Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: p4Ngrkpy7C0KO8YDO3ds6hqiUD42jzWkDzsTcvVMugY=
Subject key identifier: EC:D7:42:88:5A:2F:65:A9:53:4C:51:F5:A7:75:96:3B:AD:79:4F:4A
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 01958F2A33017A90C5C70F08E9405196EFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 11:01:02 +0000
Manifest this update: Thu 13 Mar 2025 11:01:02 +0000
Manifest next update: Fri 14 Mar 2025 11:01:02 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: OJ6EfdHRGp62bTvEvYjCrrSY+Qyxw8avT3hicFV+Nuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:33:01:7a:90:c5:c7:0f:08:e9:40:51:96:ef:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: Mar 13 11:01:02 2025 GMT
Not After : Mar 14 11:01:02 2025 GMT
Subject: CN=ecd742885a2f65a9534c51f5a775963bad794f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bb:03:cd:0e:68:ff:e7:4a:79:1e:f9:7f:71:
6d:f3:62:6e:5b:9b:8f:b5:4f:82:e6:f1:7a:91:85:
17:00:e3:64:a4:cf:61:02:6c:4a:f8:82:c9:57:dd:
0e:42:d1:06:45:5f:71:6e:bd:95:5c:b0:bc:58:d7:
6d:bc:b1:e7:a8:8e:d1:7d:d9:cb:0c:4a:bb:dd:92:
c7:27:75:78:f8:87:bb:84:70:fc:32:1a:f5:28:0f:
6f:b2:6e:7a:d8:0f:0c:77:a5:34:94:07:50:a8:7e:
13:2c:e7:c3:38:70:86:e5:b8:b0:d6:34:d9:7c:5a:
ea:e1:cf:61:2c:03:18:ff:d2:c5:7e:73:67:58:ec:
b2:8c:41:9b:d2:6c:21:4c:7e:6f:b4:b3:5f:dd:0e:
23:94:95:3c:f2:3a:ea:1d:d1:f9:c2:70:39:22:cf:
3a:a7:dd:28:b5:1f:98:6a:30:7d:17:1c:bf:b9:3b:
da:76:8c:8a:cd:60:20:a4:1c:68:1b:11:99:3d:27:
63:a2:9f:66:a1:b8:c3:56:c8:87:f3:34:eb:dd:7c:
40:27:71:c6:d0:31:b0:bb:6f:c4:e1:2a:f4:6c:d2:
be:1b:42:85:a9:c2:7f:58:2f:19:f6:57:53:01:7f:
21:7e:e8:b7:2f:f2:81:c6:a3:14:ec:5b:aa:d8:89:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:42:88:5A:2F:65:A9:53:4C:51:F5:A7:75:96:3B:AD:79:4F:4A
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c4:4c:f5:2e:fd:19:e1:84:71:73:e2:f4:1e:1c:cc:a4:fe:
13:ea:0d:62:82:1f:93:1a:bd:86:a3:99:c1:f7:4c:81:99:fe:
ae:da:13:89:b5:9b:a2:aa:1e:18:05:4f:46:5a:ea:c6:f9:bc:
74:0f:9a:d7:52:89:ad:4d:d9:1c:01:bb:d2:13:62:8e:11:31:
5c:6b:8a:c3:72:53:d1:3d:1b:ac:ce:10:74:2d:9c:ab:cf:29:
ad:65:0b:7e:8a:4c:d2:d9:d0:05:1b:15:16:c2:b7:e7:91:53:
9f:4e:ad:19:f8:b3:9a:de:74:79:fc:5a:fd:88:35:cf:88:20:
aa:8d:8a:42:f6:84:e0:53:3c:b6:53:e9:61:e9:69:2d:c6:90:
47:8d:8d:1d:75:50:2b:28:87:ab:99:51:f1:bf:65:f6:dc:f9:
d5:3c:64:19:aa:19:09:28:62:c9:ed:44:9b:20:d4:0b:79:96:
82:f0:47:0f:84:42:f7:cc:42:01:33:34:27:14:22:75:bb:36:
12:3d:37:dd:11:37:7e:c3:70:b5:c9:f1:c1:d2:90:ef:61:0e:
44:ff:44:a6:0a:66:e3:99:7f:f1:4a:d7:91:c3:63:a2:34:41:
5e:32:de:51:69:b0:e3:c5:c4:86:19:f3:0f:d5:a8:f9:64:68:
77:5a:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:30 2025 by rpki-client