Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: SMJ8hoKMyh764hqgtmRsypmyZylCltWqutbHbJhTUXs=
Subject key identifier: 89:58:6D:C2:B4:11:78:D9:0A:EA:9D:7A:36:8F:72:98:A1:93:D7:4A
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 0196B2C58861086BE31AC418AD887C6A0DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 02:00:11 +0000
Manifest this update: Fri 09 May 2025 02:00:11 +0000
Manifest next update: Sat 10 May 2025 02:00:11 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: TI7xgIFmLQst/VBsiMcj1Np6/Cbx/T8/WLamEN/OZe0=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:88:61:08:6b:e3:1a:c4:18:ad:88:7c:6a:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: May 9 02:00:11 2025 GMT
Not After : May 10 02:00:11 2025 GMT
Subject: CN=89586dc2b41178d90aea9d7a368f7298a193d74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:7c:6a:8c:56:ee:6d:e6:79:75:7b:b9:3d:
50:bc:2c:cc:da:5b:26:ec:98:e4:8a:0c:0a:a8:d1:
be:da:a3:fb:ba:0d:65:2e:f0:92:ab:0d:62:8b:11:
db:ab:0b:4a:68:2b:ec:29:12:07:0a:34:65:0a:5d:
63:9a:d5:5f:2f:f3:62:ab:9e:db:d0:20:b4:ed:fc:
4d:ce:2a:d1:8e:34:ab:d4:15:57:01:f1:e2:fb:8b:
5c:3d:bd:d9:5b:ea:44:de:b4:78:18:a8:6b:32:bb:
a4:8e:7e:22:f5:cd:57:83:68:12:62:56:cf:46:08:
3a:99:a1:ab:77:1d:79:aa:2b:26:99:cd:68:db:bd:
81:36:f1:c7:2b:bd:88:6b:bf:c5:8a:6b:5a:76:1a:
30:b5:d8:35:6c:de:d2:7c:76:bf:9a:ad:e1:82:fe:
55:42:83:93:97:57:4b:84:bf:cf:d0:01:66:6e:0e:
83:bb:94:a5:49:52:a6:1e:1b:d1:87:36:65:72:92:
2e:ea:66:43:44:c6:41:78:e3:a2:af:f2:29:4d:04:
b4:a5:8c:38:9d:1b:df:6e:07:a4:04:76:9e:4e:3f:
d7:1f:0a:f7:c8:19:8a:e1:a0:0e:2e:c9:26:04:2d:
b9:40:e6:d3:d4:27:f2:a6:cf:d3:96:bb:36:d6:3c:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:58:6D:C2:B4:11:78:D9:0A:EA:9D:7A:36:8F:72:98:A1:93:D7:4A
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7d:64:a7:62:49:a1:27:79:3b:78:5c:e1:eb:aa:a4:42:9b:
a3:79:81:b0:4b:63:41:01:de:44:cc:f5:83:f9:82:25:cb:65:
6c:aa:c3:d2:4f:1d:04:8d:a6:13:a3:7d:24:27:3e:72:37:70:
59:0d:cb:78:70:de:c4:c8:28:2d:f7:e0:fc:06:63:8f:e0:47:
97:3e:19:65:77:10:c8:26:0f:44:4e:47:55:a5:6e:09:5a:78:
5b:d0:e4:02:9a:ae:6b:76:dd:94:ad:a5:98:27:c6:30:9d:1d:
0b:42:25:dd:69:fe:1a:33:08:99:d6:e6:13:d4:cc:40:f7:1c:
28:e2:19:b3:97:d6:d2:d1:cc:aa:b0:d2:bc:7a:28:4a:33:58:
67:c4:56:4b:02:18:06:de:dc:9b:44:6b:0b:f7:19:32:d6:25:
d6:68:33:9d:a4:14:30:14:24:f2:5e:a4:18:1a:b3:c4:4a:96:
c9:43:9a:99:8f:4f:40:48:5f:7b:e2:48:45:3c:25:b2:45:70:
55:41:13:f3:c7:83:bc:70:48:af:ac:52:7a:d0:c4:be:89:4c:
f5:86:b9:15:c4:18:8d:81:01:36:42:ca:85:51:23:77:f6:05:
9c:4a:69:ff:db:90:fa:57:40:ee:b1:c3:5d:4e:12:40:b2:ce:
83:e6:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:26:08 2025 by rpki-client