Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File: bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier: cBrntGJG24BFM5sX7CR/iXo4JvzVYmrIxFonmnhn+I0=
Subject key identifier: A7:28:D0:3E:FF:43:A1:A1:C9:38:FF:40:6D:FB:19:EF:5E:26:1A:47
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 01969E9AC0BC4B294DFAEE69DF3C23D42F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number: 1349
Signing time: Mon 05 May 2025 04:01:04 +0000
Manifest this update: Mon 05 May 2025 04:01:04 +0000
Manifest next update: Tue 06 May 2025 04:01:04 +0000
Files and hashes: 1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: vAcRFfY7e4O1ZPNHF9efDZngMy/RWveQxjURoQ427NI=)
2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:c0:bc:4b:29:4d:fa:ee:69:df:3c:23:d4:2f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: May 5 04:01:04 2025 GMT
Not After : May 6 04:01:04 2025 GMT
Subject: CN=a728d03eff43a1a1c938ff406dfb19ef5e261a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:23:de:9a:7d:ee:71:9a:ec:08:3b:43:b0:
7d:35:bc:60:53:f3:b5:1d:8f:85:6a:8c:9d:d7:3f:
38:f1:55:e3:3b:7e:be:a1:78:1b:17:d2:f1:9f:85:
7f:79:7b:bc:ba:57:d1:d7:25:85:88:fa:2f:78:6f:
1e:7d:7e:f8:a9:a2:ff:27:6b:ae:eb:b9:bc:9d:6f:
85:35:db:0c:a9:43:fc:e8:dc:f9:b3:f7:42:08:be:
25:42:09:8a:9c:5b:90:d0:db:8b:ae:4a:67:86:bd:
c9:99:21:ed:9a:0b:0f:bc:d2:34:f5:61:8f:57:cd:
aa:5b:72:94:99:fa:80:41:0f:35:b3:86:16:fe:53:
08:41:27:5f:5c:6d:48:1d:c7:91:45:eb:ee:73:58:
57:24:96:20:b0:85:06:d0:b8:79:d5:d7:4a:df:60:
1f:63:e0:59:84:34:ff:35:d3:bf:5b:33:2a:58:32:
b5:e6:c9:7d:a5:33:57:0f:d0:b4:fd:0a:80:9e:6c:
ba:16:1d:38:86:68:bc:a2:91:9a:d2:b8:60:9b:f4:
dc:18:20:8b:ae:62:76:02:8d:df:19:34:59:fb:26:
9f:23:65:57:13:d9:11:cf:e7:9d:3d:ce:95:87:12:
08:c1:4d:7b:e0:c0:4b:bd:b6:23:3e:b8:d2:f9:9e:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:D0:3E:FF:43:A1:A1:C9:38:FF:40:6D:FB:19:EF:5E:26:1A:47
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:88:72:f6:fd:6e:f4:db:70:f9:cf:3b:30:89:7a:6c:2b:e7:
66:4d:6e:af:54:10:b9:75:dd:ac:e7:66:77:70:67:d5:ac:f7:
dd:62:0f:a0:05:16:77:36:fc:0b:49:ae:2e:47:9d:b1:89:02:
58:80:e1:64:81:bb:7e:ef:ec:a8:32:29:22:67:03:29:6f:4b:
ab:ee:d4:db:2e:ef:82:81:79:4a:24:43:7d:e9:ba:d7:a3:dc:
cb:c8:57:d3:f8:18:44:94:9c:a0:d4:41:46:68:b6:23:00:e1:
bc:a4:c0:14:13:7e:93:38:25:c6:0d:27:f0:87:94:a3:82:e4:
51:b1:d2:8f:43:b1:54:76:9b:63:ce:48:b5:86:49:52:77:e9:
48:1c:c8:75:a2:d7:07:47:e6:6d:48:dd:ef:84:a5:10:ea:bc:
47:5d:c7:1f:ea:62:a3:a0:ba:61:d6:c0:36:f5:17:52:b6:18:
c2:37:b4:50:3a:48:a6:cd:56:76:a5:f4:9e:f5:ef:9a:81:b5:
53:47:a5:fb:2c:7e:28:dc:a0:96:2c:bc:fb:7d:6d:b3:c4:70:
68:2c:49:77:47:5a:f8:cc:27:21:48:cf:8c:63:dd:bc:14:72:
7c:08:c3:df:e4:94:21:82:9f:b6:40:cb:b3:8c:55:1d:11:f7:
a2:42:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:41:32 2025 by rpki-client