Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: G+jyePl9R5n3kqvt742j5rmKpG6/9UP2IWaWetIE4/k=
Subject key identifier: 14:0B:17:D6:EF:E7:FC:3F:2C:A2:86:36:75:24:A2:60:D8:1D:B0:94
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 0196ABB1131B9745353BF2058D6D34CE69F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 14BC
Signing time: Wed 07 May 2025 17:00:30 +0000
Manifest this update: Wed 07 May 2025 17:00:30 +0000
Manifest next update: Thu 08 May 2025 17:00:30 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: +t4Koxjv5lbYJ5CSkGTsBEKq13XFbkV0k+hWRVaUSTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:b1:13:1b:97:45:35:3b:f2:05:8d:6d:34:ce:69:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: May 7 17:00:30 2025 GMT
Not After : May 8 17:00:30 2025 GMT
Subject: CN=140b17d6efe7fc3f2ca286367524a260d81db094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:2a:ad:27:4c:20:02:b6:90:44:a1:7c:a0:
8a:a4:13:0a:89:1b:64:bb:34:7a:03:3f:9f:b5:f8:
62:7b:08:eb:90:03:0f:20:37:1a:18:fc:22:b8:05:
84:89:e9:36:20:92:09:8b:a7:f3:fc:f1:72:6a:7f:
7e:e7:fa:6d:96:d1:33:66:65:83:e2:13:39:d0:d9:
28:06:ab:8d:44:90:4c:bb:d7:40:43:2e:f3:33:01:
94:d7:d6:02:b8:28:0a:74:17:3c:6e:e5:cb:f8:6a:
85:f9:e5:d6:3a:2f:42:e7:4a:1c:38:98:f0:74:66:
4a:c0:62:d2:ac:80:da:11:2d:1b:f7:48:2f:c7:fc:
3c:35:ba:ef:6b:61:67:79:91:30:47:97:3c:99:ef:
bf:d9:13:bf:04:bd:9b:f4:6f:ed:a6:cc:32:a9:14:
76:98:a4:b1:e4:4d:bb:04:69:9e:88:f0:ac:a3:be:
36:52:d4:a7:83:a1:65:ce:c5:fe:00:84:22:7b:70:
14:a9:34:28:82:5b:ed:4a:73:9e:59:9e:93:30:8d:
ff:18:3d:f0:94:dd:6b:d5:e6:b7:9f:84:5b:36:f0:
1a:67:6d:dc:9a:f7:10:d7:e0:ad:1b:9d:15:d0:34:
b6:ed:99:54:3c:f8:5c:27:a5:05:a0:a0:e0:de:8b:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:17:D6:EF:E7:FC:3F:2C:A2:86:36:75:24:A2:60:D8:1D:B0:94
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ac:8d:ef:83:9a:f1:6b:6a:8a:bf:e6:a1:46:f3:e6:b6:66:
1e:f3:49:75:2d:b0:29:72:d0:2f:25:8d:21:6f:95:16:28:ea:
4b:1e:08:e2:7d:fd:21:e8:e2:b3:3c:43:3a:07:0d:c5:9b:3d:
b0:ac:72:15:71:81:8a:ea:32:5a:c0:82:59:27:60:1a:40:44:
71:18:00:54:6d:a3:3e:25:18:0d:51:33:71:ae:41:6d:d0:cc:
b1:d4:56:98:27:8a:f6:8e:7b:bd:4a:5a:55:d1:ec:a1:71:01:
66:95:63:b0:cb:98:4a:ab:93:a9:ab:c3:4c:f9:d7:17:75:98:
84:39:c3:77:16:1c:d7:94:a1:3a:33:91:e3:63:77:98:b0:6a:
22:96:e0:d4:5a:41:2e:27:1f:7c:9f:32:b1:86:b3:e2:d8:19:
be:38:b0:d3:60:c0:6b:69:81:d8:56:dd:d6:2e:e8:0e:c7:10:
45:b6:fd:8d:9c:37:96:a6:9a:f4:bb:76:e6:b8:8f:37:26:88:
b7:0e:13:9c:f5:57:5e:04:cb:9d:e6:53:f2:51:10:02:f6:d8:
3a:29:f4:0a:85:e0:86:43:b4:ba:2a:aa:18:02:53:9f:dc:f4:
c9:8f:da:35:b4:99:79:56:ad:74:3d:bc:e4:58:30:16:81:b3:
e0:0d:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:40 2025 by rpki-client