Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: 5QukSC2aOmnF6ZT8Wr/RqNpU71Ed39VPJqGPmw0/kxw=
Subject key identifier: 42:8E:CC:BD:70:C6:A2:76:10:CF:4F:8E:1C:15:A4:54:97:B7:05:D0
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01963DD410B1C9C981982E8BFDBE68CF2AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 09:00:30 +0000
Manifest this update: Wed 16 Apr 2025 09:00:30 +0000
Manifest next update: Thu 17 Apr 2025 09:00:30 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: dJvl4NpDOevyL/3WxjXaIQEFvqEF81B+q7utW8nt5mQ=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:10:b1:c9:c9:81:98:2e:8b:fd:be:68:cf:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Apr 16 09:00:30 2025 GMT
Not After : Apr 17 09:00:30 2025 GMT
Subject: CN=428eccbd70c6a27610cf4f8e1c15a45497b705d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:2c:4c:b0:2f:b7:1f:ff:d2:fd:21:7b:39:
e4:18:53:45:d4:ab:10:b4:e4:c3:2f:8b:a1:08:57:
61:46:ec:5d:64:a9:9c:bf:4c:31:05:d7:ca:e0:41:
11:ca:d5:4b:c3:3f:81:b2:f8:14:df:ba:8b:a8:46:
e4:8b:4c:55:2c:b8:b3:75:10:e4:25:04:fd:6a:2a:
d6:41:10:f7:45:84:6b:30:e4:a3:fd:b4:f7:4d:c5:
22:91:76:d3:28:71:90:ba:4f:aa:16:38:66:4c:d9:
b4:ed:8d:60:07:2a:98:dd:42:2a:e6:86:54:72:c7:
95:f5:e2:4c:dc:9b:88:91:93:8e:ba:31:b6:5a:80:
4f:ca:1a:23:20:1e:ef:29:bd:a4:47:82:0f:8e:24:
4a:23:5a:66:fc:f2:89:a2:f3:48:b5:75:5b:b4:f7:
72:f1:18:ce:55:20:48:57:16:db:8b:9e:95:a4:b0:
f7:4a:fd:55:90:c1:2a:ca:b0:26:94:6d:2e:de:2b:
37:62:84:86:a0:78:20:42:f2:5e:0b:3c:40:ae:f9:
1b:fa:0c:10:0e:c9:de:1f:e7:f3:fd:17:bb:db:85:
cc:a9:ef:08:91:14:80:99:ef:2d:e1:71:3f:a2:6a:
80:eb:c6:92:5c:eb:bb:77:2e:81:1b:9e:0e:d2:41:
df:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:CC:BD:70:C6:A2:76:10:CF:4F:8E:1C:15:A4:54:97:B7:05:D0
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d4:30:d9:d9:a6:7a:db:84:1b:b9:3e:7a:41:16:4d:5a:16:
50:1e:f9:d9:96:3c:a6:99:36:12:05:e0:2b:f2:30:f6:7b:21:
95:26:e2:32:06:31:78:2a:46:d9:4a:17:9b:be:f3:f3:24:88:
d3:b9:9d:7c:f4:f8:63:5f:75:7b:51:d2:bd:2e:06:41:4a:f0:
cb:52:fc:79:14:6c:3f:12:41:e9:45:27:88:4b:2a:98:88:19:
7d:0c:ac:10:41:f2:ea:62:1d:28:de:7d:9e:c1:b9:eb:6e:05:
e2:66:84:43:36:af:a3:5f:d9:49:c6:75:d3:0b:73:6d:36:bb:
d8:64:ac:2f:60:44:a8:5a:c1:3b:fe:02:19:ae:14:e8:d2:66:
71:50:82:00:4f:16:02:86:8f:dc:09:f8:8e:c7:10:f3:2e:1d:
e5:94:ff:66:92:76:b1:4f:a0:dd:a8:41:b2:48:97:9e:e4:03:
c0:99:85:16:75:3c:05:fd:ef:e6:7f:0e:90:54:06:a9:06:67:
68:7b:00:08:eb:a9:77:9e:f9:81:0a:9e:07:3f:70:3f:92:3f:
8c:ed:72:11:83:7c:18:03:dc:d6:60:ba:41:59:15:c0:be:b2:
05:24:ad:db:b9:cc:31:48:d6:bb:35:a4:76:e8:a0:b6:0a:e9:
a2:e1:9c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:19:28 2025 by rpki-client