Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: +5Eh9ZolYwnv97mJo0tFhczRI8koe4YIr16toIDVJsI=
Subject key identifier: 7E:82:1C:75:7F:92:BA:1B:FC:D1:10:BD:49:FB:B5:79:B7:CA:FD:FE
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019609AFFF2938C6B0155D866AB91F8B3E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 14D6
Signing time: Sun 06 Apr 2025 06:00:51 +0000
Manifest this update: Sun 06 Apr 2025 06:00:51 +0000
Manifest next update: Mon 07 Apr 2025 06:00:51 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: lUm1IrtCDnh6SOFopvZasZQK0mTCvLFK++FakzMq7i0=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:af:ff:29:38:c6:b0:15:5d:86:6a:b9:1f:8b:3e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Apr 6 06:00:51 2025 GMT
Not After : Apr 7 06:00:51 2025 GMT
Subject: CN=7e821c757f92ba1bfcd110bd49fbb579b7cafdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:fd:fb:b1:ab:7c:df:0b:9a:42:01:4c:12:
d3:7a:f3:8d:f4:77:2c:54:0a:ee:bf:58:05:e3:2e:
d6:82:64:50:66:2e:e1:1f:d8:e7:59:67:7f:9d:a6:
3d:12:d6:76:b9:90:38:64:1c:17:86:47:00:8e:46:
2c:26:78:2d:8b:59:23:a5:88:9a:4d:4c:a6:e6:62:
70:d1:d5:b1:57:f6:85:45:8b:62:1a:8d:85:49:ca:
34:a5:bc:50:b4:fa:e8:03:f0:95:5a:93:07:9a:46:
bf:fd:9c:f1:34:08:87:1b:22:1c:a2:64:95:2b:09:
eb:df:18:3c:15:5c:a0:bd:91:35:b5:36:97:ba:dc:
2c:4e:cf:7e:4b:dc:f2:85:a4:25:b2:f8:d3:ab:d8:
8f:2d:15:34:6b:d0:36:b7:0a:64:a5:4a:93:77:36:
91:56:07:b0:21:b0:b2:14:39:fe:13:df:ce:04:c3:
a9:d6:00:31:f4:3c:ec:26:f9:62:c9:93:e5:80:13:
50:65:eb:fe:fb:b3:1c:e6:b2:87:35:7a:df:85:c1:
3b:80:b3:de:20:4d:8b:12:03:6d:a0:f2:ab:da:41:
88:9d:6d:e2:43:94:67:10:8c:67:f9:1d:6d:ce:ed:
ba:c0:68:df:60:8c:ea:80:19:ee:86:eb:3c:25:79:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:82:1C:75:7F:92:BA:1B:FC:D1:10:BD:49:FB:B5:79:B7:CA:FD:FE
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:49:1b:31:96:2d:a2:6b:6f:c6:1c:64:62:e3:f2:9a:9d:c5:
71:e6:a3:90:80:16:bc:3d:2f:0d:67:89:44:e6:4b:5e:8b:24:
14:f6:e4:1f:8d:3d:5b:cd:96:3a:c3:55:1d:1c:1e:ab:33:b4:
4d:cb:0b:fd:a4:b8:b1:51:d4:1f:a0:8a:38:b6:66:8a:66:56:
e9:f4:c7:1f:c1:56:3f:26:d6:db:df:09:05:2d:0a:00:21:08:
74:38:4c:92:10:b7:da:26:fa:5d:a2:cf:78:59:67:68:6e:a7:
9f:08:4a:68:d0:c3:05:fd:7d:c3:fd:7e:b1:46:85:f2:23:65:
e9:a3:33:d5:8f:83:a4:b9:66:53:2e:24:7b:21:5e:64:b5:31:
f7:4c:5c:53:ea:d0:cc:10:02:1b:e9:a1:93:6a:4e:28:a2:a5:
65:d2:da:c4:96:52:2d:96:0e:f8:b6:3c:42:c8:a7:8d:cf:60:
bb:e0:44:d1:12:1a:97:62:c3:cb:d1:a3:77:91:2a:fb:12:1d:
ac:e1:87:4a:c0:3b:aa:62:94:45:7a:95:69:de:8f:89:75:86:
57:f1:2d:75:21:0a:53:ea:2f:f8:1b:78:db:8f:90:ba:10:7e:
97:21:4d:c6:ff:96:2d:06:e4:21:d9:f0:c2:90:34:c5:8b:3e:
7f:25:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:29:33 2025 by rpki-client