Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier: AQzDAnKGc0z2qBkPevvNspOody54+/Uhx+sjEpShnZU=
Subject key identifier: 6A:72:C1:26:2B:D0:38:2C:7B:8F:37:E6:13:BE:87:2D:FF:36:39:04
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 0196A8E6E7C75A94DBA8D1F76F4327F81D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 04:00:26 +0000
Manifest this update: Wed 07 May 2025 04:00:26 +0000
Manifest next update: Thu 08 May 2025 04:00:26 +0000
Files and hashes: 1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 6I1aI/8bB71lJZsVlBF2WjhjqFVYyzm6FE3Lw2mKuoU=)
3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:e7:c7:5a:94:db:a8:d1:f7:6f:43:27:f8:1d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: May 7 04:00:26 2025 GMT
Not After : May 8 04:00:26 2025 GMT
Subject: CN=6a72c1262bd0382c7b8f37e613be872dff363904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:cb:20:0c:e4:a5:29:96:2c:78:2f:f7:df:
a8:20:0d:63:78:c8:b6:b9:d2:ee:31:4c:49:90:2e:
1e:29:0a:d0:09:3e:8a:d5:40:78:6f:8b:e9:c1:f2:
f9:1e:9d:73:09:65:61:29:89:55:92:5c:92:72:a5:
ed:52:96:4e:1a:cd:a0:2b:a3:d0:a3:e1:b4:ae:64:
d4:64:a3:3f:d8:a3:a2:09:ea:0a:ff:ac:66:77:5c:
a1:f1:05:e3:c2:f4:a0:9f:57:5a:2a:65:da:d0:9a:
c6:9b:9d:94:3b:be:9f:3f:2e:d6:46:6e:32:14:3f:
ae:9f:df:66:25:52:4a:88:d2:40:0a:dd:75:ad:24:
1d:bd:48:5e:4b:85:80:69:f2:97:c6:60:1a:8d:26:
0c:07:f0:2b:c8:21:79:f5:52:48:b3:20:0c:a0:37:
36:63:d3:33:1b:08:a3:0c:e9:6f:74:14:e4:bf:dc:
aa:ba:19:0d:31:f8:08:c8:37:6e:57:97:be:a6:8c:
db:61:40:6d:d8:af:23:76:7d:a3:33:dc:f8:80:de:
4f:eb:47:32:18:3b:c7:ea:b5:b8:1c:4f:bb:ed:c6:
12:e4:73:8b:81:ee:03:45:10:c1:20:ae:4a:a8:c0:
e2:c1:9a:a3:53:e9:5d:85:7d:ed:8f:77:9d:2c:56:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:C1:26:2B:D0:38:2C:7B:8F:37:E6:13:BE:87:2D:FF:36:39:04
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:56:bb:2f:60:06:f3:61:7b:31:3f:0a:13:e4:85:3d:24:3c:
62:df:c9:b2:c7:13:02:79:fd:4e:a4:7c:fd:a2:5e:1c:a3:de:
1e:ac:a9:71:b9:65:c7:01:55:64:a6:92:ec:08:41:ea:82:19:
0d:de:d7:6b:df:62:36:f7:f2:d9:33:e5:6f:d0:14:6c:7f:d5:
f4:4b:d2:e1:4d:10:dc:80:90:c5:c9:ec:fa:f0:68:e0:a7:50:
7c:2d:b5:51:66:ca:a6:77:9b:b0:31:cd:be:77:a0:07:37:a5:
08:4b:52:b7:08:41:c3:05:b1:80:17:c6:7b:6b:c7:38:d1:38:
9c:e0:b8:a8:5f:c8:12:5e:6b:67:6d:ea:e2:dc:ab:b6:f1:3a:
e0:ed:23:6f:ab:01:20:71:c1:23:e3:8f:ec:7c:6d:df:36:9a:
ed:d5:1b:c6:c9:1a:e8:5d:97:fc:7f:2a:3f:1e:93:25:f5:01:
ae:b0:dc:0f:5c:d7:ad:1b:31:5f:eb:c2:c5:8a:a8:a1:59:a2:
61:0f:38:c8:bd:6c:6a:87:63:7e:60:9c:0e:ed:df:8c:e2:ee:
0f:6a:26:73:49:2a:28:ff:61:2e:27:0c:a6:bf:c1:25:4f:f0:
d8:91:35:33:f5:8f:6f:73:e9:94:68:f6:ac:99:7a:de:50:5b:
5f:d9:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:16:18 2025 by rpki-client