Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: p8A2SI97bUxs5hl9BgBM+KqpBiNICeRZcjLNzA1kowU=
Subject key identifier: D5:41:94:CE:67:F4:08:04:7E:7A:37:BB:2A:63:B6:3B:17:37:B8:C8
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0196526D614864F16D0507404395DBAAC412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 05FA
Signing time: Sun 20 Apr 2025 09:00:21 +0000
Manifest this update: Sun 20 Apr 2025 09:00:21 +0000
Manifest next update: Mon 21 Apr 2025 09:00:21 +0000
Files and hashes: 1: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
2: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: yhafmctBwrbLKeqRmCtoplGd8T9Kh8TqDEdUSFbtAvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:61:48:64:f1:6d:05:07:40:43:95:db:aa:c4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Apr 20 09:00:21 2025 GMT
Not After : Apr 21 09:00:21 2025 GMT
Subject: CN=d54194ce67f408047e7a37bb2a63b63b1737b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:b8:f8:53:f0:48:62:d5:cb:98:3d:f5:e1:
45:a9:d8:dd:90:92:fd:c4:7c:1f:95:9f:ea:05:1d:
57:61:1c:14:d5:66:02:e2:b3:17:40:6e:e7:0b:51:
15:04:db:a5:8d:63:69:b1:5f:65:ba:1c:41:96:61:
a5:e2:39:1e:56:1d:17:86:30:83:5e:25:38:71:16:
0b:85:03:0a:2f:99:96:bb:58:3d:6e:ee:d6:74:fe:
33:71:4e:82:c6:d9:a6:be:d9:bd:8e:f6:9c:a4:92:
a4:0f:3e:c6:6a:f1:a3:14:1d:43:c5:ad:ad:7f:42:
4e:8d:3b:cf:e8:94:1d:79:09:11:7a:7c:d5:d8:8d:
25:dd:10:c8:14:e6:68:e6:b9:ed:f5:04:76:5c:95:
b2:92:2f:b7:99:b8:87:48:0d:c3:73:b2:8e:9f:f0:
4c:dd:f8:ae:f0:aa:2d:e8:d3:3e:c1:9b:bd:1b:d0:
d2:b0:de:b0:c3:50:f4:23:9b:d9:15:b7:90:f1:a2:
93:2a:c3:91:a3:27:b3:40:c4:a1:89:9a:50:a5:f2:
50:26:b0:a8:c3:de:5c:ce:d0:59:17:f5:8c:f6:39:
43:2e:ce:1a:d3:1a:b4:48:d3:55:f3:d7:e7:cc:82:
e4:39:e6:fd:18:e7:07:59:8a:2f:93:1e:c4:41:66:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:94:CE:67:F4:08:04:7E:7A:37:BB:2A:63:B6:3B:17:37:B8:C8
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d5:61:4b:a9:4b:1d:7c:07:c5:00:c0:11:fd:e0:da:6e:62:
20:fd:52:02:db:5b:5d:7a:43:4c:5b:89:58:12:84:9e:d1:a6:
14:48:34:86:1b:1c:5d:4c:92:99:5b:53:32:f4:52:54:43:29:
cc:2f:7b:7e:da:ad:85:fa:8e:76:40:bc:61:21:ea:c5:cd:39:
86:97:d7:5f:67:b1:b6:b8:86:48:c0:be:e3:98:15:5a:4f:e1:
7c:49:53:f1:03:27:80:aa:a0:52:13:c6:63:59:a4:28:7f:29:
e8:e2:37:42:73:de:91:9a:9b:0c:cd:bb:29:7f:f7:88:31:54:
9b:cd:32:f3:6e:95:46:4b:38:a2:f2:37:c8:3d:ce:66:eb:ae:
81:9b:53:db:76:79:e8:01:50:8e:c0:9d:78:b6:c5:2d:7c:4d:
d0:75:16:79:b1:7b:7b:c9:6b:50:61:5a:13:a7:05:03:22:d8:
11:07:56:1b:07:08:65:72:04:af:b4:9d:fb:62:88:6c:44:64:
1e:19:f0:ce:e8:bb:a3:51:48:bf:42:48:f9:51:5b:2e:ab:2e:
c0:ad:3c:b6:6b:f1:72:3e:85:66:d8:64:bd:b7:ee:9a:7d:bf:
ed:da:8e:ee:9c:20:68:41:6b:6c:9a:44:d2:ba:a6:0d:11:f3:
ce:84:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:55 2025 by rpki-client