Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: yeJf6Y0DDc8PY1WMQRfEyQtJ3IUIJjIeRNwg4I8cmAY=
Subject key identifier: BC:A4:E2:88:DB:56:CE:68:97:98:17:E7:D1:DF:4E:6B:12:70:F1:85
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0196AC1FD7D7868379CB921BA28CC65FEA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 19:01:30 +0000
Manifest this update: Wed 07 May 2025 19:01:30 +0000
Manifest next update: Thu 08 May 2025 19:01:30 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: lHi5hF7lyxWTjIE867BSLKK7TQJoymTPReOKD9B7+1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:d7:d7:86:83:79:cb:92:1b:a2:8c:c6:5f:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: May 7 19:01:30 2025 GMT
Not After : May 8 19:01:30 2025 GMT
Subject: CN=bca4e288db56ce68979817e7d1df4e6b1270f185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:78:2f:52:e9:20:00:63:6f:03:27:1d:54:
38:7c:07:f6:3d:f7:c1:96:c0:ee:ed:84:58:ca:91:
0b:49:71:57:3f:2f:27:11:1c:b6:ae:e8:1b:7b:b7:
c7:5b:8b:53:54:20:fc:9e:c1:6b:34:3b:df:51:f8:
d3:c9:63:55:d1:e6:a1:8f:c4:49:74:68:f1:38:1f:
39:80:ec:c7:78:91:9c:a7:90:75:bc:4e:2c:a9:e9:
51:b7:ee:86:7f:da:aa:44:e7:fb:f3:95:8c:1c:50:
90:d1:9f:bb:e7:75:cb:66:a1:78:e2:31:28:88:0b:
77:2e:3e:8e:9c:f2:9c:cb:91:f2:6e:53:a5:3e:d0:
c7:fd:5d:bc:f5:29:6f:f0:f4:d1:3e:95:e7:37:09:
48:51:08:8b:c6:0a:c6:1b:d8:7f:f9:0b:e0:04:d3:
e9:c3:fe:4c:52:46:4a:2f:25:4e:8e:49:c0:22:d5:
5e:f4:a5:f7:0f:9c:a8:7d:b7:77:18:35:99:88:ad:
50:cd:31:57:b1:dd:2d:df:4b:65:77:ed:d2:a4:23:
71:a2:f5:92:6a:2c:0d:ac:6a:88:66:39:c2:28:22:
71:07:a5:ff:3c:71:2f:2e:c7:f7:90:9b:95:d7:b0:
a2:e1:d6:57:b8:e7:1f:bb:76:ba:55:c3:6a:55:a4:
66:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:E2:88:DB:56:CE:68:97:98:17:E7:D1:DF:4E:6B:12:70:F1:85
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:46:80:5a:1f:b2:a1:c4:12:d1:93:04:3a:f5:d9:10:3f:2c:
9b:e4:35:c4:29:cb:4c:59:ae:99:16:7c:54:9a:20:31:fc:84:
24:0d:bd:ee:7a:1c:91:43:da:0c:b0:67:77:eb:a2:3f:f9:2d:
0d:5a:15:8f:ab:e7:56:f2:de:a5:fb:d8:67:de:81:10:37:03:
45:ba:3e:9a:79:31:23:a2:19:7c:99:8d:3c:f7:8f:81:97:9d:
2f:ac:4a:d7:e6:60:ce:12:48:52:56:70:a9:04:66:7c:37:03:
ac:e9:ee:9e:67:2d:05:8c:c7:5f:8f:0b:84:29:98:59:a0:c0:
63:75:51:eb:0a:58:35:97:1a:6b:d8:a2:21:a0:12:b5:72:46:
df:b6:ee:13:be:68:ce:68:73:fa:5f:5d:91:f6:57:c2:3f:01:
ec:58:46:26:b8:f3:42:8c:94:0c:44:a5:26:aa:d9:7d:68:e0:
8d:78:c6:aa:5b:71:ac:65:e8:e7:6f:a2:db:9f:80:bf:62:d0:
0c:6e:25:bd:af:b7:df:47:1d:72:fa:0c:1d:37:2c:82:3d:f2:
9d:9f:48:fd:57:e4:4f:5a:e5:ab:05:16:c0:a8:dc:68:cc:5a:
e7:a4:54:6e:73:2c:90:d7:45:c6:cd:5d:b3:18:33:13:9d:cd:
23:30:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:34 2025 by rpki-client