Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: c4oFeAYMEgc1uIrVY1YQXlfo01Ta3lRkCW32NMCIQTY=
Subject key identifier: 0A:AD:3A:97:B9:6C:B5:FD:5F:F5:95:F5:DD:6B:4C:7F:27:7F:0C:9A
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019643D6821908BE5D0B9B105A9F66363150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0A0F
Signing time: Thu 17 Apr 2025 13:00:53 +0000
Manifest this update: Thu 17 Apr 2025 13:00:53 +0000
Manifest next update: Fri 18 Apr 2025 13:00:53 +0000
Files and hashes: 1: 8F98rTSwPOpZS4Rzfg71Kw6oATI.roa (hash: QtxPboJkw4rOLdUx7QH5EP5ZvFcFd0VJLxIZUYnjoyU=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: +8r3gxKsIFBdSnxH0RonMCVx+twBaJ/zGkhkhCtR35c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:82:19:08:be:5d:0b:9b:10:5a:9f:66:36:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Apr 17 13:00:53 2025 GMT
Not After : Apr 18 13:00:53 2025 GMT
Subject: CN=0aad3a97b96cb5fd5ff595f5dd6b4c7f277f0c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:24:9e:04:2b:ff:37:3a:b3:14:31:5e:c7:
0c:d0:2e:93:60:c6:a0:bd:dc:8a:7b:5c:48:ce:34:
5b:c6:8e:6e:75:6e:b8:68:e6:dc:0b:14:73:07:3a:
87:4e:e7:c1:2a:42:f7:34:c8:3c:0d:2d:9e:44:07:
b8:2c:fc:df:c8:9a:43:fc:37:04:44:28:d4:2a:95:
b1:b5:5d:48:f3:29:a0:89:73:4b:b7:dd:46:c1:7c:
e7:78:62:35:55:6c:c1:a4:dd:c4:a4:76:1e:e4:8e:
e4:48:c8:cc:53:d7:27:ec:1b:ac:4a:c4:ed:39:85:
dc:a7:a5:57:43:54:42:f3:ce:08:01:db:74:40:cf:
a8:39:13:47:ca:2a:90:86:b5:4d:5e:4b:5f:c2:fa:
d7:de:c2:53:7b:c6:40:96:5f:5a:1d:22:77:ed:83:
96:71:f9:b1:e9:89:68:b3:42:e8:96:31:79:08:d5:
9d:93:1d:67:f4:28:2e:49:3f:ab:4c:f8:5a:2c:46:
cd:0d:3d:30:ab:2f:47:1a:48:f6:71:d5:cd:67:64:
d2:5e:ad:52:2a:d1:65:ac:76:5d:ee:39:e1:8a:40:
4b:17:78:c0:ca:be:09:4f:8d:9e:9b:71:6b:cf:0c:
02:a6:8a:a9:69:11:cf:60:f7:0e:b7:e0:9a:4d:ca:
73:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:3A:97:B9:6C:B5:FD:5F:F5:95:F5:DD:6B:4C:7F:27:7F:0C:9A
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:02:3e:f3:0f:3b:90:0f:75:df:18:f9:5b:39:44:c3:43:d9:
b4:17:65:91:42:45:c3:f9:dd:18:97:6c:f3:00:13:d5:a5:eb:
cb:9b:33:90:01:ac:11:72:73:0a:d8:bc:47:4c:dc:00:c9:93:
ce:97:99:66:42:18:ff:a2:fb:a1:87:8f:a3:72:37:c8:57:09:
b2:7c:51:17:ea:de:f2:18:48:5d:41:31:e4:90:39:8e:f0:10:
d7:b1:cc:12:cf:32:c6:b3:a6:73:2b:fc:e5:7f:76:cf:af:28:
23:c4:a5:07:fe:90:d7:15:29:5a:0f:cb:1a:f3:06:28:10:1e:
05:95:8a:cc:c6:87:4a:45:bb:db:2b:39:87:ec:03:9e:90:b1:
eb:7c:1d:bd:87:1f:73:da:af:7f:f1:07:89:21:15:52:c3:eb:
17:b3:ef:a4:7e:db:fa:ed:29:51:5f:27:5a:17:21:74:e6:57:
bf:f9:b5:fd:62:e6:dd:17:bc:7e:d0:5c:c9:39:8f:4c:ed:89:
15:83:82:8a:e0:be:94:4b:82:49:a6:45:3f:63:71:9c:3f:89:
cf:9e:f3:24:2e:5d:99:68:22:be:3d:a8:31:6b:da:c1:09:4f:
a9:87:59:5f:73:c6:69:7a:15:6d:06:16:15:34:41:75:13:98:
5d:ef:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:42 2025 by rpki-client