Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier: P6e2yLnhA41qnz3PTE41KQm1oTe/jCIVSff06aw7kF4=
Subject key identifier: EA:1C:C6:01:A4:52:67:4C:C1:D8:8A:41:3B:34:D3:C3:C8:29:35:F6
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial: 019656130D29159E87A2BC335D49573DACB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number: 0C20
Signing time: Mon 21 Apr 2025 02:00:11 +0000
Manifest this update: Mon 21 Apr 2025 02:00:11 +0000
Manifest next update: Tue 22 Apr 2025 02:00:11 +0000
Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: Yw0jms/2owy9le2wSm2O5xiVzJzpMEuoPw4bnDIwLO4=)
2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:0d:29:15:9e:87:a2:bc:33:5d:49:57:3d:ac:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Validity
Not Before: Apr 21 02:00:11 2025 GMT
Not After : Apr 22 02:00:11 2025 GMT
Subject: CN=ea1cc601a452674cc1d88a413b34d3c3c82935f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:f2:f4:85:01:0b:f0:55:fd:ab:99:c0:96:
38:79:1d:73:0e:6c:b8:5a:1f:71:3a:dd:ab:5a:54:
20:7e:f8:83:6f:56:2d:5b:60:fc:ea:d2:18:f6:17:
3d:3b:95:5b:b5:d0:34:22:fa:31:36:1f:b0:5a:b7:
a7:c7:87:1f:c2:43:c2:15:5c:c3:09:2f:c2:ed:ed:
41:92:a7:34:63:94:4f:d9:ba:33:6d:77:0c:5b:4a:
35:79:fe:49:b4:e2:84:18:46:13:70:e1:e2:9e:a5:
6a:d0:1e:e2:1b:ff:85:32:2b:e1:c2:86:96:d9:7a:
4b:23:37:60:bc:36:1a:96:b9:9d:3d:4e:14:be:2d:
95:45:e7:c8:2a:d1:ab:a5:33:88:73:cc:8a:9e:86:
95:30:03:af:36:5d:b3:0b:2c:b4:97:d5:7c:2e:5c:
48:7b:13:bc:3a:9a:34:92:e3:55:3a:29:d0:87:3d:
8d:d4:49:9d:84:ac:4c:03:2b:2a:99:d6:32:a5:2b:
f8:84:87:48:af:a1:2e:f6:30:d2:57:48:4c:85:0f:
2b:41:4c:cb:ad:0d:a3:a4:1a:46:b6:1f:77:d3:7e:
30:85:ce:7e:2f:71:f3:61:ed:8d:c8:b0:11:b8:41:
58:e3:f0:51:85:e6:be:9e:fa:6b:05:d3:96:56:2a:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:C6:01:A4:52:67:4C:C1:D8:8A:41:3B:34:D3:C3:C8:29:35:F6
X509v3 Authority Key Identifier:
keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c3:12:17:ed:b8:ab:8e:02:3e:f4:4e:98:30:24:99:ea:a4:
48:58:b9:94:20:fe:c4:2e:9a:52:72:7b:8b:a6:d6:5b:16:8c:
46:ba:70:cb:21:9a:25:b2:0c:99:b2:e7:ae:ac:06:31:f3:a0:
ee:51:1d:43:68:35:6a:7f:37:85:bc:c2:1c:30:bf:76:6e:36:
41:cf:16:e0:86:02:ae:7c:12:9b:41:d1:c0:5d:62:5a:7b:c4:
84:79:3e:21:f2:09:5d:5f:50:13:0d:1c:4f:05:33:c8:0b:33:
e6:b8:14:95:ed:10:31:a6:ad:ca:59:7b:f0:e9:16:22:88:a3:
2a:6d:82:db:de:6a:fa:3f:cb:3b:71:a4:62:ce:24:7e:31:79:
a6:ec:ba:13:a2:e3:a2:05:2b:50:40:bb:23:38:d5:a9:f5:90:
37:d9:23:94:f0:6a:7a:82:9f:b0:92:c3:3d:ff:f7:1f:3c:49:
c6:26:d0:13:9f:06:37:ac:e6:19:92:44:13:1f:ab:11:84:1a:
13:49:4e:38:e1:26:c1:96:13:0f:d2:07:57:b4:0d:f0:96:d0:
51:97:3d:5c:b9:1d:27:ba:16:35:f9:05:8f:22:9c:53:85:1d:
e3:ac:46:8d:79:5c:00:12:6a:c0:b6:15:a7:50:b4:15:0a:2c:
46:9f:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:04 2025 by rpki-client