Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: jQJ056C6JLm9qDboQhHjKf7q6QSnkiH0ZTCowWafy9Q=
Subject key identifier: FB:34:5B:71:B5:7C:F2:86:89:E3:C8:53:B1:43:22:C9:A9:84:49:85
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 019579106C167508D5488F80FA55638296CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: E7
Signing time: Sun 09 Mar 2025 04:01:14 +0000
Manifest this update: Sun 09 Mar 2025 04:01:14 +0000
Manifest next update: Mon 10 Mar 2025 04:01:14 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: IoqbZaajdGfVgjosh77kGmBdMZM2aQSw47AwOFtM6wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:6c:16:75:08:d5:48:8f:80:fa:55:63:82:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Mar 9 04:01:14 2025 GMT
Not After : Mar 10 04:01:14 2025 GMT
Subject: CN=fb345b71b57cf28689e3c853b14322c9a9844985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:b4:56:d1:74:26:3b:78:94:fb:d0:cb:58:
64:f3:ee:0c:2a:bb:98:56:e1:e0:4a:51:6e:c6:ba:
fa:a0:6a:22:37:9d:c9:a0:2c:b2:6b:a8:06:f0:2a:
f2:3c:09:a1:ca:6f:bc:03:94:86:4e:f2:d8:b9:f3:
0a:aa:43:cd:5e:35:41:0c:5e:f2:da:60:45:b0:94:
38:d1:25:05:6c:b6:9c:ff:6f:5b:8b:68:b4:07:3a:
73:eb:1d:e8:17:f4:02:23:ef:c1:d6:2c:04:84:6e:
3c:20:e1:84:57:f7:59:4c:28:22:f1:9a:00:9e:b3:
0f:9d:17:68:27:3d:50:c4:78:39:1d:f8:97:f3:c3:
29:c3:7b:83:5f:e4:c5:c8:20:b8:a7:e2:cc:13:9d:
50:84:d5:ae:da:61:25:28:8f:6e:48:62:95:0e:89:
02:74:3d:87:dd:6f:53:3f:92:fe:7b:49:ec:d7:10:
2d:33:c6:97:bc:7f:a2:94:bf:60:e2:43:35:a4:de:
a6:95:8f:91:5c:10:d2:c9:be:79:e0:91:05:f5:e6:
50:73:6f:bc:d3:0d:e4:44:31:f4:d0:4b:1b:ce:d9:
3e:76:b7:71:aa:5f:87:11:d3:ff:34:e8:4d:04:a7:
82:c5:e2:58:a3:00:13:ee:ad:93:0f:6a:d7:f8:b2:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:5B:71:B5:7C:F2:86:89:E3:C8:53:B1:43:22:C9:A9:84:49:85
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ae:50:99:0e:b1:a6:b0:c3:9a:09:18:06:d4:02:b1:40:4e:
63:71:74:c0:e3:f5:a3:14:14:41:31:68:30:96:d6:6c:01:64:
a7:b5:cf:46:c6:54:01:fc:11:12:d9:7c:b9:3a:55:3f:2f:26:
51:63:5f:c5:5d:b0:dd:3c:73:31:06:d3:8c:71:33:8a:69:e0:
30:48:7a:21:af:71:d3:f4:b4:45:23:23:66:86:df:a9:93:2f:
92:64:f4:d3:7a:70:af:4c:16:c0:28:a4:60:7b:b9:56:3b:03:
b3:91:89:ac:97:ed:5c:5d:ad:0d:74:9e:6e:3a:f8:3f:f3:87:
7e:8a:0e:11:79:1f:9d:49:00:2d:85:dd:23:71:2f:53:2e:db:
d3:25:bd:d8:31:91:66:5d:b8:bf:2f:13:a3:a3:74:bd:be:19:
b9:15:cb:2e:4a:77:03:63:64:c2:a0:06:4a:76:49:88:7d:68:
7d:fb:71:e1:9b:81:b7:ef:69:e9:41:d3:58:60:e8:f7:18:d7:
58:e7:f0:7d:35:50:dd:5c:0f:57:e9:12:20:92:ac:b9:ae:0a:
c1:29:f3:20:89:8d:ad:72:aa:bb:3b:d3:3b:98:73:89:05:e5:
a4:88:92:02:1a:a7:d9:ab:e9:a1:5e:14:f9:72:42:19:6c:c7:
1b:83:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:15:15 2025 by rpki-client