Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: JBEs6rqRND6bT7NPeMO149n9YDaCUP9B7xofPUGHLnE=
Subject key identifier: B2:BD:DB:1E:D4:22:CD:8B:2A:32:0E:72:3E:51:F2:75:96:8B:1E:39
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01963C53E6D2FD34A65A6E92FC7884B7A960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1214
Signing time: Wed 16 Apr 2025 02:00:53 +0000
Manifest this update: Wed 16 Apr 2025 02:00:53 +0000
Manifest next update: Thu 17 Apr 2025 02:00:53 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: M30l5Lrnv4+E+k40kuNg7GvFKXgLspXzY7fxcJz10bs=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:e6:d2:fd:34:a6:5a:6e:92:fc:78:84:b7:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Apr 16 02:00:53 2025 GMT
Not After : Apr 17 02:00:53 2025 GMT
Subject: CN=b2bddb1ed422cd8b2a320e723e51f275968b1e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:19:46:56:c1:c6:26:7e:e0:b3:c1:3e:a9:
e6:07:43:80:06:1b:3d:90:07:64:05:ff:6b:8d:a4:
2a:b1:6f:28:94:16:7c:4a:82:11:be:8c:30:0c:d9:
00:6a:34:8a:57:6b:75:bb:f2:47:a8:58:4c:b5:00:
af:f5:ac:c2:00:eb:d6:78:85:b5:6a:d2:04:6b:fb:
d6:d2:cd:e0:6b:0d:f0:8d:31:c5:07:aa:8b:fb:0d:
b0:f9:d4:4a:2c:f4:60:09:a3:ac:ad:41:af:0c:c7:
54:a0:66:69:cd:11:b1:3f:29:94:58:25:49:d3:40:
76:05:ab:93:7d:c9:08:b6:c4:ad:28:aa:a7:62:71:
6d:6e:9b:97:12:f2:7d:9d:09:9d:a6:a7:45:c1:1b:
1a:d6:70:58:cd:7d:9b:c8:89:39:5c:8f:88:ce:c6:
cb:55:2e:06:9b:9b:00:80:a1:34:63:f3:d7:d3:8c:
59:83:65:a9:b2:10:57:15:6a:36:57:30:f9:85:1f:
87:a5:47:a2:d5:d8:2b:48:6f:30:cc:ab:73:47:eb:
f5:33:75:04:a9:da:37:53:19:3b:aa:14:d9:e6:55:
6e:3b:f1:2c:8d:bf:74:2e:c8:9e:d3:1b:cc:06:06:
33:6e:d8:2e:82:48:ea:44:8f:2d:18:8f:4b:13:cf:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:DB:1E:D4:22:CD:8B:2A:32:0E:72:3E:51:F2:75:96:8B:1E:39
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:93:4b:38:e6:46:0e:39:c3:3f:9d:10:0c:dd:85:97:95:bb:
f2:66:98:ea:9e:32:58:1a:e2:27:66:7d:69:04:73:77:d7:62:
1d:ab:79:92:72:83:ab:d1:36:8d:1c:65:88:99:29:78:5f:79:
7b:90:c9:ef:d7:1d:db:1a:4e:54:a4:3a:cb:21:f7:11:a8:6f:
ed:5c:d8:4d:46:25:c8:a3:2f:4b:55:6d:e5:81:c3:2d:05:bb:
dc:38:ec:a9:60:68:22:13:0f:92:13:d4:9d:08:04:26:13:37:
97:d1:60:02:79:d3:5d:7b:98:97:72:19:95:ec:cb:13:5d:d4:
a5:78:0f:6c:9c:ca:65:34:8c:c2:ae:4b:32:d1:f2:b8:69:9a:
de:47:45:8b:e4:ea:cb:4c:48:78:79:cc:30:8c:bc:ab:d5:59:
80:78:55:d0:6f:ee:dc:18:ab:14:d4:0b:ee:75:85:9f:f3:6d:
c7:6a:1d:cd:f2:09:61:83:58:cd:b9:5b:f7:f6:6f:bf:b6:52:
80:a7:64:a8:c2:a3:db:45:a0:bf:53:90:f8:68:dc:d5:6c:c2:
41:5b:3c:0d:13:4b:b3:d5:92:ae:42:fe:76:ad:67:36:28:01:
da:71:08:3d:f7:d9:07:e2:0d:ea:f3:fe:9d:8f:44:3c:0b:79:
0f:f9:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:37:01 2025 by rpki-client