Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json)
Hash identifier: 1ogcJt2Ev4ygQQHEVKizspRTHngetrw1ZRaH6MxTaVU=
Subject key identifier: 18:CE:90:37:43:E1:7A:F3:C4:FA:C6:13:F7:7F:6F:CB:8A:80:EB:6C
Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Certificate serial: 0196B8239A31766668E9708036B0C1FE7B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
Manifest number: 0E78
Signing time: Sat 10 May 2025 03:01:03 +0000
Manifest this update: Sat 10 May 2025 03:01:03 +0000
Manifest next update: Sun 11 May 2025 03:01:03 +0000
Files and hashes: 1: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: ssiNcp54/Ep7r4JpPpQrf2Jtuy7+mfPwqhMYCvcvs20=)
2: IoQeF12RJ4sobu5Ga8Eq38fp9lU.roa (hash: ZHXqTkRKDBNra810QH5vCpMO7yqivWRXintrYhNzM9E=)
3: SQ8WO3hellEKsQ4Y9NCRSIjTvBQ.roa (hash: BhoaWfa6WtuVRoo3cEi7UmyVvyoDyPTAAx6/lySfFlU=)
4: SiZIShqgNqX8HAwZHazZNECjby8.roa (hash: pRsgCD3V+Trdu45mh9GvK7xoM8z4mazBwLyC1V4JY0Q=)
5: VHskNMe_9EcN5Ps8VV0dA6UjJfM.roa (hash: +hDMAKuEEYDkIBhUAQS0ED3/5LZ3DcqLT6h5fu0q5Vc=)
6: du_h3WrA0m1xhUnyJPLIuGO4kpA.roa (hash: JDpeOD7xV2ekG+eEesG9qUfLmZmSMWruOGhX64DbBEc=)
7: icyI7vtUu_VifuFeglKfEW94_GM.roa (hash: GtavNKaMLIdLn9+Xx38qptYW+E+bTW1Tx9pUb3Adoq0=)
8: slVrsnHd8rCIfEnbwuX_9NfM9i4.roa (hash: /3BENw/pyYjv+JfWEh8xWz895hOHXgoCQXPnKDlVros=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:9a:31:76:66:68:e9:70:80:36:b0:c1:fe:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d
Validity
Not Before: May 10 03:01:03 2025 GMT
Not After : May 11 03:01:03 2025 GMT
Subject: CN=18ce903743e17af3c4fac613f77f6fcb8a80eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:c1:88:2b:90:84:31:cb:29:05:d1:24:cd:
d0:1e:7e:4c:60:1e:a8:4c:26:a1:82:05:c1:06:eb:
15:53:b9:18:55:15:2e:78:f7:75:97:bb:19:d4:14:
86:23:79:89:70:e1:7b:f9:0b:ad:62:12:4d:27:9d:
7b:ec:dc:c2:15:8e:b8:29:a1:01:90:33:0d:80:0d:
db:e3:9d:6a:e9:8c:db:94:b9:ec:c7:a5:14:45:0c:
98:37:15:f0:21:03:44:85:9a:19:23:0a:8d:8f:c1:
fe:0c:dd:fb:bd:98:63:1e:a4:60:94:f1:6a:bd:01:
3b:2c:19:58:8e:5e:26:8c:e1:a5:af:73:17:23:e5:
65:59:8c:28:fd:48:45:69:f8:e8:63:70:43:74:be:
95:97:de:63:26:a8:b5:cc:e6:5d:8c:a7:75:b2:b2:
78:9e:ac:cd:28:a5:8b:15:b7:64:cf:c2:19:75:06:
43:0e:38:9a:05:63:4a:f3:b4:56:9e:c5:f5:2f:b3:
f6:04:33:08:0e:27:97:9b:53:4e:5b:07:55:30:88:
4a:26:3c:67:ed:23:da:38:a7:ff:73:62:48:d4:00:
69:bd:39:95:5d:ef:19:5f:64:2f:74:c0:89:15:a2:
0d:9d:e4:b3:b2:dd:dd:c7:db:23:77:fd:82:bf:71:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:90:37:43:E1:7A:F3:C4:FA:C6:13:F7:7F:6F:CB:8A:80:EB:6C
X509v3 Authority Key Identifier:
keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:65:86:8f:74:1b:1f:36:b5:90:54:87:f1:ef:c4:e1:1e:9e:
a9:e8:af:ec:55:21:6d:ea:4b:b5:0d:90:e8:b2:12:64:9a:b3:
d5:84:62:d0:ba:80:d3:71:d6:3b:9e:cf:2c:3e:4d:26:cb:f9:
17:ed:4d:cd:86:10:b5:d3:83:9b:12:01:f0:b8:67:9e:e2:ed:
3a:60:f5:a6:44:34:b0:44:ff:cf:4c:85:80:0a:a9:03:52:b6:
63:82:2e:d3:75:09:4a:20:a3:94:a1:99:53:52:ba:fa:ee:7a:
90:d1:cd:4d:24:bc:06:51:cb:76:a7:46:68:c3:08:29:ea:d4:
98:cf:6d:14:1a:54:27:37:17:a3:ef:ca:66:c3:01:71:ea:be:
9d:f6:e8:a4:65:4e:ed:1b:a5:58:34:6d:cd:5e:2d:ff:6d:5a:
83:52:71:0e:1c:32:5f:99:19:94:a4:c5:07:7f:64:1a:b0:38:
e2:93:ad:c3:fd:0f:33:b2:a0:45:3e:86:c0:a1:dd:a0:d6:98:
6c:4b:6c:1c:8a:31:e8:34:d0:c5:6d:45:c4:41:72:dd:99:08:
86:06:f1:b5:83:9b:51:c5:7b:0c:93:a0:da:95:6e:95:6f:71:
e6:b1:62:b0:c7:84:b4:d1:d9:8b:1e:b6:ad:2f:51:6c:8c:e9:
f9:b1:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:43 2025 by rpki-client