Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: 7V30TOXg7NkmTWz8ReI0cNOSk1I/O9xfqFFoqAK17ss=
Subject key identifier: 51:FA:D3:2C:D6:83:90:95:87:07:DC:70:72:4A:65:B2:07:8C:DF:82
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 0196BA1171DE3FF8F7F1DAF7DA13CCD005C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 12:00:27 +0000
Manifest this update: Sat 10 May 2025 12:00:27 +0000
Manifest next update: Sun 11 May 2025 12:00:27 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: i4SXiXdcQ2eKUaJXe2UcrEk0wsSXWB0Oz5mzFQUmkkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:71:de:3f:f8:f7:f1:da:f7:da:13:cc:d0:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: May 10 12:00:27 2025 GMT
Not After : May 11 12:00:27 2025 GMT
Subject: CN=51fad32cd68390958707dc70724a65b2078cdf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:e0:6e:9b:b3:4d:92:2c:e1:71:c2:e3:a9:
62:d4:40:88:a9:bc:0b:c6:68:a3:87:b9:55:c6:d7:
90:d9:15:47:38:2d:ff:2c:e5:dc:0b:83:30:6b:b7:
ee:4e:8b:06:80:78:1a:be:eb:14:ae:6b:99:d9:74:
af:d5:d7:97:f0:81:51:da:91:74:67:cf:d9:4f:03:
46:ea:b3:e6:66:39:2f:2c:24:e1:5b:99:a4:27:52:
dd:b1:67:3e:21:bd:d8:23:61:51:5c:e8:f5:3f:f7:
7e:22:73:ec:3f:88:b2:4d:de:46:2e:9b:68:6f:aa:
dd:a8:b3:fd:db:0e:09:17:d6:a3:7e:ee:ea:50:68:
a5:2c:88:09:77:83:10:4e:61:f2:68:36:32:9b:a8:
8d:6c:bf:c7:23:ed:f7:2f:29:28:a9:b7:58:3d:4b:
89:8c:19:23:3e:9a:37:0a:61:8e:34:b5:01:e9:be:
9c:d0:39:7d:11:31:67:cf:10:83:56:29:74:b5:ab:
d1:8c:44:84:fb:1b:9b:0b:d5:92:37:1a:c3:1c:b7:
89:54:18:de:33:c4:c8:84:92:71:f0:f3:63:4d:1c:
f9:6c:83:71:15:71:04:c6:bc:74:c6:e4:0e:84:69:
ad:7c:93:85:cf:7a:85:28:6c:64:4a:f1:df:91:6f:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:D3:2C:D6:83:90:95:87:07:DC:70:72:4A:65:B2:07:8C:DF:82
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:97:16:b1:ab:7e:09:c9:12:ca:f4:bd:c3:4a:28:57:92:a8:
e5:1e:d7:1f:6d:7d:b4:c0:d6:8c:63:d3:26:f7:f5:03:94:33:
04:5b:21:20:d7:8b:70:b3:17:d3:c8:9e:c6:0b:22:fd:a5:fb:
93:3b:5a:ce:07:ec:c1:0a:f6:6d:f6:54:cd:77:50:9e:08:0f:
eb:ba:70:a3:55:e9:9d:2d:8b:36:da:bc:c7:ae:c7:a9:1c:6a:
c5:05:6c:19:95:3d:63:37:85:87:af:90:79:9e:fd:01:6d:00:
d1:07:63:c5:fc:ab:95:bc:e1:84:16:a6:45:16:fa:b1:eb:ab:
27:5c:4a:4f:aa:06:d3:86:59:e6:26:b3:40:0f:76:d9:c5:ac:
1c:43:de:dc:6a:a7:ac:3e:cb:47:cd:55:51:b5:1b:9a:75:20:
2b:e7:e6:32:9d:f0:95:68:be:fe:70:0b:e0:43:fb:4e:a4:01:
9a:cf:d5:ed:47:09:cf:f2:c2:92:b4:18:3c:af:1e:b0:6e:4d:
a9:57:66:b9:b7:67:b0:f1:46:d1:a1:d8:47:7f:9c:ee:d0:33:
bc:c6:2e:92:6b:dc:8b:11:27:76:29:10:53:19:49:b5:fd:70:
78:8f:a8:08:ac:f8:4d:4b:48:8e:12:e5:9d:9e:4c:d4:4e:17:
45:92:c5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:11:05 2025 by rpki-client