Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: QejQ+IOuO6qbH7hnbwZg8ZUvhX+Qode4Y66npP93Vac=
Subject key identifier: 58:CC:AD:38:FD:F8:DD:6A:2C:66:04:BB:88:76:54:8A:BD:EA:05:D5
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0196A240210811017EC2E71FE753D11D8C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 21:00:33 +0000
Manifest this update: Mon 05 May 2025 21:00:33 +0000
Manifest next update: Tue 06 May 2025 21:00:33 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: VBI3SsBZoWDPZp5UMKNPYfyuNtZmdwd4ExH5uZWXNtA=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:21:08:11:01:7e:c2:e7:1f:e7:53:d1:1d:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: May 5 21:00:33 2025 GMT
Not After : May 6 21:00:33 2025 GMT
Subject: CN=58ccad38fdf8dd6a2c6604bb8876548abdea05d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:a4:bf:7f:81:36:c2:65:0c:60:d4:c2:6d:
d9:3f:a1:37:14:9d:43:e0:ff:4a:7d:92:5a:b6:22:
da:ab:56:55:ff:d2:d7:b9:eb:11:04:63:b0:77:f6:
76:47:74:d4:76:57:99:40:5a:01:ea:c6:96:ad:13:
51:2d:6e:51:dd:29:65:63:48:f0:ca:a4:86:d8:e0:
03:ed:44:51:83:95:a5:42:c5:e0:7c:51:48:6c:72:
50:3f:cf:b5:54:fd:5a:af:72:dd:3b:8a:5c:30:f6:
0f:c4:9f:df:1d:83:e8:c9:0d:73:e2:59:84:28:66:
db:47:1a:b8:ae:0b:09:c9:c9:3e:8a:05:5b:84:72:
db:da:2c:d9:79:ed:5d:1c:20:f8:56:c7:fb:13:b7:
c5:0a:83:f0:a0:10:61:26:bc:d4:8f:0d:fb:b0:a2:
01:70:ab:b5:d8:55:24:5c:62:07:d7:a9:87:a2:35:
98:b8:ed:42:fb:a5:a0:bc:74:eb:a6:1a:fb:da:3c:
b8:43:fc:c5:9b:84:12:20:05:f0:c7:c8:15:a0:0f:
07:d7:36:ed:2f:f5:f6:1d:33:95:dc:4e:dc:b5:3e:
0c:17:e0:e0:b8:86:80:91:04:6f:aa:aa:8d:f2:ce:
9f:c8:2e:dc:6f:9f:52:53:6e:5c:ab:7c:23:99:af:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:AD:38:FD:F8:DD:6A:2C:66:04:BB:88:76:54:8A:BD:EA:05:D5
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:27:ad:2d:3e:2d:af:07:41:38:41:ff:44:f3:ef:8e:c3:36:
72:1e:6c:5a:dc:61:10:43:11:61:89:76:4c:5a:fb:13:2f:95:
59:d6:aa:bf:24:23:be:a3:d2:22:58:42:89:09:82:9c:28:ea:
3f:03:fa:49:8c:eb:95:54:5d:33:90:af:b9:12:c2:47:bc:9e:
24:70:6c:38:7c:64:29:47:ed:82:ce:9d:a2:ba:8c:d4:ce:0e:
e3:c5:87:d0:74:74:ae:01:17:64:83:7f:7d:57:81:c7:86:8e:
51:89:08:a1:f3:ef:11:33:95:1c:41:ea:f5:6d:6d:34:0f:8d:
9b:55:eb:ca:07:fc:7e:f9:48:0f:88:22:ad:5a:57:f4:03:4e:
5c:8d:e7:79:74:e3:c2:96:4b:10:b7:d9:c8:12:f5:5c:b9:0e:
37:5b:a9:7f:57:f9:37:7c:b2:6b:d0:10:33:9e:75:78:d1:58:
b6:69:72:94:46:9d:6f:11:96:59:5a:a7:40:47:08:37:54:15:
f5:d0:48:ef:88:20:61:bf:26:5b:8e:1b:ae:f9:fc:92:13:d0:
44:d3:25:26:22:f5:18:a5:3d:4d:b0:9e:93:e0:c5:7e:00:10:
87:15:c2:f2:62:e7:1a:71:df:ea:ad:ef:d6:ff:f4:34:c7:58:
46:dc:00:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:47:04 2025 by rpki-client