Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: iryHtJzvEOPher4P8lPHXhaNEkVIZvfScA9vlUXeG/w=
Subject key identifier: FA:85:AD:21:09:8A:BA:EF:91:30:F2:EF:9C:D0:27:12:77:0E:CB:6F
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0196BC6DCD02B699C2E503CE7151CA697F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 127F
Signing time: Sat 10 May 2025 23:00:34 +0000
Manifest this update: Sat 10 May 2025 23:00:34 +0000
Manifest next update: Sun 11 May 2025 23:00:34 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: w8BVYSwF5cZXiiMlr95luCy/xPGLRrWPnEzxsC4FpfQ=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:cd:02:b6:99:c2:e5:03:ce:71:51:ca:69:7f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: May 10 23:00:34 2025 GMT
Not After : May 11 23:00:34 2025 GMT
Subject: CN=fa85ad21098abaef9130f2ef9cd02712770ecb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:b0:12:b3:ac:ac:05:02:90:39:94:bd:61:
89:46:f0:4c:09:84:9b:03:17:c2:ad:25:ac:c5:9f:
fa:21:09:5f:bc:73:8f:c0:d2:d2:30:97:5f:5b:78:
79:3e:48:1d:7d:c5:53:ad:f2:34:f7:a5:0a:b3:46:
0d:6c:b6:c5:3c:e2:f3:ac:ec:87:4d:3b:17:e1:51:
00:84:58:88:e5:1f:ed:28:99:92:0d:8b:b9:8d:3f:
26:84:b4:2f:ed:45:10:b1:e4:b9:cd:43:cc:3e:dc:
ee:e3:8a:f0:d8:f8:88:a2:85:f8:18:04:91:5e:35:
7b:e8:b3:7a:ac:5c:e3:7f:d3:18:fd:48:bb:46:6f:
26:b7:c2:33:0d:f1:65:cc:30:7f:91:31:65:a0:37:
f2:32:09:26:ec:41:31:44:61:b6:aa:3d:ee:2e:30:
76:fe:90:db:3e:34:65:de:11:9d:c3:40:78:6f:85:
67:18:9c:a2:cb:06:32:44:2b:1a:ee:4e:73:69:86:
a6:a4:c6:d4:d8:8b:7b:00:a4:67:3e:6e:92:8f:2c:
05:26:2c:89:ee:54:9c:14:18:c3:e6:98:56:59:a4:
ea:62:8f:5c:4b:74:4d:7d:14:81:8b:1e:3f:af:c9:
13:c9:1c:78:cf:bc:46:69:73:a0:54:9f:14:bc:c7:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:AD:21:09:8A:BA:EF:91:30:F2:EF:9C:D0:27:12:77:0E:CB:6F
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:35:53:42:4c:69:1d:11:18:48:93:4e:ef:62:5f:5c:cd:
2f:ba:b0:1c:28:43:30:b9:4d:87:14:dc:2b:1e:2b:38:76:25:
3a:37:ef:0d:ad:04:2e:75:31:87:ce:0d:1a:cc:93:9c:45:cd:
cb:34:33:76:2c:b0:6d:89:92:03:0a:fc:db:fc:a3:8b:89:b4:
6b:c7:1e:7a:2b:c8:74:a4:8d:b2:ee:ec:85:63:70:a0:5f:0c:
88:66:29:1d:56:55:5b:98:81:0b:a7:47:c0:d0:ca:57:42:61:
5e:21:b8:38:fe:ba:18:01:ef:af:c6:8f:1e:33:33:c9:e5:f1:
80:41:3e:95:e6:74:4c:90:9d:1d:3d:04:0e:04:47:9f:7a:1b:
53:2e:19:f5:ff:a4:bf:c6:ac:b0:7c:81:16:94:ed:8e:27:bb:
a1:0f:6c:d7:de:d5:e1:95:33:1c:e0:8f:5d:28:22:f5:bb:24:
30:51:0e:76:1a:76:6c:30:84:ba:43:76:4b:8a:22:95:3a:51:
2f:59:e8:2a:7a:2a:95:90:6b:eb:5a:a5:6d:ad:ad:e6:0b:6e:
d4:70:ab:02:d3:73:1d:49:43:1d:b9:45:1f:73:ed:7a:21:39:
bf:8e:f5:49:eb:09:18:6e:b1:ea:91:b6:ee:06:c4:4f:74:a9:
a0:74:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:01 2025 by rpki-client