Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File: beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier: pbBCvWWKVt9F3cYpMCYhrUMBcC0xpNKlJYzItDtV8/o=
Subject key identifier: 56:AC:2F:06:A4:9A:75:50:66:51:60:33:DE:B9:6A:2A:F6:3C:54:74
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 0196BFDD1402A8A2A204708967D3C05E841F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 15:00:58 +0000
Manifest this update: Sun 11 May 2025 15:00:58 +0000
Manifest next update: Mon 12 May 2025 15:00:58 +0000
Files and hashes: 1: 48IOS32yvZQcDKOVIMZ6daf-9KA.roa (hash: HmF8WESoe3mmtI22Berk7+aTu/j0V86FjOKvEurztNM=)
2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: LCKhvXJquxeo/LyGlYvo9VB/1D2BA1OVwJGSe9XLHfY=)
3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:14:02:a8:a2:a2:04:70:89:67:d3:c0:5e:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: May 11 15:00:58 2025 GMT
Not After : May 12 15:00:58 2025 GMT
Subject: CN=56ac2f06a49a755066516033deb96a2af63c5474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:3c:9b:e5:62:a8:c6:a0:c7:25:c5:b1:80:
89:4a:dc:9f:ff:90:7c:b4:a4:67:bc:3d:c1:9a:65:
b2:ea:03:ef:08:52:86:99:a2:91:f6:40:70:27:37:
62:c0:ec:5a:84:c3:8d:7a:10:f2:e9:5c:58:df:14:
db:fc:cb:f9:76:0b:0c:d9:8f:82:50:bc:5f:67:ef:
bd:f9:3b:83:9d:63:d2:90:90:cc:6a:cf:53:38:ac:
55:c9:58:6c:e6:f7:99:c5:12:56:0d:bb:e1:47:8e:
eb:31:11:78:a2:dc:f3:ae:86:42:02:fb:5f:41:49:
b6:9e:f3:47:4f:55:77:4f:64:8c:4c:22:93:fc:d5:
6d:8f:fb:ff:09:47:ba:f7:c2:7b:22:c4:61:b5:03:
81:28:e0:70:a6:c3:56:00:4a:af:e1:68:09:b7:7c:
8b:5a:58:c5:d3:a9:f6:d8:e8:3a:b2:39:a4:44:4f:
f0:a5:d3:e9:90:c3:d1:ad:5e:1f:3c:a8:60:b1:e4:
63:18:24:f2:4c:0f:03:f0:b6:cc:16:e0:5f:73:80:
93:2f:97:7e:e7:89:30:59:06:6c:c7:40:6a:21:ca:
76:43:40:02:5e:c9:c7:3b:99:02:69:bb:af:31:8f:
d5:4e:82:71:be:4a:cb:56:7b:f9:7d:b9:8d:b2:cb:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:2F:06:A4:9A:75:50:66:51:60:33:DE:B9:6A:2A:F6:3C:54:74
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f7:dc:51:a8:8c:84:89:8e:fa:ea:e7:80:f4:a3:dc:d9:3b:
4c:29:94:28:48:67:d4:85:a2:82:54:18:2c:a0:e4:2d:ca:78:
8a:ea:8b:df:2e:c2:e7:8a:89:0f:78:7e:3c:d5:f7:6d:93:38:
62:47:21:06:52:43:49:0b:c8:02:1f:7c:07:d2:64:59:dc:2b:
8b:9a:81:40:d8:93:02:4d:44:b6:1a:c0:6f:84:e3:c7:85:2a:
9c:18:7d:48:55:03:9e:a8:4c:91:f9:13:23:ce:b6:a0:c2:75:
45:fa:f7:a6:da:3e:7d:89:a3:f3:84:c8:22:6c:68:c8:d3:13:
02:32:36:be:48:df:02:87:36:68:27:7e:bf:8a:0c:49:04:f9:
8c:78:3c:ec:e9:23:10:84:af:3d:30:f7:91:67:9f:52:19:fe:
c5:e7:54:77:67:54:08:c7:da:6a:80:01:1f:8b:af:c1:cf:34:
76:6e:2a:88:ec:8d:b7:cc:f4:9b:43:bb:de:a7:bb:43:c7:11:
1b:0f:56:87:82:fb:18:47:82:6f:d3:ac:16:83:56:5e:3d:32:
f8:99:b8:1a:79:13:5b:10:5a:ab:7b:22:44:1b:74:0a:5b:23:
64:dc:07:b8:e8:7d:c3:b8:6c:28:9f:67:16:80:61:7d:87:4d:
11:ba:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:37:44 2025 by rpki-client