Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: +yCRaf3YQNm2pgWQFzOY+qA+P+8JfLfzxygemssHQwM=
Subject key identifier: 22:6A:38:DA:09:61:40:B3:02:1C:4A:23:C3:7A:F6:4B:B1:54:02:E4
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019652369B459C5B696B004B1D36B2523432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0BB7
Signing time: Sun 20 Apr 2025 08:00:32 +0000
Manifest this update: Sun 20 Apr 2025 08:00:32 +0000
Manifest next update: Mon 21 Apr 2025 08:00:32 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: FXJ1/w6iexybFxLfIZib6ntus8vdMLAJANQdp9+Vv68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:9b:45:9c:5b:69:6b:00:4b:1d:36:b2:52:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Apr 20 08:00:32 2025 GMT
Not After : Apr 21 08:00:32 2025 GMT
Subject: CN=226a38da096140b3021c4a23c37af64bb15402e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:1f:88:44:bf:d7:f7:aa:b7:f0:6f:79:94:
2a:22:4d:84:aa:49:ff:58:7f:0a:24:a1:98:6c:d3:
76:ec:77:72:a7:df:74:00:69:43:5e:99:0d:b8:b0:
42:8e:3b:bc:82:ed:d8:19:5f:cf:ad:82:a1:a3:9e:
1d:79:af:7f:44:36:e6:9e:ba:82:0e:c1:80:03:fc:
a8:44:36:fc:9b:bb:55:e5:f3:d0:89:ad:bd:84:a9:
56:dd:dc:10:97:fc:9f:49:9f:10:fe:4d:fd:b9:ae:
54:c2:f0:7f:fc:25:a0:5a:ed:98:7d:25:e7:61:5e:
f1:7b:e5:af:9c:7f:3b:e9:2d:f6:ed:8f:27:70:31:
3e:12:ee:77:95:dd:bd:ba:da:62:07:f1:57:49:31:
47:b9:71:61:ed:57:49:4a:64:81:1b:72:e0:2c:84:
2e:44:6c:8f:63:ec:fb:76:fe:06:d9:6d:4e:9f:ea:
6d:29:b8:1c:72:9b:44:6d:e0:6e:68:75:3c:95:2a:
7a:34:d5:e7:4c:83:44:a5:9c:2a:12:31:b6:c6:e8:
3d:df:fa:86:db:34:16:13:dd:be:10:82:8c:c5:d5:
b5:ac:83:bc:f4:f1:5f:49:7e:c3:93:4f:5c:de:1d:
ce:55:68:3e:4f:75:67:5b:63:66:e0:1e:c0:be:2e:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:38:DA:09:61:40:B3:02:1C:4A:23:C3:7A:F6:4B:B1:54:02:E4
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cc:e5:02:bf:68:d2:b1:85:d2:b8:5e:66:b3:94:a8:ff:45:
6c:95:1d:99:19:83:5d:42:c4:4e:0b:ee:5e:a7:65:c3:b8:2f:
7a:f9:95:23:5c:3f:8a:08:c3:29:61:0e:66:30:91:06:65:fc:
33:a1:a1:fe:b0:63:99:1f:60:82:b2:77:a9:81:de:d7:96:5b:
0a:c1:db:06:ca:b2:e8:f7:de:47:c2:12:c4:98:f0:47:75:13:
e2:fb:6b:e1:fa:74:d3:bf:4e:20:e0:2e:c5:59:2e:d9:d7:78:
dd:e0:4b:8d:89:c1:81:22:23:bb:b4:87:b9:be:4a:42:22:a0:
50:49:cc:21:62:1b:17:80:40:ca:03:20:6f:1b:a7:79:4a:4d:
19:19:52:77:36:b3:66:d8:e1:16:41:0c:b9:27:3f:23:08:a2:
f1:49:d0:21:d9:2a:4a:3f:5c:15:cf:79:e8:ea:64:62:6c:d5:
0b:b9:2e:66:7b:18:9b:41:a8:9b:fe:e2:cf:3c:f1:bb:e1:a1:
12:bf:04:5f:0c:29:eb:5c:98:df:0d:66:e3:65:df:ff:4c:0a:
07:f5:a5:f1:7b:50:62:6e:02:fd:ce:88:5b:2a:f2:c4:d8:3c:
60:bc:7f:f6:05:4a:c1:dc:1f:d1:5d:c5:1e:ea:76:e1:da:2a:
7f:b6:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:33:52 2025 by rpki-client