Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: DOYriyeLFul6XEzZxC07YcvZv1Ja8i0ObfNqr2d3OFo=
Subject key identifier: B8:C8:72:15:C9:75:16:B5:A2:BD:19:7A:35:49:A1:41:B4:DB:A6:5A
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 01969ED0E5588D982124094D3C5FA7CC8793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 14B3
Signing time: Mon 05 May 2025 05:00:12 +0000
Manifest this update: Mon 05 May 2025 05:00:12 +0000
Manifest next update: Tue 06 May 2025 05:00:12 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: an9vfLZ4fOG+HNkeHkz2mRoNKcRzw2Tu+fScc/4y58A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d0:e5:58:8d:98:21:24:09:4d:3c:5f:a7:cc:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: May 5 05:00:12 2025 GMT
Not After : May 6 05:00:12 2025 GMT
Subject: CN=b8c87215c97516b5a2bd197a3549a141b4dba65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:6b:cd:eb:f3:f0:38:23:62:63:3d:92:0f:
a0:fd:10:30:4f:64:3f:ac:a7:33:a5:d3:34:c9:30:
41:6e:5f:8e:68:c7:ab:66:09:5c:88:d9:ea:23:9b:
5e:b7:18:87:45:7b:5b:e7:ed:f4:f7:e8:d0:c8:e0:
d3:52:7f:cd:77:53:9d:eb:a0:44:9c:2a:b4:27:31:
6e:be:e3:89:61:c6:ed:43:61:68:16:5f:69:7e:20:
d8:fd:85:42:4e:d8:6b:b0:1c:ee:5a:1d:d4:e3:84:
93:28:08:6a:e6:77:bd:74:40:61:d4:cf:e4:b6:d7:
c9:2f:c7:76:df:98:09:2c:88:20:33:7d:b8:91:51:
fa:18:ee:fe:fa:d4:da:da:6f:27:5a:70:c1:57:85:
15:b7:c0:73:5e:5e:71:23:18:cf:d3:bc:25:c2:3f:
d4:64:f9:9d:7e:bf:b6:3a:25:b7:ed:53:8f:97:39:
43:a4:08:f7:d6:84:cf:2f:d7:8a:73:23:ff:80:e9:
34:63:0b:e2:2f:ad:6a:d8:84:aa:22:87:f6:d6:0c:
bf:3e:f7:57:9b:90:f8:d5:03:cc:f6:bf:dd:c7:e9:
3f:9c:18:26:14:3e:00:67:51:02:f9:69:c6:2e:38:
c7:d7:0a:96:a7:7e:d6:85:c6:8a:68:53:d9:62:23:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:72:15:C9:75:16:B5:A2:BD:19:7A:35:49:A1:41:B4:DB:A6:5A
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9b:8e:e6:49:09:10:06:d3:b1:f1:58:a7:3e:bf:c4:02:7e:
0c:2d:7f:80:71:1c:fc:fe:7e:be:19:33:bd:49:18:b8:18:0d:
92:d7:78:5c:40:33:a6:28:15:55:f7:6c:2e:21:b5:34:10:b0:
f9:02:13:15:6f:7a:e7:0d:d8:ba:70:d6:d3:4b:90:8b:3b:69:
af:7b:d8:8f:20:60:08:04:2a:02:de:97:5e:72:dd:33:35:55:
a6:94:fb:fc:11:31:27:f7:28:b4:2d:b5:4e:52:98:bf:02:0b:
e0:fe:83:fe:41:a7:b0:12:d1:4c:9a:fa:cd:8c:cf:05:c6:1e:
f0:78:79:44:d7:8a:c2:13:66:d1:31:38:a3:0e:be:6a:88:18:
7d:d6:36:b0:59:44:30:75:ca:2b:40:c2:0c:c8:00:98:14:dd:
83:21:23:0c:e7:34:fd:0b:e5:22:c1:79:4b:e7:5c:a7:bc:ed:
af:fe:3c:33:2f:78:99:96:ba:14:a0:e4:c3:6d:bc:1b:15:34:
90:dd:65:08:67:42:12:68:a9:1b:c8:1c:e9:17:0c:d2:42:73:
37:70:21:51:e8:8a:83:5a:0f:2f:ef:6e:6e:f4:3a:b0:fd:69:
9a:5a:f7:a5:02:01:64:c3:0b:34:c4:a5:30:fc:7b:39:93:b0:
72:97:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:07:47 2025 by rpki-client