Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: MmSKDqlpMPrpnQysvzQO7fqcLRKfQZ5ITbY+yutbd+E=
Subject key identifier: 57:25:94:CC:3D:14:E1:18:DF:2E:72:2E:2E:CE:69:A9:D5:D4:20:80
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019582B83A14DA47AC773944DEF27C984071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 0582
Signing time: Tue 11 Mar 2025 01:01:06 +0000
Manifest this update: Tue 11 Mar 2025 01:01:06 +0000
Manifest next update: Wed 12 Mar 2025 01:01:06 +0000
Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=)
2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: /D3W09P0BNRfnehTJZ4LkbyyGn+r40v/PS6wJSbdyzE=)
4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Mar 2025 21:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:b8:3a:14:da:47:ac:77:39:44:de:f2:7c:98:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Mar 11 01:01:06 2025 GMT
Not After : Mar 12 01:01:06 2025 GMT
Subject: CN=572594cc3d14e118df2e722e2ece69a9d5d42080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:a2:b1:c3:cc:81:04:32:93:d3:a5:84:78:
2a:fa:77:1f:ab:96:36:3e:22:9e:99:b7:a1:95:1d:
95:bc:9f:50:3e:ad:85:1a:27:11:f6:d9:ec:67:07:
61:46:ca:ee:d6:30:63:ae:5e:03:5c:4c:36:a6:1e:
7f:67:31:03:e4:59:03:c7:77:ed:7e:d8:78:ea:30:
ae:d0:71:79:26:d0:e1:10:e1:f0:1e:bc:3a:09:1b:
39:68:08:0c:4c:ef:03:d4:15:85:b6:ea:2f:df:08:
a3:64:e2:7f:f5:95:cc:fc:b0:2a:40:50:45:92:40:
da:50:65:89:55:b3:5f:a5:7c:24:e2:e7:74:38:8f:
a4:67:cb:c9:57:98:14:ad:a2:4e:ae:67:ac:e1:a0:
9d:1e:81:8e:8c:78:6e:e3:98:72:d4:a8:4c:97:b7:
89:2a:f4:ab:ef:f4:09:8e:17:c6:66:a3:30:f8:b5:
c0:14:d5:9c:59:15:d9:29:f0:40:06:ac:d6:5c:77:
dd:45:66:e8:10:e0:65:40:bc:22:56:cb:d8:ce:1e:
fe:c7:f9:f9:80:2d:68:75:1c:64:e8:b0:3a:06:67:
a5:23:67:56:c9:ce:b0:a5:03:ff:9e:53:66:46:3f:
52:94:c7:a8:ba:df:21:13:70:0f:4e:44:9c:da:77:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:94:CC:3D:14:E1:18:DF:2E:72:2E:2E:CE:69:A9:D5:D4:20:80
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a2:f9:c3:71:d8:76:82:6c:6a:e0:de:3e:23:82:ae:e2:54:
bf:9f:50:28:f8:e7:e6:e3:14:ff:a9:00:50:7b:d5:83:22:de:
d0:d1:e1:6d:3f:79:63:f5:d3:57:83:e7:7d:4e:27:49:b2:d3:
74:89:b2:48:d7:55:71:17:b4:eb:b8:dc:b4:7d:7b:47:65:34:
6a:5f:7a:d4:51:4c:d9:85:14:46:1d:a3:f0:a2:eb:fa:16:60:
df:84:7f:9f:09:92:6a:fb:4a:ea:e0:6c:cf:5e:15:7f:bf:38:
0b:d5:42:85:4b:41:31:0b:52:ac:b0:06:97:e4:d6:1d:02:73:
17:ca:45:fa:fe:70:c4:5f:7f:30:7a:82:c4:6b:a2:11:78:d9:
42:ea:4c:b4:a2:e0:f1:08:15:0e:04:d9:7c:d2:b2:f0:4e:39:
a6:10:21:d9:ae:c6:b3:6f:7e:ac:5c:e2:a7:05:fd:0c:0a:13:
92:4d:68:a7:e0:6b:8b:2d:17:ef:69:6c:36:bc:8e:6c:d9:76:
da:ab:b1:48:db:3e:91:84:4e:d6:cb:d6:b9:dc:b8:c4:21:7e:
98:cc:9a:6a:8a:d8:56:48:7f:4a:6f:9e:d1:cf:aa:77:9f:83:
83:ed:ff:e3:95:8a:b6:59:11:7b:68:66:4a:39:4f:02:1d:bb:
46:52:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:50 2025 by rpki-client