Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: Jo7NUd0EDv0ZHOV2N0DjD2kQMiQFAL7VVvvqgdW9KFU=
Subject key identifier: B4:09:8C:9F:AB:2A:7F:AA:E1:0C:9B:D8:56:00:F2:5A:8D:49:94:18
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 01965C1527A5B9CF804551BC2EE0B790464C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 05FC
Signing time: Tue 22 Apr 2025 06:00:12 +0000
Manifest this update: Tue 22 Apr 2025 06:00:12 +0000
Manifest next update: Wed 23 Apr 2025 06:00:12 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: kR2nRoMw7TCAsDJCkYqvuX8UHzHQKb3S670vZInxvRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:27:a5:b9:cf:80:45:51:bc:2e:e0:b7:90:46:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Apr 22 06:00:12 2025 GMT
Not After : Apr 23 06:00:12 2025 GMT
Subject: CN=b4098c9fab2a7faae10c9bd85600f25a8d499418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:00:2f:56:ff:fb:34:28:e9:22:1c:17:9d:
4b:ec:80:2f:90:cf:06:05:f8:41:a2:b8:79:5b:0b:
d7:4d:85:80:98:ae:22:82:36:05:4c:54:2d:7e:00:
7b:7b:26:47:44:99:91:d2:da:f6:a9:cf:8c:76:61:
c9:31:af:3e:20:fc:a6:d7:4d:7a:12:b4:3f:31:96:
85:d4:b0:06:23:c3:fb:42:2c:2e:d0:3d:c0:a6:9d:
5c:96:a4:9a:8d:18:d9:c9:81:7a:36:3a:9b:0e:85:
71:fd:78:1e:8b:9f:7a:93:69:71:09:fd:5a:cd:32:
9e:8b:62:60:9b:33:94:b7:58:b9:9c:93:e5:2e:04:
f4:ca:9e:39:31:4d:4c:29:10:ca:dd:84:35:ec:ae:
67:16:06:4c:de:e8:d8:9b:3f:2d:37:2c:c9:d3:8d:
2d:b9:a2:3e:e8:d2:54:ce:de:2d:89:40:8c:d4:1b:
51:15:df:e4:d5:fc:d5:60:ba:50:68:bd:35:78:6e:
88:85:fd:95:41:82:c4:39:45:16:47:d9:95:57:05:
51:d3:0b:fc:e8:24:9d:bd:04:94:ea:1b:53:30:60:
4a:ae:27:af:63:3a:f0:0e:d7:04:d3:01:0f:ac:9c:
ea:16:c3:b0:9c:9b:a9:fa:57:09:26:5c:d3:bd:17:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:09:8C:9F:AB:2A:7F:AA:E1:0C:9B:D8:56:00:F2:5A:8D:49:94:18
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:87:87:ae:6c:80:24:b6:f2:40:97:94:02:94:7b:74:7a:
59:50:00:50:ac:5e:f6:9a:09:56:f3:8f:f4:f7:84:10:ad:dd:
64:83:4d:33:fe:c1:b2:a3:e2:ab:5a:b3:fa:55:03:3a:82:ac:
6c:e1:18:1a:06:2b:2d:e7:34:93:58:b5:8b:b9:bf:c2:3c:1b:
61:96:d1:7d:cd:f2:17:36:95:20:1d:70:c0:70:25:9b:38:00:
62:a0:81:87:7d:80:78:d7:67:65:6b:4d:1b:92:bf:af:8a:81:
8b:48:c4:39:c2:0a:21:38:19:b4:d9:73:cb:ac:de:3a:51:6e:
0a:36:7c:cb:bf:bf:1a:2d:6b:6b:17:7c:84:2b:25:4c:7d:8d:
76:6e:b4:3a:8f:c0:9d:66:18:c6:ee:53:9d:f7:ce:1c:5d:36:
01:e6:34:66:cc:23:c2:f7:3b:c3:ed:ce:d0:24:01:2c:26:43:
84:08:41:56:7a:21:7a:a6:49:26:c0:01:79:02:2c:30:f6:f2:
68:b4:59:aa:19:64:52:f2:99:3a:bd:67:46:8f:1e:64:4c:fd:
a4:ac:e3:64:28:c4:cb:84:1a:f3:2c:ff:97:5d:b2:0b:c6:3b:
af:91:47:16:5e:b0:a5:cd:67:50:c5:b4:96:51:81:f4:f0:1a:
60:b4:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:44 2025 by rpki-client