Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: tTshhmLV82XRdseW9fAb0+8a1Xy7Kd1aOvzbouhd2Es=
Subject key identifier: 36:37:39:43:81:B0:0E:2C:82:7A:5F:75:67:59:F3:D8:FF:B2:60:DD
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 01965A5DF77994324965D66895BE8E914358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 0790
Signing time: Mon 21 Apr 2025 22:00:29 +0000
Manifest this update: Mon 21 Apr 2025 22:00:29 +0000
Manifest next update: Tue 22 Apr 2025 22:00:29 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: VwenotNrX/bv8b+FBGiyxBMi69Lok5a5psXrW1BSt3U=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:f7:79:94:32:49:65:d6:68:95:be:8e:91:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Apr 21 22:00:29 2025 GMT
Not After : Apr 22 22:00:29 2025 GMT
Subject: CN=3637394381b00e2c827a5f756759f3d8ffb260dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:c4:4b:e5:54:23:c0:6e:6b:ee:44:f3:c6:
70:b3:52:b0:cb:68:a9:22:3d:cf:0d:15:f8:ea:62:
b4:dc:86:65:1c:49:14:cb:36:c9:1f:97:54:c9:50:
c5:11:59:60:af:7b:30:1a:70:d4:f1:d1:46:e3:97:
da:8a:a0:6f:79:5e:39:97:ca:84:4c:47:9e:d0:fe:
04:f0:2c:8c:d0:6d:28:e8:9a:c7:5c:a1:58:41:0f:
19:45:f1:bd:11:3d:43:9f:c2:04:a5:95:2f:55:62:
f9:40:80:b5:e5:f7:76:e3:6c:74:a9:42:86:6e:e0:
4f:c6:03:79:29:85:31:c7:ea:70:17:b4:13:14:fb:
e4:3b:41:b6:67:ef:86:ef:0d:90:97:c3:cd:fe:6a:
f5:ed:ae:fd:f6:6d:9d:a7:14:53:2a:e6:64:2a:c9:
be:9a:5c:3e:0e:a9:8b:07:5c:b9:a7:2e:c8:97:f2:
18:db:fc:41:7a:d5:d9:fd:39:76:6b:3c:3e:2b:e6:
74:8d:f8:27:77:41:bd:6d:52:8e:32:f7:ef:02:c3:
76:7d:a1:2b:31:7e:65:2f:8a:a1:1a:ee:4c:5d:e4:
6b:38:ab:68:4d:9c:2e:15:14:0a:f2:0c:42:a4:68:
a1:df:5a:d9:2c:d9:1b:6d:de:4a:02:5d:a6:a5:06:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:39:43:81:B0:0E:2C:82:7A:5F:75:67:59:F3:D8:FF:B2:60:DD
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:79:b1:c4:f5:fd:7f:06:da:41:29:5e:08:f7:2b:24:81:2c:
79:e5:c5:25:f1:66:56:7e:c7:36:47:4e:81:24:b6:27:13:5f:
8b:dc:ca:41:76:6c:d9:b8:09:01:e8:2f:06:d8:47:8b:21:2c:
6a:e0:01:29:ac:61:bc:23:11:e7:ab:67:ca:29:57:c6:98:39:
67:de:7a:09:89:c9:aa:5c:35:74:7e:b5:6d:24:7a:de:5d:89:
b2:76:42:7b:8b:94:8b:ab:90:aa:71:e0:62:38:d9:da:cf:b9:
7a:e1:f8:07:7c:a0:77:41:a8:ae:0b:60:82:b0:5c:de:f4:a0:
1a:1c:0b:c3:f6:89:d5:97:8f:33:4e:99:5d:20:ac:4e:92:f6:
56:c0:f6:e0:38:da:b5:f8:3e:d1:ff:6e:03:ea:4f:48:74:16:
d1:02:58:5f:d5:0d:e0:ce:c4:1e:08:05:88:7a:5c:00:03:e1:
68:ee:46:6e:f5:31:5d:bc:64:3f:c6:81:2e:1e:ad:dc:7a:9a:
d7:24:1b:a4:26:bc:a9:21:07:f4:90:6c:64:81:37:a2:24:46:
ec:e2:cc:57:8e:5c:52:f5:c8:af:d1:a7:d5:9d:39:d1:d0:94:
40:2a:2f:4f:ca:8e:da:80:c7:a3:c8:0e:97:3d:ed:a0:d0:ae:
30:74:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:52 2025 by rpki-client