Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File: bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier: myO5l7nRSX6rZyM5SrdAQyVsQW8sbzkOXnt9MFXUnNc=
Subject key identifier: 94:8F:F3:80:5E:BB:B2:68:6A:65:4C:25:00:36:12:91:C0:3D:9B:3A
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 01963EE6EBAC28BFA56006B9864FCD78765D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number: 0C4F
Signing time: Wed 16 Apr 2025 14:00:42 +0000
Manifest this update: Wed 16 Apr 2025 14:00:42 +0000
Manifest next update: Thu 17 Apr 2025 14:00:42 +0000
Files and hashes: 1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: 03X7mMRMlCkZhcE+bu+FwD1H6PYk6KnixCbcpoVb5yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:eb:ac:28:bf:a5:60:06:b9:86:4f:cd:78:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Apr 16 14:00:42 2025 GMT
Not After : Apr 17 14:00:42 2025 GMT
Subject: CN=948ff3805ebbb2686a654c2500361291c03d9b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:38:c9:20:0b:59:1f:88:80:6d:8b:ed:46:c9:
e8:0e:28:5b:2b:83:11:7d:74:ba:eb:02:dd:a6:ec:
d4:7c:66:8f:38:b6:50:60:58:51:98:86:38:8a:39:
f9:16:2d:be:30:3f:bd:97:af:19:18:e1:45:cd:73:
ed:dd:c2:71:31:f8:5f:98:27:28:dc:49:a8:bc:04:
02:00:93:08:b9:05:63:0a:92:be:64:16:66:53:20:
02:95:8d:39:b9:d1:3c:92:fc:be:c3:9f:bb:7f:a2:
90:63:d4:2f:d6:34:8a:55:c8:9a:32:54:30:56:24:
66:9b:1d:5b:f1:99:62:80:8b:10:80:a8:8c:fe:e3:
4a:fb:08:05:9c:49:48:f7:ac:33:f6:9d:34:b6:42:
38:63:84:e5:04:a8:b6:43:ec:a3:ca:5d:57:ee:47:
28:d2:dc:34:70:4c:5a:ae:d7:63:28:16:9a:6b:68:
06:24:8e:a4:e2:9e:94:4c:e4:2f:69:a6:d4:44:d2:
83:56:e2:08:87:56:74:1e:71:92:99:b2:21:98:b8:
33:a8:c1:a3:38:1b:6e:1c:64:d4:78:38:e5:bc:80:
f3:50:7d:a0:1d:67:89:69:81:45:6f:0c:98:f3:48:
f0:cf:e0:46:da:92:b3:66:4b:8f:54:44:d8:f9:60:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:F3:80:5E:BB:B2:68:6A:65:4C:25:00:36:12:91:C0:3D:9B:3A
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4f:b0:6c:dc:95:6b:2a:00:43:b0:a4:f0:31:6d:dd:e0:6d:
32:0c:ed:e4:3f:3c:fc:3d:35:1b:13:b4:30:ba:37:28:ab:ff:
b6:25:27:b0:24:72:4c:9b:45:17:b8:1f:17:0a:b4:7d:0b:8a:
16:75:96:7d:ef:d7:69:6d:4b:fd:5a:b1:a8:55:b6:f8:44:a1:
d8:92:a6:c9:81:c8:02:4c:10:83:74:de:d5:05:1d:6f:1c:f3:
28:37:9d:c6:fc:30:91:c1:f0:27:71:d7:de:76:10:2b:ba:8e:
6f:d2:4c:bd:d6:f7:8f:b3:3a:0c:22:7c:10:af:7f:06:ca:1b:
4d:cf:3c:73:a7:3f:3b:f2:5e:2f:9b:5e:80:58:91:98:0f:5f:
de:ff:0d:2c:f9:06:f6:0a:0a:b9:34:8d:d4:82:24:f5:fe:ae:
81:8f:40:ed:23:db:3c:f3:71:7a:6b:b0:5a:f5:fa:70:54:f2:
13:e1:73:79:06:d0:2e:d7:8b:2e:68:7a:0f:75:d5:ec:cf:74:
41:fa:ad:12:2a:43:1c:8e:9c:3d:3d:4a:17:6b:98:5b:f1:f0:
d9:3e:c0:42:74:00:64:a0:4c:23:19:48:77:1a:71:b6:67:b5:
6e:4d:5c:bb:66:38:de:5d:2a:0d:bb:c3:a2:ec:6a:aa:9b:37:
3f:0f:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:07:32 2025 by rpki-client