Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
File: BEiJahxKydgBvx1rIL3vWXTVtPY.mft (raw, json)
Hash identifier: 8VA+sGXdxjAdVKTeRctEhdl/rhHOHe0edw8vbR8AnB0=
Subject key identifier: 40:A7:23:CD:9F:4A:13:BA:01:6E:29:7F:AE:99:19:44:57:63:12:CA
Authority key identifier: 04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
Certificate issuer: /CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Certificate serial: 0196CBA99AB0C22C3F212DB93F344D9E911D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
Manifest number: 04CB
Signing time: Tue 13 May 2025 22:00:12 +0000
Manifest this update: Tue 13 May 2025 22:00:12 +0000
Manifest next update: Wed 14 May 2025 22:00:12 +0000
Files and hashes: 1: BEiJahxKydgBvx1rIL3vWXTVtPY.crl (hash: yi94by6SMdUiVK1IBlDyx4jxq4Pn3Jz7phShh/hv8Vw=)
2: QXhXOb69R-6LwMYFMKWZze76zPM.roa (hash: eIFuk3TcS1CKNj+kDqIT+aNwYSr4f3EMWJAijhvNXoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:a9:9a:b0:c2:2c:3f:21:2d:b9:3f:34:4d:9e:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0448896a1c4ac9d801bf1d6b20bdef5974d5b4f6
Validity
Not Before: May 13 22:00:12 2025 GMT
Not After : May 14 22:00:12 2025 GMT
Subject: CN=40a723cd9f4a13ba016e297fae991944576312ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:57:d0:8a:bc:07:14:32:82:95:68:e7:94:
53:17:24:88:7f:e3:47:27:9a:fc:62:58:01:70:f7:
8b:6a:5a:aa:7e:35:ed:4a:13:23:18:58:27:7d:d5:
cc:ca:d3:99:ca:50:db:4b:c4:f2:22:de:d2:22:60:
aa:0e:be:72:5d:3b:90:b8:ca:81:17:10:25:06:39:
3c:8c:e7:62:97:f8:88:c5:ee:75:7e:35:43:25:a7:
e2:51:1a:74:ab:02:f1:7e:e6:c7:5a:b6:ed:ec:15:
36:22:cc:56:a7:18:38:31:0d:44:38:83:de:d8:7c:
6d:2d:45:8d:ad:70:7a:83:8a:e4:3a:4f:7c:bd:aa:
15:98:ca:0b:a4:12:6f:c0:c2:d2:b4:25:09:90:56:
03:3c:d9:19:9c:e0:2e:be:bb:4d:76:d2:75:22:69:
78:d0:27:e1:13:fa:29:ff:f9:3f:c0:5c:90:f5:48:
22:f8:38:82:d0:3e:76:ff:85:6f:28:21:d0:5e:0a:
d2:d6:6d:74:6a:2b:48:6a:73:02:f5:18:5b:ac:ca:
5a:5c:fc:58:09:03:86:79:00:ca:b3:43:0b:a8:c8:
be:30:03:b4:1d:50:eb:cd:f8:c3:83:3c:69:1c:47:
54:bc:eb:f6:76:6c:b4:5f:04:f7:bf:55:c1:88:fa:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:23:CD:9F:4A:13:BA:01:6E:29:7F:AE:99:19:44:57:63:12:CA
X509v3 Authority Key Identifier:
keyid:04:48:89:6A:1C:4A:C9:D8:01:BF:1D:6B:20:BD:EF:59:74:D5:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEiJahxKydgBvx1rIL3vWXTVtPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d4426b-ad25-44f1-98af-bcdd13495291/1/BEiJahxKydgBvx1rIL3vWXTVtPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a9:f9:05:39:08:dc:d1:7d:4f:62:88:ed:83:70:87:b7:4e:
58:b2:db:b0:22:c3:8b:9e:8e:57:0e:3a:d6:fa:27:55:da:b1:
fb:e7:e7:47:ea:51:dd:a5:8b:b9:40:a8:14:51:f9:0c:a1:ae:
ad:2f:a6:2a:4a:ca:6e:ed:70:de:5d:b0:58:7d:3e:f2:d3:4e:
de:a5:04:3d:5a:57:10:ac:18:e7:bc:3f:cc:ff:9a:e0:88:7d:
6d:fd:5a:c9:0e:03:93:a4:ff:f6:af:62:fa:e8:ec:d2:f1:e6:
67:23:69:32:5b:bc:4f:44:e9:9f:a4:2a:33:c6:f4:13:dc:34:
aa:f1:47:6b:c2:c9:c9:39:fb:66:0d:08:e1:fd:2a:df:60:1f:
ff:ff:f9:80:6a:96:e7:cf:2d:65:62:eb:e7:ef:0d:b2:59:eb:
f0:c0:cf:8b:25:3b:83:91:13:58:30:5d:86:fa:3c:da:dc:21:
11:97:76:d6:4d:fb:25:b4:6c:8f:b9:13:f8:26:e5:bf:e7:df:
40:1b:78:80:c9:eb:9b:94:ef:b1:7d:27:ef:90:21:c3:4c:d5:
80:24:87:ee:b2:86:cc:72:ce:a3:29:0a:e7:22:bf:f2:24:7d:
25:98:cd:c1:ee:8d:43:1b:25:10:f2:23:41:5c:26:43:8f:81:
96:c0:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:21:48 2025 by rpki-client