Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File: bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier: pU0YRcKEszeH2pj9zH62VuhQbE4kuLtClghdIAOvPHM=
Subject key identifier: 58:65:1D:D2:C3:AC:FD:2B:60:9F:95:67:18:4C:FF:F5:A0:09:CE:F6
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer: /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial: 0196A2770F4F8255DE4802F42B007B92D3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number: 152D
Signing time: Mon 05 May 2025 22:00:33 +0000
Manifest this update: Mon 05 May 2025 22:00:33 +0000
Manifest next update: Tue 06 May 2025 22:00:33 +0000
Files and hashes: 1: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (hash: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=)
2: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: qkFHU6Ha+01tjT9wwVAzC9aVolQfO38+7M2cUI52PcQ=)
3: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (hash: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:0f:4f:82:55:de:48:02:f4:2b:00:7b:92:d3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
Validity
Not Before: May 5 22:00:33 2025 GMT
Not After : May 6 22:00:33 2025 GMT
Subject: CN=58651dd2c3acfd2b609f9567184cfff5a009cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:59:b0:08:6a:b9:d3:63:f7:8f:05:52:ce:
b6:b8:d9:a1:8d:3d:85:a6:fc:2f:ac:28:9f:86:49:
9d:75:37:fe:65:6c:ee:c1:5a:b1:8f:6d:78:f8:a6:
a9:88:68:f6:61:cc:a9:4f:f0:b6:bb:cf:8c:0a:a3:
26:49:89:bb:9d:66:19:d7:33:f7:c6:a5:4f:4f:af:
31:24:fe:20:a9:e6:7b:29:5c:c4:8b:e5:af:6c:37:
0b:30:7f:5b:3d:31:e3:d0:2f:04:0a:9d:93:71:92:
14:b7:39:7f:f8:1a:5d:ab:1e:82:2e:7d:6c:38:54:
f2:24:a8:56:5e:37:86:e7:b4:e0:48:1f:6f:eb:7f:
5c:88:86:f8:00:29:46:fb:e1:fa:9d:e4:95:23:b5:
ff:6f:d5:88:80:58:4b:7b:0a:20:25:16:f0:3d:1b:
bc:71:b0:ec:a4:55:d9:74:e9:59:34:b0:80:c1:6a:
d0:da:12:29:ca:55:ec:51:a1:e0:a1:d9:51:ad:ef:
93:cd:ef:5a:b9:a8:e4:b5:23:64:de:06:ba:4e:6b:
bb:da:cc:1a:2d:d1:a9:39:70:c0:d8:e9:bb:9a:09:
fd:8f:85:a3:1e:0d:3f:75:64:c5:42:43:ce:09:82:
fb:86:b7:21:e9:fa:03:03:bb:79:62:02:cf:a8:da:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:65:1D:D2:C3:AC:FD:2B:60:9F:95:67:18:4C:FF:F5:A0:09:CE:F6
X509v3 Authority Key Identifier:
keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:73:e3:91:c5:62:16:db:38:66:03:9b:bb:94:0a:68:e7:b9:
63:c6:53:d9:6a:f8:90:53:15:eb:9e:25:7e:56:ea:fc:bf:3b:
52:89:ad:91:dc:6b:e0:d0:48:b8:79:39:57:aa:89:c0:7b:1a:
cc:55:90:ad:04:1e:f8:94:24:cc:88:e1:f1:29:1d:64:b9:78:
66:65:39:1e:57:d4:72:31:da:b7:23:c4:1c:75:d5:fe:f6:d0:
d5:57:5c:4d:4d:62:13:74:b3:d4:4b:fd:05:e6:98:a8:67:15:
35:eb:9c:b6:b0:9e:32:e3:50:a2:d2:c7:37:69:50:7b:57:78:
1a:8c:f1:6c:a7:42:fa:c0:c7:45:e5:78:4a:2c:72:31:a9:ae:
e7:40:75:2c:62:1e:57:4b:ce:d4:88:3d:84:40:70:2a:7e:0e:
b2:b0:f8:32:95:1f:7b:36:38:cb:a5:3d:ab:50:01:53:27:c9:
67:d6:8f:91:29:f6:81:79:3c:ad:16:74:aa:bd:ac:fe:aa:6c:
cd:f1:c5:20:0f:28:38:a7:bd:cb:e5:48:15:36:a4:7c:f5:98:
e2:9c:8f:45:7a:38:3e:92:73:af:3e:db:97:14:54:e4:ec:75:
37:d2:34:e9:3b:9e:80:db:53:15:2b:14:4d:e9:fd:7d:51:21:
fa:cd:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:49:01 2025 by rpki-client