Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: EZBMphhug/QtFYAnYbRFCfXP71KXLqpb7zNByqk33xU=
Subject key identifier: 41:BA:45:04:05:89:D9:47:B7:5F:14:98:46:A6:78:99:13:E2:BD:96
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 01969F76645A4BA6A97B83AC0762DD543FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 08A3
Signing time: Mon 05 May 2025 08:00:58 +0000
Manifest this update: Mon 05 May 2025 08:00:58 +0000
Manifest next update: Tue 06 May 2025 08:00:58 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: vSZBEOHW4qBUNBThktOnU2UZayjt9ahjUSSOzbE8s6E=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:64:5a:4b:a6:a9:7b:83:ac:07:62:dd:54:3f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: May 5 08:00:58 2025 GMT
Not After : May 6 08:00:58 2025 GMT
Subject: CN=41ba45040589d947b75f149846a6789913e2bd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:a1:86:44:75:96:f8:39:e5:b7:89:29:5d:
87:70:82:d5:fa:ad:3e:75:0c:a0:a5:8b:72:16:6e:
56:81:42:15:6e:b4:93:73:23:d1:28:7f:04:d7:f9:
37:ec:59:bb:c8:45:a7:3b:c4:28:12:7e:5e:13:30:
a4:fb:c0:e5:56:35:2e:e3:8d:6f:bc:3c:d5:13:9c:
c6:bd:a5:56:52:5a:f6:cc:f4:d8:0b:40:02:36:e0:
bb:eb:7a:3a:3a:3a:e6:bf:76:d8:d8:eb:e6:43:b3:
a7:52:cd:9f:e9:7a:cb:36:23:4b:f3:73:79:8c:d1:
af:ed:6a:ec:c8:8c:c7:7f:65:5d:cf:0e:9e:92:70:
ec:c7:ac:16:e0:30:e9:53:f2:74:d7:d5:73:f5:68:
4d:05:f9:91:3e:7c:02:f9:bc:c8:f6:a7:ad:0e:fc:
1f:e2:32:49:7f:19:91:22:f2:14:d9:16:61:44:d1:
8f:82:fd:0a:6d:ed:5c:5c:d0:56:67:f7:d3:ee:0f:
07:3d:7c:ee:88:4b:7a:fd:e6:a5:a6:b1:55:d9:29:
63:dd:53:3f:c3:70:95:9d:cf:e5:d9:51:59:57:f3:
8b:b6:48:26:b0:b6:bc:c6:ab:cc:58:45:a3:05:62:
cd:a9:45:dc:35:75:42:7e:64:49:c1:46:b9:83:19:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:45:04:05:89:D9:47:B7:5F:14:98:46:A6:78:99:13:E2:BD:96
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:5e:e8:45:22:e3:c7:9a:a4:57:87:15:35:03:12:41:7f:
8a:e3:9c:ce:5e:37:6b:ff:16:4b:9b:d6:ac:8a:6e:45:88:06:
5e:7b:a2:11:2d:98:9f:46:14:85:9e:9a:3d:5b:a7:82:47:aa:
9b:47:0e:c7:fc:20:ee:92:01:59:bf:97:bc:e4:95:8e:42:0e:
01:c9:7e:34:22:96:ac:ed:37:04:ba:e0:bd:76:8d:08:3c:4d:
4a:1f:52:b0:f2:10:12:a9:f6:b9:0c:31:58:78:70:c6:50:a3:
33:97:41:13:b7:7c:d9:f8:8b:11:e0:a0:a4:a5:01:cb:be:2b:
10:cc:bd:c8:46:dd:d4:a9:46:33:e7:e1:4a:99:ef:1c:a9:ad:
6d:b5:aa:3e:1b:de:e3:fd:92:7f:9b:73:3e:0a:e7:83:41:8e:
0f:d5:c8:17:73:cc:f4:dc:93:76:02:d3:4a:16:7d:3f:16:7e:
5b:37:7f:ee:d3:47:18:46:18:65:c8:eb:4f:97:4b:cf:75:95:
ff:1a:77:59:14:a4:41:d4:f9:93:5c:43:5f:ed:77:e9:63:09:
bd:1b:4f:f9:bd:2d:b9:4d:a7:3c:b9:8a:30:17:f3:69:df:a0:
84:cd:0c:3d:74:31:a9:99:88:30:b4:0b:1b:d2:03:9b:34:cd:
d2:92:04:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:24:52 2025 by rpki-client