Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: aIbBR2vzLaT5cof4LfTQBhUw6GUGgFnPOxH2HNHtwuA=
Subject key identifier: 88:AE:A2:BF:F4:F9:B6:D3:7F:30:8F:C2:57:3E:8A:FF:D0:00:E3:3C
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 01958F981793D0FDF6DEE80D9D34D721769A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 0EA8
Signing time: Thu 13 Mar 2025 13:01:04 +0000
Manifest this update: Thu 13 Mar 2025 13:01:04 +0000
Manifest next update: Fri 14 Mar 2025 13:01:04 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: xqDYeaJ9hukepyEAGTVHnO0LNgbiMKdd47S1S0Ttyoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:17:93:d0:fd:f6:de:e8:0d:9d:34:d7:21:76:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Mar 13 13:01:04 2025 GMT
Not After : Mar 14 13:01:04 2025 GMT
Subject: CN=88aea2bff4f9b6d37f308fc2573e8affd000e33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:d2:27:97:27:55:8c:57:91:0f:43:c7:21:
55:9a:04:5a:06:26:b0:df:c8:69:3c:f1:f6:e1:89:
7e:fd:37:3a:4d:dd:a8:88:c0:53:53:b7:43:30:37:
41:8a:8e:a8:46:5b:3e:d8:90:f7:cb:40:24:85:9f:
02:78:26:84:f6:6f:37:8c:25:1a:4d:27:58:92:53:
aa:0f:d3:4c:ef:4a:3b:89:6b:26:06:ab:32:3a:13:
17:24:9d:5f:d0:84:df:c3:6a:81:4c:98:2f:75:43:
a0:fe:20:f8:34:cc:df:17:7b:c8:29:ee:ca:65:2c:
b3:d0:06:b2:74:a8:ed:b6:9a:f7:79:f9:07:61:a5:
b8:60:ad:42:e7:ad:78:42:83:1e:80:9c:41:5b:8d:
38:bc:d6:99:9e:e4:c6:cc:e4:fd:b5:5b:a8:f8:4b:
8d:06:20:83:90:97:4d:ab:08:f3:33:d5:0c:4a:0b:
0b:eb:16:98:67:ff:e1:e4:57:ef:8b:7d:36:59:81:
0f:c7:6e:a2:12:5d:f7:c2:64:aa:1b:50:dd:15:2b:
4e:26:86:f2:2d:7a:7f:82:74:73:cf:fd:28:c0:1c:
43:e5:46:78:ee:ec:e6:65:77:f9:fe:0d:d9:24:64:
14:9d:d5:16:4a:d7:f7:68:c2:c2:72:06:19:41:94:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AE:A2:BF:F4:F9:B6:D3:7F:30:8F:C2:57:3E:8A:FF:D0:00:E3:3C
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:99:10:04:92:a9:98:37:47:18:19:4e:92:fa:23:f0:00:3d:
47:28:15:5a:2b:bb:94:57:20:91:b2:1b:13:12:01:36:55:e5:
1b:89:f3:d3:56:02:eb:88:c6:ed:e6:ce:8f:27:94:ca:b9:9d:
e8:cc:7c:a4:7b:6e:78:c9:1a:d7:6f:c1:26:b2:68:7c:e2:04:
67:7d:44:9e:1e:20:b9:27:32:15:16:b1:20:d2:b4:35:41:6f:
3f:fe:3c:6e:db:fa:37:be:92:63:66:15:ea:3f:88:46:52:b4:
f4:31:be:53:d4:1f:8d:9e:1b:75:9f:2f:b8:41:8e:e9:a6:14:
0b:20:f5:cb:8b:a9:1a:ed:43:3a:90:c5:76:10:95:d0:84:da:
12:e8:5c:15:23:f1:46:23:79:28:c0:98:94:53:87:f7:6a:e7:
be:ad:2b:78:0a:38:09:05:74:d4:33:42:5a:56:89:d2:3d:5e:
b0:29:49:ea:3c:73:c5:d2:dd:64:99:cc:27:7f:82:f9:c2:02:
ab:21:43:a8:10:8d:6c:0f:d2:41:c2:ce:e0:d2:df:8d:97:56:
e7:4f:b5:88:d7:b2:11:5d:b4:55:74:d6:dc:d0:a8:68:e9:26:
5c:9f:82:ec:a7:cd:29:41:ff:0d:6d:dd:09:68:91:3e:aa:3b:
ea:d4:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:12 2025 by rpki-client