Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: xG5Y9XRgNuClMgVmxfoUnJ4V+KFiA8oNqoWVS2lBjvo=
Subject key identifier: 6F:0D:22:5B:4B:30:B0:C2:07:0C:B3:31:41:50:F1:D2:6F:F0:F0:92
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 01964DB5488BE3627B81A4DDE29EBECE107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: A2
Signing time: Sat 19 Apr 2025 11:00:48 +0000
Manifest this update: Sat 19 Apr 2025 11:00:48 +0000
Manifest next update: Sun 20 Apr 2025 11:00:48 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: fTzQBUzA+DZHDqFHtpBR8XHEeiNbVbttSpEp5TEZt4M=)
2: gYQl8tX6UzR3RDmi_Q8x7-FjoRo.roa (hash: Ql10T2YHVZxrbMNqGA2K5KVTFR5OZbWrykLTc4F+v5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:48:8b:e3:62:7b:81:a4:dd:e2:9e:be:ce:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Apr 19 11:00:48 2025 GMT
Not After : Apr 20 11:00:48 2025 GMT
Subject: CN=6f0d225b4b30b0c2070cb3314150f1d26ff0f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:30:b7:3d:4b:30:e6:5d:13:e6:bf:18:f0:
a1:d4:84:7a:cd:bb:79:26:58:7e:1d:3f:ee:fc:31:
04:41:78:0c:c1:a6:d6:4e:e8:1f:09:d6:c1:08:f1:
76:ad:be:64:2a:1b:d0:51:87:d7:c6:1c:d8:f5:1a:
ce:8b:08:36:cf:d0:a7:99:5d:35:11:8d:e6:d6:62:
6f:fc:9a:1a:84:3d:e5:ed:55:2a:39:44:2c:2a:b9:
de:db:d7:ea:ec:a7:b2:30:fd:c9:1d:c7:2f:35:8a:
d5:0c:f1:2b:b3:eb:6d:05:a9:36:fd:10:62:60:fa:
51:4f:a1:28:c7:3b:83:d8:35:40:b1:fe:a2:26:35:
7c:8a:69:55:80:1c:3d:65:3a:b1:46:37:a4:5f:19:
97:2e:26:7d:0b:34:07:b8:02:d4:cf:08:f6:bf:86:
d9:47:4b:75:f7:fa:dc:88:db:3d:26:60:5b:bf:6f:
00:b5:73:80:26:aa:fb:2d:3e:7d:9b:7f:f4:c4:2a:
e3:2b:26:b4:57:ef:62:c9:ef:77:0b:01:62:94:2a:
c5:90:5b:a0:23:20:25:9d:7f:1f:3c:6a:e3:e6:a1:
73:93:36:89:2a:de:e8:ca:cb:9a:df:d5:8a:4d:a8:
c1:c7:3a:27:27:23:d3:d0:c4:64:73:97:e2:05:a3:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:22:5B:4B:30:B0:C2:07:0C:B3:31:41:50:F1:D2:6F:F0:F0:92
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:bd:2f:e1:ca:70:c5:6f:73:11:65:d9:63:22:54:1e:86:
4b:f9:5c:7e:cf:b2:ad:a3:cf:3d:3e:30:06:00:2d:83:d1:b4:
b1:02:c7:84:35:9d:d8:1a:9a:b9:89:80:ba:5a:15:74:cb:e0:
4c:83:3b:ed:78:01:5f:2b:c0:f8:3f:74:78:a9:3a:4d:5c:e3:
06:78:7d:4f:e9:cc:4d:01:1c:b4:d8:47:cc:4f:05:cd:1c:ae:
d8:ba:36:8b:04:93:cd:80:6b:ad:39:0c:86:93:1e:18:7c:41:
a2:ce:78:fb:18:ce:23:e1:c2:b0:64:c3:45:38:f1:de:59:60:
76:e5:04:f8:7a:73:60:2d:7d:5a:03:a4:b7:2a:39:ff:1f:2b:
6c:66:be:5c:34:a0:7c:cb:b4:5e:6a:73:62:8e:de:8f:11:ff:
c5:36:5f:0c:90:8b:b1:b9:73:eb:c7:72:85:94:d0:17:e1:38:
4e:34:d9:43:a2:91:31:94:28:5b:75:fe:20:90:f1:f1:47:ec:
5a:25:7f:ec:e1:1a:75:e7:e7:77:5a:a5:df:81:20:c7:af:fd:
fb:7e:16:98:3f:a4:21:41:4b:01:d1:fe:d4:fa:21:e2:e9:59:
85:e1:ad:8d:c5:9f:98:6d:e0:60:5c:8d:99:7e:06:b4:66:24:
8b:df:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:27 2025 by rpki-client