Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: v+mvwtXk4pl3sKwGwXQXJNdInf44YsgzcjK+QEgO7nM=
Subject key identifier: F8:C3:33:50:BB:F3:B5:FB:20:87:0B:6F:91:C8:5A:EC:70:83:7B:96
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0196293B7FDC2EA6E5350D0D6E866ED9C3DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0AB1
Signing time: Sat 12 Apr 2025 09:01:27 +0000
Manifest this update: Sat 12 Apr 2025 09:01:27 +0000
Manifest next update: Sun 13 Apr 2025 09:01:27 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: w8Rc5pjRLFv1Wgo5vn6588XRGGD+wAhXcTYZxvQH+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:3b:7f:dc:2e:a6:e5:35:0d:0d:6e:86:6e:d9:c3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Apr 12 09:01:27 2025 GMT
Not After : Apr 13 09:01:27 2025 GMT
Subject: CN=f8c33350bbf3b5fb20870b6f91c85aec70837b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:f1:15:1d:a8:23:dd:cf:40:ba:88:66:ff:
fe:b5:73:2f:75:8d:6b:6d:ce:71:a3:e3:5f:68:11:
f1:de:c8:43:37:4a:86:e6:f7:55:bc:d6:63:03:22:
ea:82:0e:56:89:36:ee:25:5a:a1:ca:e8:86:c8:0a:
cf:c3:7c:17:41:30:7f:a4:30:c1:0a:95:e0:ba:35:
c9:05:75:08:e2:09:e2:db:bd:f7:94:eb:f2:0b:2f:
69:5c:65:9d:e8:95:99:e9:d8:7c:72:47:d3:6a:2a:
3c:cb:bd:1d:0d:06:9d:06:a3:aa:da:0b:25:a9:97:
33:9e:3f:a6:ea:e1:d5:f5:59:ff:f1:06:5c:d0:15:
92:40:9c:e5:b5:05:18:89:cc:be:3e:74:3d:41:39:
3f:16:e0:12:ca:08:77:a6:88:4a:03:b7:90:a2:1e:
a4:2d:7e:4f:b7:e7:c8:9a:2c:40:fb:5b:7f:a6:be:
ad:af:9f:75:f9:cd:94:72:ab:08:7b:dc:83:fd:5e:
7f:c7:3d:98:37:8d:08:e6:6e:44:4d:36:1e:c2:03:
ed:e2:cc:ca:fc:35:f5:51:be:5f:d9:09:06:3c:cf:
df:94:9b:0a:bc:85:7e:8c:15:6f:06:81:d9:fc:aa:
1f:3b:1a:e5:d1:94:07:94:ba:19:e4:81:cd:79:1b:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C3:33:50:BB:F3:B5:FB:20:87:0B:6F:91:C8:5A:EC:70:83:7B:96
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:21:d2:b5:73:6d:98:3d:f6:d8:64:4a:49:96:0e:b2:9a:8f:
01:ff:89:8e:ee:f8:dc:ed:05:b0:e5:6b:ce:1d:86:77:e7:9d:
90:e3:c6:7d:37:80:63:7b:c8:01:cf:59:c0:ef:c2:61:72:20:
73:ec:2c:95:3d:44:30:fd:33:ab:e5:be:a6:70:15:05:d7:5b:
cb:22:4b:6b:96:f8:7f:ee:9d:2f:78:68:01:18:7b:aa:6b:2f:
88:69:16:ca:61:44:67:98:95:6b:23:7a:23:a2:1d:89:d1:9f:
a0:ec:e6:30:42:34:38:6c:3f:f7:bd:07:5b:d9:a6:49:55:e5:
c1:86:43:29:57:de:cb:d3:16:a0:50:3b:14:df:32:d5:fe:5b:
45:77:c5:cf:2e:b2:99:31:3d:98:6a:c5:e9:a4:c2:83:0d:fc:
59:fd:cb:3b:90:37:ba:a7:d8:94:6a:2e:32:b5:9f:90:54:0d:
f1:ca:76:8f:a7:2f:4f:b0:6a:51:41:67:7b:a0:b3:3e:2d:5d:
4d:e0:44:a3:96:09:0f:b3:81:47:63:ce:d2:24:23:26:7a:78:
5f:7b:74:f4:cf:99:0b:34:b7:d1:98:73:16:40:55:ee:fa:91:
84:7a:11:a2:77:cb:53:cb:a7:60:f4:4c:b2:c3:a9:de:05:f1:
88:4b:8b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:42 2025 by rpki-client