Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: 4edbAkuGhvhatiUAIxYsoSrjYT9q/f1kUBYdE//q8Gs=
Subject key identifier: B9:3F:E8:08:AE:2A:3E:2F:3F:03:59:CC:90:A0:1F:CA:13:34:42:63
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019656817690A3B9C4A14DD4A4CA7F39808E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 0F0F
Signing time: Mon 21 Apr 2025 04:00:47 +0000
Manifest this update: Mon 21 Apr 2025 04:00:47 +0000
Manifest next update: Tue 22 Apr 2025 04:00:47 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: 0rlMIri/s+WxQOSr0mX02WwPyCHAyOB0aDlBYq5dD6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:76:90:a3:b9:c4:a1:4d:d4:a4:ca:7f:39:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Apr 21 04:00:47 2025 GMT
Not After : Apr 22 04:00:47 2025 GMT
Subject: CN=b93fe808ae2a3e2f3f0359cc90a01fca13344263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f8:b3:f6:39:0b:66:da:50:a5:03:30:13:43:
f5:12:d0:5c:fe:0d:14:cf:c4:0e:71:9d:4b:1e:b0:
1c:b8:79:05:f1:fb:6d:12:54:85:6a:4c:73:94:ef:
32:18:99:2a:fd:b1:53:62:eb:5e:1a:fe:12:c0:38:
b2:00:b6:dc:24:78:e3:a6:95:ae:27:5b:80:af:68:
8b:4f:35:09:f9:e5:5f:d7:28:4c:18:e3:ce:0d:e2:
4b:5a:ef:cf:46:0e:fa:05:f1:75:3a:ca:b6:30:86:
a4:bc:bc:c2:31:8c:50:32:9b:43:1d:8c:ad:32:98:
f1:39:f1:d8:27:0b:1e:bd:48:7e:79:83:b5:14:f9:
a3:d6:00:84:51:0d:98:ad:4e:28:f6:70:87:f7:52:
5e:df:fd:e5:6c:f8:10:ab:40:59:9a:0c:2e:9f:85:
9f:8b:1c:b9:29:4b:49:3f:35:03:5b:2b:76:00:0e:
d2:6a:c0:fb:d0:9a:6a:4c:4e:e7:62:b3:b5:ab:a7:
40:8c:fb:9d:e3:94:8d:d4:49:59:5e:f2:d3:f8:c1:
23:df:f3:5b:d0:29:d2:a5:c7:e3:15:13:e3:87:37:
ae:4b:9d:c0:ed:a3:96:aa:ff:67:dc:02:2d:1d:15:
e6:ae:85:d5:8c:f5:5b:e9:5d:a7:09:a0:aa:98:e6:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:E8:08:AE:2A:3E:2F:3F:03:59:CC:90:A0:1F:CA:13:34:42:63
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:87:a3:98:e0:06:29:49:6c:af:a3:8c:60:4f:66:7b:4f:c6:
76:de:3f:9b:fb:a7:c4:f9:ff:39:17:dc:8b:68:63:55:b6:a9:
75:e0:ac:e3:e8:52:a2:60:88:16:44:4a:4f:ff:8e:90:e9:e2:
05:1d:60:f0:8b:4d:6d:ae:68:02:a3:c7:c1:03:c0:94:f3:8c:
13:b9:64:0f:60:f2:55:db:26:24:5e:88:ac:ec:9a:20:f0:63:
35:6f:01:3f:b1:04:0f:3a:4d:80:82:75:54:f2:04:eb:dc:d8:
b0:76:7d:6d:81:89:79:05:7e:47:ff:ea:6c:95:af:92:70:c6:
d3:b8:bc:f2:b1:d9:5d:bb:01:56:c8:19:2f:35:e1:d0:92:a5:
3c:e4:50:1b:ce:a8:a9:0f:b6:7e:84:79:dc:14:4b:b6:bb:0a:
96:c0:c3:9e:96:7a:1b:ca:88:64:9b:35:d1:7a:e6:c9:a4:53:
2b:bb:9f:07:de:af:f9:ab:89:78:db:92:cb:aa:9b:cf:f7:34:
83:d0:9c:55:14:ca:70:2c:fd:92:d5:a6:20:b1:38:c1:dc:be:
32:9d:7c:3b:cb:a4:da:c6:49:87:62:74:d1:d5:4a:49:da:df:
d5:be:9b:1d:61:28:b3:43:5a:8b:e1:df:44:52:4b:7a:25:9f:
62:78:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:14 2025 by rpki-client