Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: t+2bAC96PXUDMoxYbKPzRvZFa3pZvsV8AHZcE3pH6XI=
Subject key identifier: DF:5B:8C:A6:24:BA:96:9D:BE:53:06:49:43:C8:32:BA:4E:4F:CD:FE
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 01964A7D524FE925A9F1CBB9A6B42EA506A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 0851
Signing time: Fri 18 Apr 2025 20:00:49 +0000
Manifest this update: Fri 18 Apr 2025 20:00:49 +0000
Manifest next update: Sat 19 Apr 2025 20:00:49 +0000
Files and hashes: 1: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: Q0N0Ubm9shd/hoOqLZhM5OqxHwhc8Twr7uPuvjmQ6S4=)
2: wnX8Ya1rxnPViUevxG2zASimD4s.roa (hash: 5yf/GiJRJl+zzQb5QiL4xkgJStGYufgJG3+rwqnEksA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:52:4f:e9:25:a9:f1:cb:b9:a6:b4:2e:a5:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Apr 18 20:00:49 2025 GMT
Not After : Apr 19 20:00:49 2025 GMT
Subject: CN=df5b8ca624ba969dbe53064943c832ba4e4fcdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:3d:b8:dd:cc:b4:51:1d:82:1f:78:98:82:
cf:b0:2a:72:b7:c7:d7:93:41:18:86:92:12:f6:f2:
cc:df:c7:34:4f:a7:51:e6:ae:70:2a:fe:68:cf:e2:
3f:4b:c6:4d:db:54:22:d8:37:b0:a7:03:56:85:ab:
26:75:5e:7b:e2:1b:06:0d:55:65:8e:b3:8c:91:55:
ba:d8:20:17:42:75:7c:7a:55:6a:5f:cb:bb:95:e0:
e9:fe:da:f0:bb:9b:15:b6:fe:a7:60:a3:ff:d8:fb:
9c:63:0e:0c:47:a9:58:d6:d6:40:cc:1e:88:02:ef:
55:18:d3:d3:8a:d8:d1:16:35:47:26:b0:14:34:30:
80:ce:08:a1:55:c0:e0:15:87:bb:73:6c:e7:18:0c:
a8:ef:76:94:33:28:e5:ab:c5:f6:04:4b:5f:30:23:
17:36:88:2e:06:0d:52:81:c7:5b:58:89:77:cf:a4:
19:16:f4:01:96:af:b5:c6:98:30:99:3c:7c:f1:91:
9e:c3:54:46:4b:d6:e1:5a:80:b6:3e:e4:03:e8:6a:
4b:cb:aa:25:c8:52:ff:cd:a8:62:3b:78:29:95:74:
fc:fa:7e:85:27:1a:fc:fb:19:39:41:bd:01:a4:06:
81:ee:cc:22:6e:f4:4d:72:ec:ea:09:64:fd:46:47:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:8C:A6:24:BA:96:9D:BE:53:06:49:43:C8:32:BA:4E:4F:CD:FE
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f2:03:8c:92:1f:b4:d1:d3:ad:87:12:4a:3f:78:8b:4d:d5:
67:55:0a:75:b5:ba:31:81:af:e8:25:98:b6:7b:ce:7e:e7:de:
f7:1c:f2:16:5e:48:6f:fa:1a:46:ab:09:05:a1:a2:32:23:f7:
25:c0:a0:4c:70:93:bb:b6:87:0b:1d:4d:6a:d5:03:82:40:b0:
ae:74:24:f6:d3:22:d1:d1:65:2a:5c:b7:6e:1d:1d:30:26:9a:
c4:25:dc:ca:69:d1:21:e7:07:49:f7:06:a5:e2:ca:bd:15:3c:
3f:cd:fd:d1:77:61:c3:56:9c:d6:53:67:95:76:2b:28:1d:73:
6b:cd:a3:4e:95:60:5a:10:c7:22:86:44:1a:04:33:d2:1b:55:
21:61:13:22:76:ad:25:cc:6f:3f:d2:4f:29:58:e4:31:9d:59:
39:db:eb:b2:0f:9c:7b:a5:cb:70:ac:31:22:1a:7f:2d:7a:13:
80:cb:8b:68:44:29:28:10:00:1e:96:2e:6a:a1:6d:5f:43:c8:
c5:d8:58:a3:a8:f1:07:ae:bd:f4:7e:2b:a1:40:ca:5d:12:52:
2c:1d:1f:64:ba:99:93:61:60:85:05:44:3d:f7:77:b1:26:de:
75:e9:20:86:9a:10:28:81:eb:29:bd:5c:31:da:64:03:f1:f3:
95:3e:49:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:55:55 2025 by rpki-client