Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: uJ3VZB8tU2lMnD9P3ak92GmaGw8w3cC3wiPrIMzYy/c=
Subject key identifier: 28:41:E9:59:F0:0E:0E:F4:D0:63:D2:F8:AC:55:42:22:D7:52:E6:CB
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019651FFA61EC63B59116E32C87637B2E894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 07D4
Signing time: Sun 20 Apr 2025 07:00:30 +0000
Manifest this update: Sun 20 Apr 2025 07:00:30 +0000
Manifest next update: Mon 21 Apr 2025 07:00:30 +0000
Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=)
2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: VBOsUiF5vuhu64otjSujybFPx6TOhb2VbJ3Q9IpaBOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:a6:1e:c6:3b:59:11:6e:32:c8:76:37:b2:e8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Apr 20 07:00:30 2025 GMT
Not After : Apr 21 07:00:30 2025 GMT
Subject: CN=2841e959f00e0ef4d063d2f8ac554222d752e6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:49:a2:82:49:24:e2:2e:b9:3d:55:40:0a:
e0:c9:dc:9f:37:86:8e:da:ea:e0:bb:32:1a:79:f9:
f6:a8:a2:e8:34:06:1e:6a:e3:ff:72:d4:dd:21:96:
73:7c:66:ac:db:50:74:9a:e1:18:ff:93:49:e4:08:
29:ce:5a:ef:f5:08:18:ae:a6:06:aa:6a:da:16:db:
23:55:34:38:1a:40:4e:96:a4:95:7c:31:dc:47:a6:
57:29:02:a3:4a:f2:93:c1:aa:24:17:53:0c:1b:a0:
f5:1d:90:68:aa:6d:ce:24:d9:18:89:c2:0a:55:35:
7b:25:d8:b9:62:62:02:84:a7:09:af:4c:87:36:76:
25:09:a4:f8:bc:10:20:ba:8c:8e:05:fb:f9:ec:77:
2f:20:90:bc:24:2e:c4:1f:f0:9a:fd:b4:50:45:d4:
da:79:f7:3b:e1:13:0e:51:66:4c:47:94:50:b1:92:
a7:ec:7c:18:87:21:34:ab:13:68:af:05:7c:fa:f1:
e4:fb:e3:85:d4:66:23:4b:b2:ea:4b:25:d0:26:7d:
da:9f:b8:42:b2:bd:69:2b:93:c2:a7:ea:19:37:9c:
09:2f:46:30:af:dd:52:9e:cd:e8:bb:72:b4:ee:f5:
9b:be:20:c3:15:30:4b:17:6a:a8:ef:f0:b5:53:a0:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:E9:59:F0:0E:0E:F4:D0:63:D2:F8:AC:55:42:22:D7:52:E6:CB
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ec:d8:68:68:8f:93:96:b2:cb:32:c5:8f:c5:78:8c:83:61:
af:7b:3d:ad:4a:fa:aa:04:fa:bf:37:bc:84:7d:74:c3:a2:f0:
4e:51:c6:ce:28:23:1d:a2:0a:08:e0:d6:0c:e6:3c:6d:05:37:
ac:6b:8c:ba:07:43:d0:c8:2e:7c:fe:5e:ed:16:62:f2:02:39:
21:28:c3:ec:b4:3d:d5:36:28:3b:71:9d:34:77:3f:33:0a:b7:
a8:b5:33:d1:1f:4f:82:a1:3f:0d:f1:6b:54:6d:39:af:f4:80:
b4:fd:6c:33:56:63:ac:bc:7f:5d:7b:e6:d9:ec:8d:d6:eb:91:
de:f9:d7:67:6a:3e:cd:22:8f:7f:c1:af:f6:9a:56:62:dc:63:
51:e3:f2:af:ba:2a:87:7d:72:42:d6:f6:da:bd:52:eb:71:e2:
3b:29:7d:0d:fc:bf:cd:36:36:5a:a6:7c:4f:a2:1d:d4:71:e5:
41:85:b0:8c:92:32:50:bd:35:c7:fc:0e:4b:b2:b9:8c:1d:1b:
f7:7d:5f:33:e7:6f:c2:d6:09:b3:d6:7d:67:d3:d3:9c:73:5a:
44:da:26:d6:b9:88:3a:58:09:97:9d:38:a1:53:9f:db:bd:6a:
22:a8:07:97:98:fa:ce:d6:25:1a:df:db:2f:76:2c:f5:6f:5f:
5f:e3:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:21 2025 by rpki-client