Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: HeyfqBQZnwl2/tCfWnHRrQyuXHPu6f51vhjHU1aLOXU=
Subject key identifier: A7:71:AB:CB:27:FB:46:DD:FE:E1:F9:72:A1:11:C7:68:EC:8B:7B:7D
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01964556824B320823EA52D84D69AB821107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 20:00:19 +0000
Manifest this update: Thu 17 Apr 2025 20:00:19 +0000
Manifest next update: Fri 18 Apr 2025 20:00:19 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: IGpIwt4OKSHlSTgGefQW1BnrP/b3nct3LqaTYZFsg2I=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:82:4b:32:08:23:ea:52:d8:4d:69:ab:82:11:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Apr 17 20:00:19 2025 GMT
Not After : Apr 18 20:00:19 2025 GMT
Subject: CN=a771abcb27fb46ddfee1f972a111c768ec8b7b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:bc:0d:0a:56:3c:97:3b:13:5c:ae:a2:9b:
ea:4e:de:b3:8a:43:d3:f7:a6:e5:25:e7:82:22:58:
67:5f:b8:a3:e7:a0:e2:73:71:a5:61:17:b5:4e:a6:
22:2c:26:32:f0:bb:38:9f:b6:26:0c:88:f1:cc:64:
cd:64:d4:f8:a0:22:9d:e8:9b:fe:f5:53:69:94:67:
5a:c7:ad:10:c1:9c:c3:83:93:e2:b2:11:44:16:aa:
31:0c:32:57:f8:f4:87:bf:66:4b:75:e3:7b:51:e2:
7e:87:5d:42:3e:52:82:ae:4e:a7:86:ba:29:ac:a7:
b0:43:2e:23:47:b2:a4:b8:e9:ee:a9:fd:e5:eb:92:
bf:0f:e4:bc:ab:f5:ec:eb:80:e7:e9:85:4d:02:8f:
bd:f6:83:1b:96:cd:f7:0f:4a:05:86:aa:b3:3c:9c:
88:dc:8c:77:1b:b7:60:b0:44:e5:e7:00:ad:69:05:
26:3a:e3:39:33:8a:18:44:0b:7c:fd:07:89:29:3d:
15:18:46:ef:f8:da:cb:73:86:24:ff:48:f4:a6:88:
bf:73:6b:4e:57:9c:ef:92:58:06:6c:ce:e7:1f:8d:
38:ec:07:a8:d3:64:2c:84:27:87:6a:d9:80:26:f0:
f7:b5:08:c3:4b:af:a5:12:7c:cb:d5:f2:56:d8:ab:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:AB:CB:27:FB:46:DD:FE:E1:F9:72:A1:11:C7:68:EC:8B:7B:7D
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:c9:a8:a0:55:8d:e6:5b:f1:85:86:1e:dd:02:c7:91:9c:
99:99:6f:02:c5:b2:5a:22:6e:76:e5:da:24:45:49:83:9e:83:
ba:b5:94:08:10:de:9e:6b:cd:91:3e:44:25:3d:d0:9b:67:1b:
d1:0a:51:eb:28:44:ed:1c:4c:37:fe:e5:85:64:dc:83:42:77:
a1:a6:42:58:b2:3e:9b:45:84:c0:b0:35:b3:56:6e:6e:7b:f7:
97:33:88:96:a6:3d:88:cf:0f:d1:04:eb:2a:24:a5:54:ef:e6:
57:af:1a:f9:55:ee:3b:57:7b:31:12:a5:9c:07:b5:a1:e3:bd:
8c:c7:87:e5:e7:4f:c5:11:7b:9e:32:10:01:80:24:84:4a:dd:
20:b7:6d:b6:30:7c:a8:04:96:d8:f8:ab:e9:8a:ed:30:8e:eb:
9b:c3:f1:e9:44:53:15:9f:7d:da:df:f1:43:0b:0c:cc:3d:3b:
f0:3f:94:4a:e1:d3:37:23:7c:2b:c0:ea:a7:c2:70:2f:88:43:
84:53:78:90:2b:e5:9b:1f:d5:43:61:97:f2:69:55:a2:1a:18:
a4:7e:96:e2:44:c3:77:a8:70:6c:7e:4b:22:ef:d1:5d:53:f3:
63:91:8a:72:af:b5:c7:91:e8:47:b7:b5:4f:96:96:fa:60:5a:
31:2c:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:45:05 2025 by rpki-client