Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: IdGgnrKtAzy1Q+sOSg3aOJa2P5iUjHp7BezrPLdeD9g=
Subject key identifier: 39:46:41:9C:60:7F:F8:88:A2:E5:98:33:59:69:74:BB:0E:A4:20:BD
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 01969F0889C9F07C74034B21616A6302295F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0E32
Signing time: Mon 05 May 2025 06:00:58 +0000
Manifest this update: Mon 05 May 2025 06:00:58 +0000
Manifest next update: Tue 06 May 2025 06:00:58 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: 2///DrbV83ftcg2De8a88IRO7J0FCDMK3bo9nVmLzB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:89:c9:f0:7c:74:03:4b:21:61:6a:63:02:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: May 5 06:00:58 2025 GMT
Not After : May 6 06:00:58 2025 GMT
Subject: CN=3946419c607ff888a2e59833596974bb0ea420bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:76:e9:e5:0d:b7:88:85:68:51:8c:1d:fb:
c7:57:7a:71:73:90:7b:cb:7e:40:31:27:b3:1a:5a:
04:9f:87:10:3f:7b:9c:ff:33:95:36:f9:20:d5:f0:
84:fe:b2:dd:d8:6d:3c:24:4b:b2:0e:42:62:f9:52:
6b:52:dc:6e:54:61:45:0d:56:25:64:d1:a3:10:5f:
9d:22:5f:8c:82:99:de:da:86:33:de:04:74:c0:4d:
0d:7d:e5:80:19:96:35:78:09:71:04:de:4c:9d:97:
f3:49:ed:0c:4c:b1:ea:06:9d:d9:21:30:89:de:90:
65:6c:13:5d:81:97:d5:77:44:65:ec:80:93:92:1f:
ee:98:40:aa:6c:44:90:6b:f4:d4:67:f3:a9:a8:b1:
86:da:19:7f:16:ac:ff:e8:b0:8f:46:15:b1:b6:19:
95:de:2f:07:18:d4:c6:12:0d:4c:91:66:86:58:7a:
76:2f:58:15:04:c7:1a:41:63:b7:e8:11:b6:47:5c:
0f:45:08:e4:8a:1d:b3:5f:ac:b4:63:bc:6d:2c:6e:
04:5a:aa:28:94:92:54:08:59:54:c2:66:db:26:6b:
9a:82:62:85:2c:b8:5a:f5:9c:1f:1f:f5:11:cd:71:
13:92:84:0a:9d:ee:f8:66:ec:80:34:46:63:ee:9c:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:41:9C:60:7F:F8:88:A2:E5:98:33:59:69:74:BB:0E:A4:20:BD
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:95:96:0a:67:0e:5d:cb:4d:6a:b2:81:5c:45:6c:ea:8f:31:
06:7f:72:29:fc:7c:18:01:5a:f6:cb:a0:a0:28:a2:54:e2:d4:
49:83:be:7e:54:95:64:56:9e:f8:ac:20:c2:b1:31:ac:35:3d:
71:32:77:67:ee:e9:e0:3a:ef:11:a7:92:6c:a1:36:ec:f4:f4:
5d:7c:3f:7f:29:be:25:bc:b2:7e:27:ba:ac:ef:a1:82:1c:79:
5d:b9:38:5f:11:7e:45:38:68:66:07:36:31:f0:c9:35:54:53:
3d:71:ef:78:75:19:3d:fb:bb:b0:50:19:72:44:38:62:6c:1a:
0d:8f:e3:e6:40:ea:08:30:35:38:a0:c8:e2:f6:c7:7c:59:f4:
0c:d4:b5:c4:1d:c7:cb:16:1e:bd:8a:7c:68:bf:e0:78:4a:6d:
22:b5:32:d4:1d:08:84:d8:b9:29:3f:3a:61:55:48:a6:65:81:
3c:af:65:e7:e1:0c:93:e9:71:5a:85:e3:ba:b5:69:21:ad:28:
b2:4d:a2:1c:10:c2:8b:f4:2f:e0:95:72:f6:31:a9:47:27:19:
32:bc:be:a9:fd:eb:41:27:3f:9c:3a:40:a6:3c:13:ec:4b:2a:
39:62:ca:ff:aa:1d:15:28:00:92:d7:5c:59:36:cc:87:b2:b8:
44:46:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:22:43 2025 by rpki-client