Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: gpmhqo9ZP7uoOmurI8tvbfO5UC+ko4YHEXdKKF+MCy4=
Subject key identifier: 89:47:05:A3:F3:49:E8:BB:EA:CF:88:BB:D8:4D:61:14:F0:EB:A8:73
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 0196067883B72B328CC63F19EB28624D6E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 13AE
Signing time: Sat 05 Apr 2025 15:01:23 +0000
Manifest this update: Sat 05 Apr 2025 15:01:23 +0000
Manifest next update: Sun 06 Apr 2025 15:01:23 +0000
Files and hashes: 1: V8R9NuBsBMtjM8dngpbvo3MJx5s.roa (hash: kncxVZkCgNT2UYYst35neieskR5Qm/mNu8V3+IA6Ku8=)
2: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 8SAN2J0VqfMOjc+lowuLCVaiUzS+TKz0wMZK+8STcQ0=)
3: yd8_f-atyxFNKtcv_cFVTfpnZt4.roa (hash: pN1o2J3yJeBV6MHLs3BSzPMoqupOmN0yj1atUVgcuyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:78:83:b7:2b:32:8c:c6:3f:19:eb:28:62:4d:6e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Apr 5 15:01:23 2025 GMT
Not After : Apr 6 15:01:23 2025 GMT
Subject: CN=894705a3f349e8bbeacf88bbd84d6114f0eba873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:91:ee:c3:fe:a8:84:79:2c:ec:ff:05:d1:
f4:08:c7:22:17:51:26:02:29:28:47:33:79:49:9a:
de:26:6f:89:bb:5a:bd:e7:42:4a:8b:34:e3:14:57:
1c:3d:17:4a:d8:46:a1:23:4e:59:bd:ff:2c:9d:0c:
15:df:c1:f1:73:7a:c2:29:a5:9c:86:77:86:ae:50:
41:e1:f7:81:cc:fb:9d:97:04:c9:73:5c:98:bd:52:
db:67:79:64:61:86:0c:f6:d9:82:87:1a:58:e8:01:
34:7f:90:ad:eb:44:f5:e2:a8:6a:e5:93:3f:be:85:
aa:7e:14:c0:b2:9a:99:3b:45:c4:66:22:77:45:f8:
73:ae:09:18:d0:f5:ae:06:de:ca:9e:12:37:8a:fc:
6b:f4:15:3b:2e:15:b7:7b:1d:de:89:21:8d:fd:79:
b1:fc:b2:96:30:71:dc:c2:c6:88:6b:b1:a8:eb:e6:
51:88:6b:5b:10:0f:21:50:5e:87:ca:c4:66:15:7a:
46:fd:a2:63:af:9b:b2:93:f2:b0:66:07:81:46:ac:
d2:bd:3b:c1:11:a2:86:e4:7e:73:f3:b2:bd:21:67:
22:aa:e4:28:70:77:fc:65:27:1c:4e:29:3e:8e:47:
58:bb:18:e9:5f:1b:ed:de:d1:8d:85:02:3c:21:1c:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:05:A3:F3:49:E8:BB:EA:CF:88:BB:D8:4D:61:14:F0:EB:A8:73
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:a2:ab:96:55:05:aa:76:44:7e:8e:40:e0:a3:46:20:03:
f8:88:48:43:73:bf:a1:f2:3f:1e:5c:9f:99:aa:2c:50:9f:a0:
45:6a:6f:de:72:6d:3c:6f:77:65:c8:ba:d2:b4:ab:5e:56:39:
60:36:e4:d8:57:86:98:a9:63:58:2c:20:bd:74:2f:99:76:36:
27:9c:72:9e:0d:5f:08:2d:b3:e3:4c:25:d9:47:f1:64:6c:6c:
67:17:f8:7f:1a:a4:a1:14:aa:ab:ae:d0:07:3f:21:d7:7b:53:
66:b9:5c:6b:20:ef:f5:08:2b:22:55:f8:50:f4:66:c4:77:53:
f0:fa:a7:89:4a:14:39:21:a7:7d:93:aa:b0:64:66:34:2c:4b:
b7:64:b5:c6:f3:bd:16:c7:38:d8:a1:6c:1f:85:5f:6d:83:76:
b1:9b:47:01:d5:e8:55:8b:f9:c2:ee:07:23:48:f6:30:0e:e4:
e1:e5:c6:96:5c:15:e5:77:39:54:b1:d9:ac:fe:aa:4b:9d:3d:
c3:43:1e:ba:eb:83:39:59:47:9e:6f:38:67:de:52:98:bb:95:
21:40:a3:79:c8:55:30:73:b7:f7:e8:71:2a:24:bf:7b:b1:7c:
4d:03:fe:bb:23:a4:3f:27:98:a9:9c:96:16:66:e2:de:0c:a6:
84:31:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:48 2025 by rpki-client