Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: 31mhiKZC+Bj+bQxfW8Hd3qfmG+eesaxoEKBz3vv61sk=
Subject key identifier: B1:41:C2:52:FE:B9:BA:24:BB:0F:C6:A0:7A:3D:6D:F2:94:24:3D:B9
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 01960F7B26DBD265ED4C2CCD02EDDB57D601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 09:00:51 +0000
Manifest this update: Mon 07 Apr 2025 09:00:51 +0000
Manifest next update: Tue 08 Apr 2025 09:00:51 +0000
Files and hashes: 1: B88mtx2_fceD3WkM3Ksi4WlT4VA.roa (hash: hwcvppQs1/EhDdVb55MlIRMH3/Ucbiv1u1DToUqStmU=)
2: GGvj9NChg8eWX1toJcMcvoB6snw.roa (hash: G6byTPu5CqswnTX3x2G6lOagD0K04nQHqQ2npvg0QJA=)
3: MhjkAgDs0QfDcSw47owKsNYasoc.roa (hash: /uniHG73LlrpdpREk+1GNcIkLbBqDOzY7tim2Uz2A1Q=)
4: b0d-qfJdm7KXvPqj7MUgyB5kK74.roa (hash: fvVm8gj2uIsJVJxMD6tVJ79pU7XevSxKYETzYwMIORU=)
5: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: PrtiOwKURQgTy8vre4dDfTomjeEyNsQMjjFboEXNs3E=)
6: iZS0QA1yC9FLBck4FKpodWGaBn8.roa (hash: iTrLDy7AWbv/5JNUdB4E4LLm4ULatVdoRSUk6RJfSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:7b:26:db:d2:65:ed:4c:2c:cd:02:ed:db:57:d6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Apr 7 09:00:51 2025 GMT
Not After : Apr 8 09:00:51 2025 GMT
Subject: CN=b141c252feb9ba24bb0fc6a07a3d6df294243db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:de:dd:bc:09:0b:72:f1:f3:65:41:de:34:
a7:2a:ba:6a:32:10:d8:8a:5c:46:03:76:d0:2e:ad:
c2:dc:a4:9f:1a:54:3c:a0:53:e4:bc:88:e9:75:49:
e4:aa:b7:e2:d0:5f:1b:cb:86:e3:ed:7d:a0:30:4c:
fb:48:e8:1b:da:6f:59:43:eb:c0:6e:d6:ab:ef:02:
f4:ab:e8:c9:5b:7a:e0:f0:9b:31:37:32:51:59:3a:
e6:c8:f3:a9:3f:b1:dd:ee:2d:74:c1:b3:82:84:0e:
2a:f1:e5:68:42:e8:6d:a8:e5:d5:7b:36:0e:21:8c:
c5:34:23:43:83:d7:c6:61:89:6c:7c:f4:70:8e:e4:
74:bc:5b:88:74:e4:61:43:30:ca:03:6b:f8:ce:6d:
bc:96:04:0e:f8:e4:9a:76:94:05:e2:3a:07:41:ca:
dd:b4:5a:14:ab:8a:99:99:9b:b8:52:48:b6:7b:ac:
fe:96:5d:00:5e:ea:78:92:95:1c:7e:ff:d5:1e:b6:
e1:11:9f:cb:8a:90:ae:eb:e1:3b:df:11:6e:e8:f5:
ab:e4:ea:b7:93:4e:2a:83:41:c9:32:72:ec:52:38:
4c:4e:3c:7e:c0:72:5f:a1:2a:72:4f:a9:ff:c4:45:
54:26:f4:c2:f6:8d:eb:76:72:6b:b8:a9:84:e1:03:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:41:C2:52:FE:B9:BA:24:BB:0F:C6:A0:7A:3D:6D:F2:94:24:3D:B9
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d4:b7:0b:ad:61:2f:19:de:1c:49:fd:7f:7c:b9:43:fe:c0:
e2:69:2a:cc:b7:76:c4:45:c8:ff:ef:8d:12:25:e1:98:e5:73:
38:e2:cf:22:71:49:f0:92:0b:5c:c0:75:f3:67:ed:32:d2:71:
32:33:c8:ab:53:e9:63:88:ac:e4:e6:38:a3:ac:49:08:60:ab:
d6:1c:c0:87:e6:fd:20:4e:c7:14:3a:83:40:c1:ee:29:ba:21:
99:47:aa:35:e0:d8:eb:f2:a1:84:8d:d0:bb:08:46:95:7f:a9:
41:e7:9b:c1:27:03:25:3b:da:14:ef:09:6f:cf:1d:d1:23:a7:
2b:c9:b9:ac:dc:74:10:f2:64:f4:48:02:9e:e6:f9:ec:0a:01:
28:58:30:d6:b7:36:dd:15:f5:2e:55:fb:ae:b9:4c:3e:88:aa:
40:2c:cc:ac:46:bc:a6:6e:1a:52:96:c4:93:10:52:32:7c:12:
66:56:30:e3:d3:69:e0:01:99:89:c0:59:ca:b9:e8:d2:5a:94:
89:df:06:86:f3:15:17:ae:28:70:fe:04:1d:70:a4:9e:b1:dd:
57:4c:a9:6c:c3:c8:0c:fd:be:93:a9:85:79:1f:a2:cc:b5:32:
a9:83:01:18:2f:3a:f5:a7:4a:d3:8f:fa:c5:ad:bd:d3:43:89:
a1:db:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:14 2025 by rpki-client