Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File: BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier: GhD4tga8VAXGdRYQLDLUPsWuNWEt/Z2QaNLcWATYqTs=
Subject key identifier: F4:95:39:D2:64:8E:05:7F:B7:0B:6D:52:7E:58:C8:21:FB:FF:FE:9D
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer: /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial: 0196BF6ED30956854190EB6BA1B4C14FCC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number: 0B24
Signing time: Sun 11 May 2025 13:00:33 +0000
Manifest this update: Sun 11 May 2025 13:00:33 +0000
Manifest next update: Mon 12 May 2025 13:00:33 +0000
Files and hashes: 1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: LmQyiOW9lZ7ofH5VUtnZsNxtGM5nSiwZHvuzaXAme2g=)
2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:d3:09:56:85:41:90:eb:6b:a1:b4:c1:4f:cc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
Validity
Not Before: May 11 13:00:33 2025 GMT
Not After : May 12 13:00:33 2025 GMT
Subject: CN=f49539d2648e057fb70b6d527e58c821fbfffe9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:50:b5:63:c2:ca:6f:57:d4:cb:2b:00:0e:
72:95:47:03:16:20:dd:71:40:67:bb:ee:0c:c5:ba:
ed:1a:3d:da:85:b5:40:7c:18:03:a2:f6:07:40:7d:
a3:74:4e:ce:2c:b3:f3:7e:01:4c:3b:70:fb:25:a9:
f2:62:d1:52:74:ff:5f:e1:aa:1a:0b:6b:59:94:e3:
31:ab:01:82:91:97:02:25:0d:a8:b5:72:71:ab:1e:
27:a2:db:3b:a4:43:b8:ca:c1:3e:56:ae:64:cb:50:
ab:7a:c2:82:c9:74:58:80:7f:db:7f:0b:5b:bb:31:
e7:79:35:13:45:7d:74:49:95:5b:5c:cc:2c:ff:06:
9f:f1:62:6e:9c:c2:10:08:ee:03:29:4d:22:43:cc:
22:d8:61:a8:cb:00:53:dd:0a:5c:90:d1:1a:44:3c:
dd:d1:58:b0:d6:76:30:8a:b7:13:21:18:78:3e:02:
0c:17:92:20:ae:e9:7b:9f:b4:e0:d9:7d:8e:ae:fc:
5b:25:24:23:3c:7e:9b:7e:f3:45:21:e0:d5:35:2e:
e7:bb:45:3d:ec:32:85:40:20:95:2c:fe:fe:e4:f6:
b0:77:7a:73:06:9e:14:ab:9b:cf:82:56:03:56:ca:
2b:ec:74:f9:b0:fe:61:27:d4:3a:b1:a0:de:ca:7f:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:39:D2:64:8E:05:7F:B7:0B:6D:52:7E:58:C8:21:FB:FF:FE:9D
X509v3 Authority Key Identifier:
keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:21:08:20:56:f6:09:0b:58:16:6b:3e:b3:81:8c:c0:8d:e7:
09:44:51:1b:fc:5e:26:c2:ed:6c:96:34:f9:01:31:c5:ba:d2:
da:b0:2d:2c:1d:ef:73:39:5b:6c:58:f0:6f:e4:00:e7:9f:cb:
3a:80:73:85:7f:d0:d6:fb:a0:10:13:b4:c9:d7:f6:e1:a8:c9:
1f:0b:c9:54:d9:e1:5c:3f:b2:56:25:fc:a0:90:0e:a1:f1:51:
a7:83:7a:83:cc:6a:cc:8f:d4:bf:14:a8:f2:ab:a1:46:38:88:
bf:bc:55:72:db:6c:aa:8b:35:73:07:7e:63:b8:88:32:4d:a6:
8c:e4:67:a4:42:a6:b8:25:20:28:a9:43:0e:5e:15:37:31:b8:
91:0f:bf:ae:37:cf:40:af:40:cd:7d:59:3a:5b:ca:6d:f9:9f:
82:a7:71:53:c1:79:99:4f:b5:7f:ee:19:92:d7:0e:a6:36:13:
40:e6:6d:af:41:1d:7e:8f:d7:0c:0a:bc:c5:4e:8c:50:e5:53:
8f:cc:f3:62:7c:19:2f:19:53:a6:80:bd:63:39:ea:97:ae:7e:
fd:74:0d:49:92:a1:e1:9a:1b:20:33:17:44:1f:44:79:e3:52:
f2:99:51:24:ae:67:15:ae:17:5a:4e:47:7a:a5:0b:50:32:6c:
21:fd:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:59:36 2025 by rpki-client