Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: ZCeYvkhvT5Ur3gP0rw2ok4xFFvr/MAdiCP1T3YeJq9s=
Subject key identifier: B0:67:0B:70:DA:CA:35:9F:80:48:81:BC:54:AF:85:3F:F5:7F:0A:A5
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 0196564A1E34367CD1DE9990859F3970C808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0AB8
Signing time: Mon 21 Apr 2025 03:00:20 +0000
Manifest this update: Mon 21 Apr 2025 03:00:20 +0000
Manifest next update: Tue 22 Apr 2025 03:00:20 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: ER2158piY0w8jLD4d97Wo8IVZ9Mm7HMu2+AhCjmnemI=)
2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:1e:34:36:7c:d1:de:99:90:85:9f:39:70:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Apr 21 03:00:20 2025 GMT
Not After : Apr 22 03:00:20 2025 GMT
Subject: CN=b0670b70daca359f804881bc54af853ff57f0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:07:8f:39:5f:c8:74:40:3a:46:43:35:1e:
83:e1:c8:a2:14:c1:74:20:e6:64:0a:01:12:df:2b:
cc:bb:eb:ee:fa:85:74:31:c8:3c:55:1b:5b:e7:4b:
83:fe:9d:11:62:09:73:15:0c:7b:99:ab:7a:e8:64:
bc:c6:e9:d5:0c:7a:ba:15:8f:9f:2f:2e:25:77:25:
2d:11:a9:fc:2a:73:58:18:6e:b9:97:f1:da:67:19:
c0:d3:ec:51:01:09:12:52:09:c1:79:3e:ed:bd:77:
23:a4:b6:ba:cc:ed:0d:7c:3b:b2:fc:5d:bf:62:8f:
6a:ab:70:04:89:fb:35:1e:a1:da:5f:aa:c3:da:ff:
ba:3b:55:ae:c6:eb:99:9b:3e:d6:8f:36:e1:aa:9c:
a5:18:1b:8c:6c:73:3c:5e:35:79:32:84:e3:98:66:
d4:7b:18:19:d2:fe:49:85:4e:c0:f9:08:5b:32:c8:
ec:8e:b8:ce:af:c4:9c:da:6d:9c:0b:ec:8c:02:0d:
5b:cc:36:50:c0:8e:43:b2:36:97:85:64:5f:10:6d:
95:3b:96:e8:86:3a:97:90:28:d3:4e:e3:5f:24:c0:
aa:e8:f8:ce:1b:d8:6b:da:4a:59:45:15:83:61:05:
41:31:d2:23:f8:30:5a:57:b5:b1:f0:23:9d:eb:16:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:0B:70:DA:CA:35:9F:80:48:81:BC:54:AF:85:3F:F5:7F:0A:A5
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:36:28:c3:60:db:f6:3d:18:51:2d:26:1e:59:fe:86:b9:
65:80:ef:38:10:d4:ad:50:17:52:e6:6a:52:2f:a8:71:15:9d:
d1:be:89:53:87:c0:93:c8:0b:36:17:da:b3:a9:cf:90:84:d4:
d5:0f:35:1d:63:8f:e0:65:5c:5e:b7:f3:d6:5f:d4:d0:d0:55:
07:eb:dd:7b:dc:e3:97:23:6e:ab:28:8d:9c:f7:e9:04:fa:61:
af:08:4e:be:c6:90:3d:fd:e9:76:dd:16:17:00:9f:c8:94:35:
91:d6:23:05:c6:27:c4:2a:e9:f4:66:70:4b:fc:c4:e5:f1:4f:
85:f5:e6:ef:e6:f1:48:eb:ef:a0:28:cd:ba:ae:17:e8:fa:70:
f5:5b:95:ef:cd:9b:75:28:24:80:bc:2f:c7:1e:9e:63:8e:d4:
f3:85:b6:dd:01:1d:b4:f8:14:1e:ae:bb:51:a6:ed:cc:03:1f:
d0:18:07:b9:01:40:5d:10:ce:65:2d:c3:c0:b1:85:ec:62:bf:
7e:05:99:d7:6d:86:77:7a:74:d0:fd:35:bb:19:9a:fe:a2:93:
50:6f:03:d4:0b:b3:e5:1a:19:ae:93:d9:4e:8a:fc:a9:14:68:
48:f9:68:ab:ce:2c:ca:d2:17:f6:ca:79:62:a8:2b:de:a1:0b:
62:2d:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:40 2025 by rpki-client