Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier: 9rlEKjqYVVAQnbSHJ34gDEhBFvmJ14NpK8ieG8017iQ=
Subject key identifier: CA:0F:45:F6:F5:3B:DF:AD:D0:C9:DD:2C:9F:DE:B6:14:B8:D7:96:DD
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer: /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial: 01969F75AEEA6CF17DFE1FF5620E55436BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 08:00:11 +0000
Manifest this update: Mon 05 May 2025 08:00:11 +0000
Manifest next update: Tue 06 May 2025 08:00:11 +0000
Files and hashes: 1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: cWxd8OsrH218iqvD0xC4XXjGAkWSJgRTObdCF19wSKI=)
2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:ae:ea:6c:f1:7d:fe:1f:f5:62:0e:55:43:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Validity
Not Before: May 5 08:00:11 2025 GMT
Not After : May 6 08:00:11 2025 GMT
Subject: CN=ca0f45f6f53bdfadd0c9dd2c9fdeb614b8d796dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:87:a9:76:c4:46:e2:66:98:39:cd:fa:91:
17:2a:79:30:f3:90:17:f9:53:f0:fe:15:24:37:fb:
4e:91:f6:a7:da:f3:57:75:c1:cd:65:b7:d5:23:d5:
6e:54:98:74:7c:33:f5:48:98:46:84:a8:73:e7:7f:
7f:4a:1e:41:1e:69:6c:ca:b9:26:5d:7d:49:65:88:
19:eb:d1:8c:8d:33:28:59:69:39:60:1a:dc:ab:4b:
7e:66:bb:f8:cf:82:54:36:cc:5b:4b:22:a1:e0:28:
0b:39:39:71:ac:db:79:71:0b:f9:83:ac:46:09:f9:
6d:a3:10:c8:1c:78:06:db:b6:5e:fd:cc:f9:4c:80:
c3:20:56:eb:7b:c5:48:5a:95:ca:89:1a:0e:8e:2d:
5c:f5:43:4f:5e:5c:9d:56:3d:64:09:56:8a:97:7d:
83:81:2a:ae:18:c4:3d:e5:47:7a:9e:c1:bb:e9:a0:
b3:10:5e:f3:a6:80:88:6e:b7:56:78:5d:1b:cd:46:
6d:73:d5:1a:a4:04:20:f1:f1:92:09:eb:97:af:e7:
42:31:07:34:8e:5b:dd:b3:66:95:00:10:c9:b5:97:
55:cb:7b:82:df:d0:ee:e6:42:ba:4b:75:5c:c5:e1:
cc:7e:b7:ec:15:24:33:1e:dd:56:2f:b9:3d:fd:82:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:45:F6:F5:3B:DF:AD:D0:C9:DD:2C:9F:DE:B6:14:B8:D7:96:DD
X509v3 Authority Key Identifier:
keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:d1:68:21:49:5e:1e:1f:79:fe:52:0d:6f:c9:f6:c9:ca:
e1:a5:01:b1:44:7d:d5:77:d5:41:62:66:fe:07:f4:8e:48:38:
bb:09:51:91:08:52:ea:9d:9a:4a:19:21:2a:0c:dd:91:06:4a:
09:bd:35:8e:80:56:e8:7d:1d:25:14:d8:aa:e7:91:61:df:50:
ce:27:c4:bc:93:6c:83:db:84:a2:bd:77:6b:d5:62:63:1d:95:
52:b9:4f:36:c7:82:94:6c:e2:5a:a4:f8:84:db:d8:18:c7:2f:
7e:5c:bb:a4:45:52:90:09:75:ba:63:f3:bc:13:80:7b:a3:86:
0a:a9:d0:91:8d:50:a1:87:fb:e7:e9:da:5a:dc:9e:a4:ac:d8:
9b:70:a2:46:04:16:7f:30:f4:ac:80:fe:a6:59:3a:4c:22:90:
15:fa:93:dc:90:f8:2d:fc:6b:88:95:40:91:c4:cd:aa:0b:e0:
9a:69:00:d0:07:2f:26:36:f0:d1:56:f8:a5:f4:a9:a9:65:c5:
aa:bf:f8:8d:bd:37:da:a8:c4:e0:be:0f:88:70:a9:ae:bb:e9:
39:23:00:4b:2a:44:05:3b:bb:f7:b7:60:eb:f8:88:5b:84:fc:
4d:74:78:98:08:86:89:76:92:76:f8:32:46:5e:f3:76:c6:65:
89:37:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:25 2025 by rpki-client