Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
File: Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft (raw, json)
Hash identifier: E9U9OiRhywRAFufqXQ02DjmDh/9oJ2PFO6AaxPUThlM=
Subject key identifier: A7:F3:C3:62:6C:1E:5D:B7:44:AF:84:E8:76:04:D0:60:A9:F9:91:E9
Authority key identifier: 07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
Certificate issuer: /CN=07077969a8b6a55c461adde106c006486a26359f
Certificate serial: 0196C23997005F9F3DC686847657D7BA4997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
Manifest number: 04EC
Signing time: Mon 12 May 2025 02:01:15 +0000
Manifest this update: Mon 12 May 2025 02:01:15 +0000
Manifest next update: Tue 13 May 2025 02:01:15 +0000
Files and hashes: 1: Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl (hash: cjb+AVHNL91v0RXxo5aNU/71Q8XGS2rpQnu2Z5prqh4=)
2: ke0E2oaIbTDJICMOrlx-QJLWUjo.roa (hash: b/M26I51nwp3aYDvgtC8WCvNRIgae2epSiIIkTtKKdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:97:00:5f:9f:3d:c6:86:84:76:57:d7:ba:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07077969a8b6a55c461adde106c006486a26359f
Validity
Not Before: May 12 02:01:15 2025 GMT
Not After : May 13 02:01:15 2025 GMT
Subject: CN=a7f3c3626c1e5db744af84e87604d060a9f991e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:ec:fe:bb:5d:d9:84:78:bd:ed:5f:0a:bf:
ed:68:bf:5b:68:41:67:a5:ae:f4:24:36:cf:40:3e:
34:83:79:93:d9:26:be:52:ce:1a:22:a3:06:c2:bc:
d6:cb:23:65:2a:0b:f7:97:c1:08:c5:23:41:9d:fb:
8a:dc:f6:76:54:ea:3e:1a:d2:65:b3:99:de:0c:3c:
f6:e6:8c:79:d7:43:48:89:4e:1e:9e:4a:68:c9:da:
c4:36:a0:30:d5:7d:51:00:73:2c:be:8e:0d:22:94:
8d:52:2b:02:ce:f7:57:ff:4c:e7:ea:74:78:fa:e6:
d3:91:95:95:74:4d:b0:13:b7:1c:68:c9:7e:ad:13:
76:7b:e3:d2:ef:ae:69:78:95:04:b3:e2:73:87:30:
62:a3:66:71:41:fe:94:8b:18:e1:b4:6c:ab:c1:7c:
44:b5:42:f9:52:8f:f9:11:fb:71:54:2a:e8:9b:cb:
1e:7f:2d:c1:94:5d:84:a1:1f:46:fb:67:a4:a0:ea:
ce:e7:35:a4:8c:0b:ca:28:95:21:e4:36:5b:1e:bb:
e3:14:66:f0:00:87:40:7e:52:b7:46:2c:b1:a0:10:
f3:e2:c5:bb:c6:01:1f:9e:92:1f:be:9d:cd:47:49:
b5:5e:73:b2:c3:bb:f4:e3:d0:de:1f:75:dd:79:92:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:C3:62:6C:1E:5D:B7:44:AF:84:E8:76:04:D0:60:A9:F9:91:E9
X509v3 Authority Key Identifier:
keyid:07:07:79:69:A8:B6:A5:5C:46:1A:DD:E1:06:C0:06:48:6A:26:35:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bwd5aai2pVxGGt3hBsAGSGomNZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/232047-b2e8-4fba-bdd5-c3fec45ed056/1/Bwd5aai2pVxGGt3hBsAGSGomNZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:44:43:58:64:5d:a4:1c:74:34:8b:d2:07:f2:dc:28:ba:f4:
ad:f9:3a:d4:db:61:07:3e:48:8a:8d:2a:b5:a0:35:ac:ea:3a:
2c:8c:db:a9:1c:04:15:fc:53:37:48:b9:e6:79:09:93:35:7d:
52:f5:59:b5:5a:60:60:3e:3e:24:e1:1d:88:d4:de:42:6d:3d:
49:99:d3:5f:d7:1e:2d:89:ad:ac:a0:25:9b:87:94:4d:d8:79:
87:68:a8:35:6f:41:e2:f4:0b:1d:32:79:48:d4:3d:ad:c6:4f:
c7:51:d7:7f:0c:8a:8f:07:de:1c:24:42:ca:90:b4:c3:ef:01:
52:0c:ce:71:a4:88:22:59:85:97:61:c9:b3:cc:85:fe:04:b0:
c1:0e:b0:9f:0c:6f:23:d1:e5:7b:83:14:d6:a9:3f:cc:a5:67:
c5:64:47:c9:1d:38:79:ce:00:ad:16:38:4e:d4:4f:47:b6:e7:
99:8c:cf:17:ae:d9:e4:af:f3:4c:6f:cf:b5:a8:78:b2:a5:79:
04:8a:12:04:07:56:ae:25:39:2b:bb:7e:23:ed:c6:e1:2b:10:
81:aa:35:7e:32:a4:e2:99:08:2a:b9:e2:c4:d1:47:9c:d6:e0:
05:5a:2e:01:98:29:eb:79:de:1e:8e:b3:4e:0c:a5:b0:75:e1:
a3:d7:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:23:36 2025 by rpki-client