Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: +6N5cZDDEpxWBen7XGu85i/2TEvav4rOZMn6Y6JjSkk=
Subject key identifier: EE:21:38:4F:66:D0:11:58:D6:44:EC:2B:45:3B:4D:8E:45:CE:CE:B9
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 01965236B51F5EA001CBA3F1F29A53851FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 0F91
Signing time: Sun 20 Apr 2025 08:00:39 +0000
Manifest this update: Sun 20 Apr 2025 08:00:39 +0000
Manifest next update: Mon 21 Apr 2025 08:00:39 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: 5E+RpcNPC658Cv+TnbnilbNwpiRfCeYlI8o6Q43IZME=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:b5:1f:5e:a0:01:cb:a3:f1:f2:9a:53:85:1f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Apr 20 08:00:39 2025 GMT
Not After : Apr 21 08:00:39 2025 GMT
Subject: CN=ee21384f66d01158d644ec2b453b4d8e45ceceb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:d8:8b:55:16:44:60:85:d6:4f:5f:e8:1c:
60:b9:e4:13:fb:03:f1:e5:7a:2a:ba:b5:64:fd:23:
1e:a3:6b:cd:1f:9a:5e:14:71:2f:5b:b1:5d:b9:e4:
6f:73:df:a3:6a:b8:80:72:e2:a9:84:96:e2:63:44:
4e:3a:41:cf:18:9c:17:1f:92:7f:69:50:43:f4:22:
3d:62:c2:cc:0f:2e:6e:14:01:40:5c:5c:c0:44:db:
fd:f7:88:5a:06:c8:43:7c:f8:41:85:b5:cd:84:61:
48:40:f6:e0:2a:6d:5c:23:5d:63:cc:22:ed:16:f5:
34:f0:1f:b9:90:48:bb:d7:21:46:c7:01:59:55:e5:
ce:ea:15:78:ab:70:cf:9f:f7:6d:da:03:8c:06:68:
a8:dd:3e:d4:08:6d:61:ab:3e:6b:3e:db:72:0d:29:
63:c3:9c:dc:0b:59:69:72:ed:db:1e:e8:16:93:0f:
28:0e:b2:3d:87:d7:4c:df:03:4f:cb:1c:93:63:53:
81:9b:00:73:b4:4b:cd:ef:cc:b0:ec:9c:6f:48:16:
e7:98:08:ff:f1:5c:1b:16:e0:da:da:31:a0:5b:d0:
fb:6c:e6:6b:f8:db:41:86:fe:ff:94:ee:98:03:dc:
03:62:24:b8:04:98:6c:b2:05:a9:48:19:5a:c3:94:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:38:4F:66:D0:11:58:D6:44:EC:2B:45:3B:4D:8E:45:CE:CE:B9
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:d3:bd:50:b0:b0:da:e3:65:a7:51:d0:e4:2b:d3:5f:cb:
71:01:a5:a1:1f:36:7f:09:c4:a6:03:52:c3:a1:82:2a:ab:85:
91:56:48:99:fd:c5:b6:c6:b1:df:37:78:01:bc:c6:15:9b:c5:
0a:45:48:23:0d:21:56:43:4e:5c:c0:f2:41:4a:54:bd:1d:99:
7c:73:3d:1d:49:86:3b:37:52:fc:00:2d:d5:d9:7d:36:fd:b8:
5d:21:14:77:30:26:46:3d:47:50:02:61:f8:ea:15:e2:49:00:
c3:30:27:09:41:bd:30:70:34:fa:84:d3:15:f3:9d:33:e0:72:
6e:4e:63:58:38:96:22:37:d2:36:2f:49:7c:65:d2:6e:88:7a:
98:4d:4a:93:5e:cf:7d:99:c2:1c:38:9c:67:64:fc:ee:3f:32:
21:92:ca:96:0e:52:ae:1a:90:76:cb:8b:a0:9b:d0:64:14:8a:
c8:6c:4a:65:49:8d:12:63:b2:92:33:ac:ad:9f:3f:19:40:8c:
74:f1:a9:e6:2a:42:3f:0a:50:0a:1d:e0:3d:e1:34:c3:13:b3:
c5:e1:6d:52:47:1d:f3:67:b0:75:a8:5e:e1:6f:66:bd:2b:5e:
df:ba:72:d6:c2:d3:96:14:0d:76:6c:39:22:20:1a:66:ed:6c:
71:44:7c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:12:59 2025 by rpki-client