Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: zj7Bt1dvQ+GfD7F13HjjWHXdUIkas7s6s8zq613PPuU=
Subject key identifier: A1:77:39:D5:BA:35:A4:60:C2:E9:3F:63:B3:67:A8:8D:FF:99:8E:EF
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01960F7B436FF9BB2D14762BF56F4994D9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 09:00:58 +0000
Manifest this update: Mon 07 Apr 2025 09:00:58 +0000
Manifest next update: Tue 08 Apr 2025 09:00:58 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: EakbaHtSKBbzpW+ZDbVnvY9Z4t5/ZqzSVSlo9TA/C2c=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:43:6f:f9:bb:2d:14:76:2b:f5:6f:49:94:d9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Apr 7 09:00:58 2025 GMT
Not After : Apr 8 09:00:58 2025 GMT
Subject: CN=a17739d5ba35a460c2e93f63b367a88dff998eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:40:9a:7f:62:01:0f:e2:c4:fb:63:80:8d:
e9:80:73:69:df:00:cd:a7:05:45:c9:41:6e:5f:45:
3f:31:b3:61:f1:16:3e:6a:32:52:54:98:2a:fe:34:
da:9c:ed:3b:7c:f2:ea:59:fa:78:95:e0:18:c2:f5:
20:57:f4:64:2e:49:34:d9:4b:68:4b:eb:4f:2b:3a:
91:93:fa:b6:b6:a2:54:69:29:f3:0c:c1:6e:d8:ce:
c4:ee:aa:a5:01:ac:53:d4:dc:8f:a9:17:37:73:b8:
1c:77:e5:7c:e9:53:f7:01:4b:cf:40:4c:66:ed:cf:
dc:dd:16:80:77:e9:bc:ec:2b:2d:a1:bc:74:1f:2b:
b0:03:e4:cd:dc:4c:e2:98:4d:87:c4:8a:94:ee:09:
34:38:cd:62:cf:9a:b0:30:8a:a5:c7:07:62:5b:08:
b3:da:9d:8c:c0:3e:79:d5:d1:8f:2a:10:48:20:be:
9d:f1:d6:29:3d:1b:0c:c0:cd:9e:8a:a4:ad:b8:c4:
93:03:3a:5b:e8:2c:d4:cd:55:f3:58:f5:c9:5a:9d:
f9:e1:e0:1d:04:31:ff:a1:fe:a9:0a:35:f0:9c:5f:
5a:36:c0:7e:a5:5d:fb:5c:25:a2:cf:92:ce:7c:d0:
29:eb:a8:81:7b:c3:98:28:93:da:88:bc:af:a4:4f:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:39:D5:BA:35:A4:60:C2:E9:3F:63:B3:67:A8:8D:FF:99:8E:EF
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e5:a4:1d:7a:2b:0f:f6:88:cb:a8:83:ee:bf:0d:32:5a:b4:
45:a3:24:25:ed:62:3e:ab:71:b1:ed:d8:75:9c:c1:c0:f2:34:
94:97:93:18:39:49:8b:7b:d0:22:29:4b:36:59:3d:33:04:06:
73:86:9b:e3:84:cf:dc:25:e3:9f:31:ee:82:95:6a:41:3c:ee:
32:0a:58:af:4f:02:f8:71:d2:3a:e2:73:36:4c:82:6c:c7:6d:
3d:b5:b5:e7:33:35:6d:57:96:a1:9d:40:c0:35:7c:31:05:b4:
8d:f6:24:96:56:77:8d:ca:36:ce:b6:18:73:d8:ef:93:a7:d8:
27:8e:c6:69:15:51:32:ea:0a:0a:18:e7:52:b2:a6:92:46:17:
c7:10:0d:8b:c6:58:d6:04:06:7b:26:ed:a5:07:9c:6f:70:5d:
d1:57:d3:6b:fb:66:7e:d2:0e:63:4a:f5:ac:86:d4:c5:87:9c:
25:ce:3d:c8:e3:dd:0a:d3:3f:43:02:87:4b:09:0b:7a:69:c2:
77:d3:73:8f:00:f1:8a:17:5c:55:61:9b:53:16:5f:56:0c:41:
e9:b5:d2:6f:5e:8d:ff:19:35:cc:73:da:21:52:01:7c:a2:7f:
ec:70:57:73:51:1f:e7:c6:da:2c:68:f6:be:be:b4:d7:3b:07:
20:d3:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:47:52 2025 by rpki-client