3d:dd:40:d1:29:0c:05:
de:75:0f:09:c7:92:c8:27:3e:ce:8f:da:5b:2d:7b:
0c:f6:f6:b4:04:25:7b:66:3d:19:ea:a8:aa:0a:60:
6f:cd:ce:11:36:99:a2:7c:05:12:b0:c3:7d:a2:bd:
05:04:a7:38:0a:a9:5f:14:b4:db:57:ad:db:7f:e5:
45:dd:15:b2:b1:3b:d6:e9:5c:b8:2b:5e:20:9b:08:
d0:8c:3b:e8:44:66:f5:83:21:25:65:8d:e1:f9:b6:
96:cc:26:7f:18:e9:0b:f5:51:5e:47:36:8c:7e:19:
b0:2a:46:fe:01:7c:eb:70:60:f8:5f:5e:ba:26:5e:
ee:fa:6a:0c:bd:50:29:20:7c:e1:ba:89:e6:1d:d2:
be:af:03:65:d7:60:94:5e:ba:69:d7:31:3a:2d:0f:
4b:6d:eb:61:28:58:f8:8c:57:00:56:38:eb:b7:b1:
01:77:7c:97:ed:d0:43:ea:1a:ff:6f:47:e1:2c:89:
a6:0c:fa:1a:bc:a8:e6:36:74:68:50:2f:de:a5:68:
b3:a4:c5:8f:fb:0b:3a:05:50:e5:d1:7d:e0:6b:c2:
a7:e0:d7:9b:48:87:88:44:c6:29:43:91:a2:6b:7e:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:44:31:2C:53:D8:87:CB:69:F1:56:2E:FB:4B:A7:60:96:D8:88
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b2:3f:47:e7:fc:e0:a8:76:77:ab:d6:ca:f7:5d:f4:ff:2e:
53:f4:a0:10:5b:a2:0b:27:7f:2e:51:58:29:de:da:ee:e9:8f:
0d:9b:f9:e3:3d:84:74:4b:c6:58:67:a6:e0:6c:36:be:b9:34:
7d:fd:0f:2a:83:ed:56:b3:5f:46:ab:64:9c:81:14:77:e8:cf:
da:f9:ce:61:a5:f8:d7:f7:a7:8f:ad:a3:e8:cb:37:70:ec:e5:
a5:d7:7b:f4:7c:b6:9c:17:ef:2a:6f:b7:d6:02:bc:4a:bc:27:
84:e7:44:d9:e5:3f:83:a8:3c:8b:5c:42:d4:9c:ed:d9:ba:d6:
d5:cc:6e:e7:b8:08:70:1a:5f:16:0d:96:72:b0:b2:3e:ad:a8:
cc:50:2a:9a:69:ca:6a:cc:6e:6f:02:59:4d:bc:85:ec:08:55:
9e:a2:80:7d:95:97:4b:1e:0a:7f:5b:c5:fb:fb:1b:f7:9c:cd:
dc:68:e0:2c:8f:36:3e:f2:51:79:57:ef:bc:4c:9d:ae:52:65:
66:d0:37:08:73:9f:7f:13:fd:b4:e8:70:ad:d5:7d:5c:dc:d1:
6a:b0:42:45:e4:45:92:69:7b:88:84:bc:4a:3e:50:09:ae:68:
f4:0b:44:09:f0:dc:b2:bf:e5:0b:02:63:25:aa:15:8f:e1:06:
98:9c:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:42:04 2025 by rpki-client