Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: 5pvIIVtJM877e/j1iQ72bNIs2Vf/dVYAvTgo+4nSVNo=
Subject key identifier: A9:F4:05:DA:27:E7:C0:8A:42:65:04:85:AC:DA:7A:05:4D:17:12:0B
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0196C4CC30C02FD6E1BBD30C3347C5DD63EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 14:00:38 +0000
Manifest this update: Mon 12 May 2025 14:00:38 +0000
Manifest next update: Tue 13 May 2025 14:00:38 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: qoeT4gSIQrjCXC040ztgj3jlaiu8yFEXD/Rul5bDe04=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:30:c0:2f:d6:e1:bb:d3:0c:33:47:c5:dd:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: May 12 14:00:38 2025 GMT
Not After : May 13 14:00:38 2025 GMT
Subject: CN=a9f405da27e7c08a42650485acda7a054d17120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:86:55:1d:63:4b:ae:a9:e2:ce:ba:50:e7:
ec:02:56:e3:75:bc:96:f1:ef:c3:2d:41:4b:97:fb:
7f:f9:03:36:d0:31:4f:0c:03:2f:db:54:cb:0d:86:
9f:72:e5:35:cb:40:4f:c0:b3:cd:7f:e4:28:89:32:
51:66:db:6b:38:d4:c0:c6:4b:5f:17:ef:f1:8b:eb:
11:ed:d4:95:0a:36:89:62:7e:4d:dd:86:34:f7:c4:
f4:b9:d4:ed:8d:70:75:e5:43:92:db:cb:2d:43:ac:
46:4c:29:c4:b4:97:ba:0f:c0:9b:f8:4e:40:51:cf:
3a:6c:f4:93:59:10:02:e9:3f:cd:c9:85:70:81:49:
28:7b:5a:8c:86:08:44:43:33:e2:0f:a7:15:6d:60:
38:0b:f8:82:94:bc:73:5e:b1:4b:9c:e0:68:c7:ee:
68:2f:60:5e:90:a6:6c:9b:d4:01:87:87:bb:be:a5:
e4:1f:91:b7:cf:ec:44:82:31:b1:c9:a4:80:44:e5:
14:bb:93:28:34:fe:20:73:4d:a1:46:b2:b9:bb:83:
03:96:85:4f:47:2f:89:e4:3d:98:2b:0e:4e:60:b1:
6c:c8:fa:2a:34:12:35:c3:c0:4b:42:3e:36:b3:82:
95:b3:da:19:52:f7:8f:c1:ff:e4:93:7e:f4:a0:1d:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:05:DA:27:E7:C0:8A:42:65:04:85:AC:DA:7A:05:4D:17:12:0B
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:56:b3:10:bc:73:3e:aa:3c:5c:ab:38:74:0b:65:b9:f9:
2f:ce:da:6c:13:4c:58:f2:05:4e:82:6a:cc:ae:f3:93:44:14:
9b:5e:8b:77:96:1f:4f:39:66:01:7f:51:1d:04:33:5c:56:4f:
0c:d8:ac:2a:fe:cd:72:e4:ec:90:7a:d2:cf:14:dc:0c:06:ab:
a3:2d:fe:23:43:24:eb:23:74:df:23:37:24:b8:b0:ae:39:e3:
a2:40:75:0f:b4:65:30:fa:3d:0a:9f:f8:ba:b1:94:eb:c4:d1:
67:fc:c7:46:d5:2a:73:c9:3f:c6:55:78:65:0c:36:02:ce:15:
67:1f:2f:77:df:84:82:0f:e8:98:71:89:22:bf:10:b7:b6:b8:
b7:4e:2c:1d:06:87:1a:d9:1b:27:3a:91:36:b4:fb:08:39:81:
1e:5d:b9:a8:bb:24:31:f9:06:3e:3b:e2:7f:99:bf:1f:23:9d:
7f:3b:d8:ef:d6:31:8d:4e:32:ff:a4:72:3e:a9:03:76:1c:f0:
f6:e4:3d:99:23:fa:d1:2d:da:15:8c:6c:8e:7e:25:08:93:78:
e2:3d:16:c6:b6:f1:3a:e1:f0:e2:de:5d:d0:02:62:18:f6:01:
71:67:a4:8d:60:90:cd:6e:7b:b4:d7:e0:fe:7d:43:12:39:7f:
26:be:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:58:14 2025 by rpki-client