Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: o9oyLart+PgFnly3z40Nega1FYhoJyd+wrbHjLqLWb4=
Subject key identifier: 6F:C5:C9:FD:40:A5:5C:C6:71:03:64:9D:8A:5B:2E:D2:96:AD:C3:35
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019653EE7BCB8D97A51480787F425D201260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 16:01:00 +0000
Manifest this update: Sun 20 Apr 2025 16:01:00 +0000
Manifest next update: Mon 21 Apr 2025 16:01:00 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: yMcgFovRekzy7l4+ILLf9qYMxWvnh4ui0dIjp00IpPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:7b:cb:8d:97:a5:14:80:78:7f:42:5d:20:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Apr 20 16:01:00 2025 GMT
Not After : Apr 21 16:01:00 2025 GMT
Subject: CN=6fc5c9fd40a55cc67103649d8a5b2ed296adc335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:31:5d:ae:a6:79:27:e7:69:25:ea:34:9a:
cc:66:aa:23:16:c2:95:ee:43:f7:34:25:78:6f:e4:
49:b2:a7:45:35:e5:51:aa:96:fb:98:30:14:5a:56:
85:d3:b0:7b:45:0e:2e:ee:27:8e:81:92:08:a1:84:
32:cc:5b:39:e1:03:5c:26:b9:3e:76:20:59:8b:75:
29:59:12:c2:6b:6a:61:ea:0b:bf:7c:29:e4:79:f2:
b8:92:4b:56:16:f3:d2:6b:ff:85:57:02:b9:a4:12:
31:0f:78:ef:40:1d:9c:d8:66:e9:14:9d:cc:c4:a5:
3a:f7:00:d6:90:ac:1c:90:3f:cb:76:e2:47:53:f5:
68:e3:fb:f0:41:26:f2:17:cb:29:a2:81:ea:24:34:
89:d4:21:73:aa:0e:42:38:78:d8:f4:99:21:1e:f2:
6e:13:b4:6f:f3:d4:00:6c:6e:a4:ee:ab:0d:7f:47:
92:38:ff:21:6b:97:5c:47:15:57:de:86:2d:aa:4b:
40:bb:8c:ae:b5:b3:bb:d6:6b:63:0e:a9:b2:66:c0:
b9:72:fd:65:df:03:c4:a6:65:60:42:b9:fc:27:8b:
2c:01:81:65:d3:1b:95:e1:5a:bb:d9:36:33:0e:a5:
46:c1:98:0d:94:03:64:81:8d:7c:38:57:ce:d1:f1:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:C9:FD:40:A5:5C:C6:71:03:64:9D:8A:5B:2E:D2:96:AD:C3:35
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c9:88:4e:51:ec:39:1a:90:10:09:99:fd:fb:a8:2f:cb:53:
c4:cd:bc:57:1c:af:f1:10:ca:51:27:19:9c:65:8f:24:df:c4:
13:b3:5a:81:08:2f:d6:dd:fb:59:d4:25:da:96:59:db:90:cc:
3b:9a:5e:aa:cc:dd:34:29:64:a0:06:9c:ad:0b:7f:b7:ab:f9:
bc:8a:1e:a5:4f:f5:81:be:80:75:82:3c:c2:30:0b:dd:53:0d:
2d:59:a8:fa:6d:1c:59:d4:18:e2:b7:bc:15:6d:a1:f4:0b:03:
a5:57:21:ef:88:c5:d4:9f:b9:85:a4:1c:04:5b:4d:38:13:2a:
a0:0e:bf:7f:1e:93:0a:34:f2:a6:48:4d:3e:9f:de:45:8f:c6:
9f:ca:f4:32:f4:15:6c:7f:30:86:3b:ce:8c:62:6d:69:a0:cf:
87:02:9b:08:2a:61:7b:78:cc:6d:b3:d5:55:e3:b9:7f:42:73:
e0:f4:16:20:0c:fc:1c:d6:f1:d2:40:56:93:58:03:52:b9:dd:
7a:4f:f5:cd:ff:6b:f3:57:cc:e3:c0:97:0a:5e:a5:ce:bf:c0:
4d:8b:ec:a4:27:17:65:95:6b:3c:0b:c6:a5:0e:0f:1a:ba:3e:
5d:f2:a2:d3:70:f9:50:07:98:bc:e7:e6:92:4f:56:02:be:41:
3f:51:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:09:17 2025 by rpki-client