Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier: YUKzE7lxwULNMNr8a/csIvmn/o2OzGPzkdSBP8sSB04=
Subject key identifier: 88:09:10:F4:35:95:7A:0C:C8:CF:86:7F:37:3A:70:EC:B6:1F:0F:22
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0196AD9F63EA390D2FC06C4FCCA331618D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 02:00:26 +0000
Manifest this update: Thu 08 May 2025 02:00:26 +0000
Manifest next update: Fri 09 May 2025 02:00:26 +0000
Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: xvWs2Byg4gcM/zEMPifouEHwS2zy2pBzJ3FYNsoRAGQ=)
2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:63:ea:39:0d:2f:c0:6c:4f:cc:a3:31:61:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: May 8 02:00:26 2025 GMT
Not After : May 9 02:00:26 2025 GMT
Subject: CN=880910f435957a0cc8cf867f373a70ecb61f0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:07:cd:1e:8f:0c:7d:a9:2c:3a:1b:57:c0:
59:e2:c8:0a:41:76:28:bb:c7:df:d3:28:a9:7b:30:
50:e2:0e:c9:86:b9:1a:9d:ef:a3:05:1b:f4:0b:0d:
b7:47:82:4f:31:52:a2:b1:50:3e:4a:f3:47:cf:01:
f3:34:00:14:27:2d:4a:79:20:3d:ed:c2:38:b6:6d:
07:f1:e3:2a:73:7f:98:15:f9:90:5e:71:68:28:4d:
e2:8e:0c:fe:24:ca:6f:bc:0f:72:f8:92:88:2e:d6:
fc:f9:aa:21:2f:c6:ea:e0:45:d6:53:c7:4f:2c:48:
ab:24:94:d6:d9:d0:1a:8d:3f:a0:23:1d:b6:a7:53:
22:dd:93:d0:24:61:12:7b:79:05:20:06:b0:a2:61:
a3:55:cc:a0:ea:ff:f2:21:01:7c:f9:1d:2f:a1:7c:
f5:0e:29:96:07:68:c8:aa:61:80:47:03:3a:41:71:
74:7b:c5:22:42:be:d8:23:d5:4a:d3:17:38:bc:38:
85:eb:83:8a:f9:bc:88:b9:f9:b5:28:78:e4:3f:49:
5e:48:20:ee:7a:c9:6c:b5:a2:2b:3e:c3:72:0d:cb:
6d:52:f4:9d:50:ba:b0:cc:27:ea:bc:4e:64:ee:be:
d5:fe:7e:aa:41:9a:47:4e:3f:13:31:3a:d9:cb:7f:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:10:F4:35:95:7A:0C:C8:CF:86:7F:37:3A:70:EC:B6:1F:0F:22
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5e:d1:ed:b6:fd:eb:c8:4e:76:51:af:0d:03:88:cd:53:2a:
9a:f3:a3:9f:d4:82:5b:a9:51:3b:13:0a:a1:d8:dc:5b:f0:90:
7a:3f:7e:d5:99:ad:aa:9e:8a:f2:82:c9:b0:cd:fe:c4:46:66:
51:19:03:e1:61:63:29:60:d8:23:e7:de:5e:4c:2a:b0:ab:66:
88:2b:70:e3:35:47:f6:9f:f9:9b:fa:6f:66:ec:19:93:83:a0:
3a:02:7d:5d:b0:f3:61:7e:78:9c:7c:f5:e8:6a:30:9e:7e:94:
e4:3c:0b:0a:a1:5c:4a:b0:7a:7c:8e:cd:6c:92:f9:a1:9a:c7:
90:bf:fd:9d:6e:4c:8c:1a:96:5c:74:66:7a:dc:86:72:0e:a7:
e8:08:03:7c:07:b6:02:15:ac:11:34:b3:cb:a0:2e:b1:ff:dc:
b7:65:d2:fa:4e:80:c7:b8:63:bd:31:c8:25:82:d8:fe:70:6f:
91:48:c9:fc:f7:28:d3:3d:71:20:ce:92:16:25:86:42:ba:b3:
08:f3:bb:97:d3:63:ec:a1:d6:6e:e5:4c:9f:4d:3a:9a:dc:33:
85:99:d1:8b:c6:25:4b:aa:04:f8:91:ac:4b:cd:af:f6:d2:ca:
9c:62:23:d1:e4:cf:f8:96:68:31:8e:a5:0f:40:ce:69:3a:d7:
c0:c5:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:53:54 2025 by rpki-client