Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: ABhF1kXjZqYxoX8KlIWmk5PcZ89NUY0ClrANqlzKFaY=
Subject key identifier: 2F:6F:87:E4:50:CC:14:6E:83:DD:F2:27:BB:25:2C:E1:CE:57:26:35
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0196A91DBDEB01FA5E3434F7AC388CB522A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0962
Signing time: Wed 07 May 2025 05:00:20 +0000
Manifest this update: Wed 07 May 2025 05:00:20 +0000
Manifest next update: Thu 08 May 2025 05:00:20 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: 8Hz1Tm5J04p6butfstj+CQ177aMhEBcgR5uqhsekkfE=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:bd:eb:01:fa:5e:34:34:f7:ac:38:8c:b5:22:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: May 7 05:00:20 2025 GMT
Not After : May 8 05:00:20 2025 GMT
Subject: CN=2f6f87e450cc146e83ddf227bb252ce1ce572635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:3f:d9:30:37:15:8d:00:d8:6d:bf:68:ac:
c4:cb:37:12:21:94:d1:49:f6:28:3f:05:5e:4e:c6:
ee:ef:bc:35:22:a9:60:81:9e:88:f2:ca:8f:5f:0b:
a9:bf:c1:89:a6:b0:77:3b:76:43:bf:f3:98:d7:67:
27:79:80:b3:b1:4b:8c:cb:b1:57:e6:59:e9:e1:df:
8c:ff:f9:1b:34:27:30:b6:73:d0:ca:8d:fc:c8:1c:
e0:2d:44:e9:20:dd:98:25:59:30:4f:70:bc:bc:b2:
54:57:54:a1:d9:77:ec:17:c2:65:ca:4b:8c:2e:9d:
9b:cf:f4:79:7f:a6:fd:89:86:93:6f:f4:3d:7e:79:
d0:17:ef:da:c3:0c:ae:d2:e7:7b:6b:e5:3b:a2:75:
45:41:98:91:82:e9:c0:3b:8c:b5:79:68:f7:30:8c:
80:78:a5:50:f9:0a:de:2c:30:41:d1:69:86:ec:e4:
72:c1:a6:5d:49:4f:f3:3a:01:ca:92:6d:5f:c0:b6:
34:6d:27:b4:cd:cb:50:73:b4:19:77:04:9a:f5:f4:
bb:e7:35:42:57:86:fe:25:3c:4d:bd:9c:28:41:1f:
77:65:b0:64:b7:59:01:06:ee:b9:67:34:b6:22:26:
03:46:ff:2f:84:fd:40:27:05:5e:77:83:2f:90:0b:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6F:87:E4:50:CC:14:6E:83:DD:F2:27:BB:25:2C:E1:CE:57:26:35
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:55:f8:96:9e:8a:96:56:1e:90:cb:ba:7c:32:7d:ae:61:
05:61:ef:68:1c:7f:84:45:44:1e:ab:45:f7:48:76:ff:9c:12:
34:c6:27:ca:9f:1a:2d:93:7c:df:47:ed:d7:0a:1b:c1:56:5a:
53:15:43:0c:85:42:ce:13:41:ec:64:72:be:9c:e5:57:fa:d3:
b3:e9:2d:57:a1:ec:14:84:b5:2b:76:0f:cb:c7:4c:6a:df:ef:
c1:e8:9e:cc:c6:7c:74:e2:98:bb:f7:e9:5d:20:d9:f2:02:ff:
5c:4d:ce:9b:af:6f:fc:28:bf:f4:e0:f7:93:80:f0:0b:3e:d1:
4d:5f:a3:ed:b9:e8:64:d6:88:1a:f1:36:3c:ff:fd:92:5c:a3:
f2:93:01:23:a9:a7:e9:3c:53:a2:60:3b:70:30:d4:c7:e7:97:
04:3f:5a:df:99:b5:f5:59:98:6a:23:23:b3:16:6b:7b:f1:82:
98:6e:f7:f6:9a:bc:37:06:3f:52:31:90:e8:e7:52:a1:52:84:
63:1e:e8:bb:0c:c5:57:2d:cc:99:3a:0d:0f:0a:c8:ab:27:70:
9e:7b:b1:03:9f:ac:44:7a:be:9b:ad:81:94:a6:39:5a:aa:b1:
5a:57:4e:79:f8:6b:02:00:a7:a1:71:10:50:02:3c:2a:e0:58:
e4:d4:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:47:47 2025 by rpki-client