Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: rrEXOqo/LQb1epOvBX1GRLkC+P1uiBbXmrc8N7JSLzk=
Subject key identifier: 3C:E9:2D:9E:A3:C6:AF:6E:AE:FD:5C:E7:0F:B9:7E:2D:8B:07:31:39
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 0196B5FDFFE3CB8644B3F8E253C97150D924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 17:00:44 +0000
Manifest this update: Fri 09 May 2025 17:00:44 +0000
Manifest next update: Sat 10 May 2025 17:00:44 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: oG3RyHkZiiOPn3k74HA7t1xNIK2AMI2nf3aHmJ0nCEc=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:ff:e3:cb:86:44:b3:f8:e2:53:c9:71:50:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: May 9 17:00:44 2025 GMT
Not After : May 10 17:00:44 2025 GMT
Subject: CN=3ce92d9ea3c6af6eaefd5ce70fb97e2d8b073139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:e5:56:a8:3b:05:eb:4d:63:05:95:4b:68:
c7:a7:07:1b:ce:35:df:b7:2e:ed:4a:e0:3b:94:4c:
bc:50:54:77:ff:12:b3:8f:9f:5a:e1:9a:68:65:80:
a8:5a:40:f3:13:24:eb:a4:39:f2:ec:dc:f5:67:03:
67:f2:84:ef:9e:a9:ad:a2:5a:64:6d:1b:d8:b6:c7:
4b:df:40:99:d2:90:54:58:ac:d7:5f:7e:fa:78:fb:
2d:71:74:ba:65:3e:f9:1f:a9:a0:74:32:d8:b8:d9:
57:bd:d7:78:51:8a:fa:e9:c0:eb:90:ea:92:e8:f8:
51:96:a1:ff:54:50:98:51:02:73:0e:c0:f7:ed:bf:
0a:01:ec:1f:4c:b2:21:80:8d:4d:23:80:7e:c6:03:
77:49:b7:77:78:cb:75:82:25:bf:c6:fc:1f:9e:4d:
a8:fe:0d:94:9f:c8:47:9a:3a:47:ed:6e:c4:5f:7a:
b9:79:ec:8b:57:45:e3:cf:8f:41:41:67:07:d1:93:
d4:dc:d1:5f:65:ac:98:25:7c:89:ec:7d:d9:48:cd:
07:90:13:6c:bc:ba:a7:64:b3:b0:22:26:0d:81:2b:
b2:68:62:9b:72:96:57:38:52:8e:4a:55:e0:06:7c:
a2:82:dc:66:fb:8d:d5:b0:ef:09:de:73:ce:b2:fe:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E9:2D:9E:A3:C6:AF:6E:AE:FD:5C:E7:0F:B9:7E:2D:8B:07:31:39
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:b6:e2:e3:d2:c6:66:d8:b0:32:47:0d:2c:62:3a:02:be:8b:
ec:92:a3:77:a8:df:fe:35:0c:e6:6b:7e:30:72:2d:30:a4:d6:
99:0c:dd:87:fd:a4:3f:d8:5e:5a:24:a4:23:93:b2:fd:0e:45:
1e:26:11:5c:1b:9e:fc:78:2e:f1:a1:9b:67:bb:31:76:c7:4c:
6a:e2:38:31:e2:e7:5d:af:d8:70:f1:ec:15:4f:b8:ec:12:c9:
3c:43:a9:bf:67:f2:db:98:f2:4b:41:13:7f:87:4d:7b:8b:84:
2c:0c:c2:9a:73:e5:e2:0f:be:b2:f7:35:d4:12:91:db:c0:ab:
d0:95:89:f6:1b:19:ff:8f:ee:e0:23:d9:26:1f:98:f7:34:0f:
ee:3b:15:dc:22:e7:84:81:50:70:b2:50:b7:aa:ff:26:0a:92:
9c:0d:45:6b:e4:d8:ed:9d:46:ed:f7:a6:a2:ca:fc:ca:82:ef:
87:a6:7c:5e:19:52:68:d4:aa:a0:f0:a4:78:34:aa:de:be:24:
ad:8a:ab:54:a2:78:c9:fc:2c:55:82:0a:31:3f:dc:66:f1:50:
55:70:25:a8:1c:37:16:fb:dd:dc:e9:e8:20:bf:e5:f6:b8:9b:
df:9e:1a:7d:a1:73:78:0d:52:55:41:77:bc:f5:6e:39:74:01:
7a:36:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:36:00 2025 by rpki-client