Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: 8bYmNphA1OgGYp9uyWpyxgyrZSleIcLZ5XhSDH1tb7M=
Subject key identifier: 6D:82:83:F5:22:71:6A:34:52:D5:D6:CC:23:0C:75:67:F1:A4:0C:A7
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0196C72909FB4069701A06FFB0E7F4F91F1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 13A6
Signing time: Tue 13 May 2025 01:01:17 +0000
Manifest this update: Tue 13 May 2025 01:01:17 +0000
Manifest next update: Wed 14 May 2025 01:01:17 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: VcU/I+d0zoszFiSet9kt3QLEHujE36EI0MSYBBBPeq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:09:fb:40:69:70:1a:06:ff:b0:e7:f4:f9:1f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: May 13 01:01:17 2025 GMT
Not After : May 14 01:01:17 2025 GMT
Subject: CN=6d8283f522716a3452d5d6cc230c7567f1a40ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:52:2c:46:58:d7:51:25:8b:8b:83:00:30:
7d:9f:91:99:10:8e:0a:86:6d:29:73:89:7b:61:f4:
b7:84:63:af:12:ac:76:6b:04:0a:59:d2:60:62:bb:
b1:67:d5:9e:a4:f3:08:11:a0:84:ff:de:d7:a4:7b:
d5:41:80:86:bb:5b:fe:81:7d:cc:29:22:98:6c:86:
6e:71:64:5a:28:ab:3b:2c:a0:fd:2d:3b:e9:e6:db:
ff:67:32:47:51:cb:24:3f:38:b6:b8:ac:b9:c9:c8:
a5:de:a1:60:cb:69:17:cc:60:39:94:5c:44:4c:df:
0e:62:ac:36:51:88:50:90:ef:ac:af:99:6e:c5:5a:
f2:40:1f:c5:e4:aa:a8:8c:47:4a:d0:4a:a4:e2:b9:
2f:f4:03:a6:50:3a:3f:9b:fd:cf:13:50:af:4e:22:
d8:4d:af:15:43:66:82:02:58:27:e8:e2:e3:ff:00:
a0:b6:86:e0:fd:f5:17:e2:4f:b8:61:c3:0b:ac:f2:
06:56:dc:c0:5f:13:6a:47:c7:94:f0:48:b1:9a:bf:
7d:8e:81:39:70:e6:cb:0d:3e:cd:39:7f:39:76:a5:
b0:3b:6c:6c:be:34:f7:2f:65:d8:ac:68:2d:2a:3e:
15:49:d5:51:a4:95:16:58:c8:2b:84:5e:c2:4d:31:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:83:F5:22:71:6A:34:52:D5:D6:CC:23:0C:75:67:F1:A4:0C:A7
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:26:59:51:80:5f:37:37:65:4b:43:20:78:45:cc:bf:4c:
db:f7:c8:ad:70:c7:d2:0e:ce:97:de:66:53:98:c1:54:6d:15:
11:68:1a:cb:0a:72:d7:61:64:6d:95:21:55:10:f4:c9:7a:6b:
02:f6:75:a8:f9:ce:f6:1f:e3:38:2f:0e:84:d0:b9:bd:ff:33:
e7:69:f1:fc:f5:9b:fc:18:06:d4:c3:e0:7a:87:5c:a0:36:f6:
45:28:14:26:8a:4d:8c:08:d1:0a:fb:7e:ad:9a:c5:f7:8f:15:
f2:1c:1e:88:fe:7d:d5:68:9c:c2:7a:e1:27:c4:e4:63:3b:71:
b8:c9:77:bb:22:f8:55:f6:21:af:d5:ca:04:0a:65:10:61:fc:
42:91:ed:2d:bb:f9:08:e8:cb:a7:e4:65:8c:ff:af:7f:51:46:
a8:a8:ea:17:7c:68:44:67:f2:bb:68:b0:a8:ae:04:e5:b9:c9:
f2:eb:92:79:1f:58:78:03:22:71:e8:d6:9c:e3:60:47:34:cc:
15:b7:4b:86:7c:f5:c5:5b:8e:56:05:6c:2d:36:3a:f9:a1:eb:
32:cd:0b:40:ce:65:df:4a:2a:98:99:c5:44:e3:12:68:33:19:
1f:b7:91:92:69:fd:92:5a:94:bb:3b:c7:4a:52:89:ad:0b:bf:
d5:e4:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:08:58 2025 by rpki-client