Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
File: D6vrbvgg09UvBTciM8VB7ksU82E.mft (raw, json)
Hash identifier: nTC/gFn5KCjzr/yjQhnymD8loAy3Ixs6LwLlhAKsDUs=
Subject key identifier: 60:19:8F:A2:ED:D7:D2:D8:DF:D8:14:55:76:30:87:BF:70:42:D1:C5
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Certificate issuer: /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial: 019659156DB834826116B2A3F32ADB68D0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 16:01:38 +0000
Manifest this update: Mon 21 Apr 2025 16:01:38 +0000
Manifest next update: Tue 22 Apr 2025 16:01:38 +0000
Files and hashes: 1: Bk-PC_3JIm04gifM592QQdoN3Ks.roa (hash: iME6n6jnCDzSVb0/SGfLuBM5Wc4sPCswNojVHBOxZCs=)
2: D6vrbvgg09UvBTciM8VB7ksU82E.crl (hash: LxmfXgWN7TewoPjfG0w90itDoU1+ZSMQHYdvaXvbXKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:6d:b8:34:82:61:16:b2:a3:f3:2a:db:68:d0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Validity
Not Before: Apr 21 16:01:38 2025 GMT
Not After : Apr 22 16:01:38 2025 GMT
Subject: CN=60198fa2edd7d2d8dfd81455763087bf7042d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:f8:ee:8f:0f:5e:ac:41:b8:8b:52:27:fa:
5a:0d:5d:69:3b:84:3f:97:ab:da:f7:b9:ba:74:52:
c0:07:f2:bf:33:6a:af:af:87:5d:c7:10:c6:e4:56:
52:a6:9f:f8:6f:be:eb:68:90:25:01:1a:c6:e7:00:
2b:84:f8:c7:f5:f0:9e:14:e4:2f:ff:b2:4a:f1:5d:
f6:c6:8e:64:76:4d:d5:52:b9:e0:c4:9a:4f:8f:32:
56:fa:64:f6:93:92:f4:77:90:57:55:d9:4b:1d:59:
bf:ce:19:e6:4d:38:d6:9d:69:85:cd:40:a2:26:b2:
2e:e3:ab:e0:f0:38:d1:b9:fa:df:32:b6:88:fe:55:
f1:29:2d:73:15:21:5f:df:65:c2:f9:be:33:4f:47:
93:52:7f:24:2b:2c:1b:bc:c7:8e:0e:dd:bb:90:bc:
1f:1d:e9:09:ec:6d:68:37:12:69:52:50:9a:58:46:
d6:c6:7a:b1:08:d1:86:96:ea:02:5f:64:f6:e7:4f:
ef:34:84:fe:82:91:c5:45:0b:9e:dd:c7:85:6c:cf:
36:2f:f2:97:6d:01:b1:6f:5a:de:a2:ba:bf:5f:fc:
18:75:88:ec:94:18:0f:6c:f0:d7:74:3a:8c:07:38:
80:c1:ba:79:99:ed:f3:f3:b6:0a:96:a4:6e:29:34:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:8F:A2:ED:D7:D2:D8:DF:D8:14:55:76:30:87:BF:70:42:D1:C5
X509v3 Authority Key Identifier:
keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cc:2d:d8:9a:0a:5e:78:75:ac:9b:9c:48:a1:75:9c:2c:44:
6c:be:0b:3f:05:dd:bd:e4:a6:5e:3d:d1:1c:99:9a:8a:59:b3:
7a:9e:ff:e2:d2:a6:a6:ea:52:76:15:9f:6b:9a:3c:9e:3a:c9:
06:8d:e4:41:cb:45:79:0b:c7:2c:4d:f8:9a:d1:1e:d6:23:e4:
7d:78:58:25:bb:0f:7e:c8:34:6a:5c:0b:2e:e0:33:8b:92:a0:
ad:19:97:a8:7a:b5:20:40:a6:e2:f3:c0:5d:19:7d:1b:7f:da:
62:5a:be:0d:57:26:42:c0:36:3a:e9:d6:c2:73:32:1a:0b:c6:
f9:80:6a:0b:bb:9c:e2:58:bf:f2:d1:2c:35:c9:36:23:52:f5:
d8:e8:aa:02:66:73:f7:30:b4:b4:9b:59:b2:ab:bc:c9:30:c8:
bb:b0:ca:ad:32:54:48:e9:d3:a3:c9:a6:a9:54:0a:0e:f7:8f:
fa:da:23:5c:de:8c:15:18:3e:32:73:bc:69:54:5f:8a:ce:7f:
59:98:d3:bd:92:8f:ef:d7:c2:7f:4d:5b:d2:4e:78:30:36:b9:
e5:ce:45:33:f6:c8:db:7c:39:26:2f:f7:62:f4:14:9e:69:82:
a5:2e:16:79:a2:b1:6e:ca:8c:7d:78:b2:36:03:1e:5a:0c:83:
db:61:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:13:55 2025 by rpki-client