Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: JaSoDsRLAWnMAwbZO7cmyPrvWeaEafF/RVVTg+SFFgY=
Subject key identifier: 0E:CD:00:CA:E6:5A:76:10:09:BF:A9:9D:FA:A5:6A:2B:AC:95:92:A9
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0196586FACF04B162DA5B91C21A12F2E1482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 13:00:35 +0000
Manifest this update: Mon 21 Apr 2025 13:00:35 +0000
Manifest next update: Tue 22 Apr 2025 13:00:35 +0000
Files and hashes: 1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
2: ZNc2R38IFzIz7kBedhBa4EVwaEk.roa (hash: EpA69Eq6Q+KV+gO/Q6uVQrzX/PppOsS4DI+GMDk1VRA=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: g6a0SAabhxE4XGlY9o/omVTra1zGy0SFSmQy6Uo7alI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:ac:f0:4b:16:2d:a5:b9:1c:21:a1:2f:2e:14:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Apr 21 13:00:35 2025 GMT
Not After : Apr 22 13:00:35 2025 GMT
Subject: CN=0ecd00cae65a761009bfa99dfaa56a2bac9592a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:09:0f:19:98:56:1e:6d:39:3d:92:07:14:
48:59:0e:46:5f:a6:8d:5e:48:c2:16:80:e4:38:f1:
9a:34:68:a4:cc:f5:6e:d6:aa:b8:99:da:6d:24:85:
df:da:64:a7:60:c1:2f:39:58:cb:08:bc:6d:32:12:
70:8b:4e:f1:13:0c:ea:fe:55:80:af:1c:2d:f1:55:
d3:27:42:0d:a2:5c:e3:d1:9b:02:7f:d7:b0:13:96:
d0:a4:c5:f6:e2:6e:12:1b:34:48:7c:3d:96:0e:75:
da:f7:6c:4d:db:d7:18:13:95:b2:ca:de:49:25:55:
e2:26:c0:de:6a:2a:7b:9b:ad:75:53:0c:35:b4:87:
fc:87:5a:ad:40:28:d2:65:61:02:b7:60:20:9c:b6:
55:44:4b:bc:ec:1d:a4:13:7d:62:03:a7:c2:a0:21:
14:e9:46:27:aa:95:8e:41:34:00:a0:13:54:b5:41:
8a:3b:d6:d2:3f:de:79:e7:e0:bb:30:14:1f:7d:f6:
94:b4:a1:58:37:05:26:03:4b:93:aa:cc:f1:85:ba:
de:c2:2b:37:e4:b2:6a:74:85:37:1b:9c:d0:a2:fa:
3e:8b:bc:cf:3a:b6:a9:9f:95:e4:89:76:29:bb:03:
7c:1d:84:16:ab:c4:cf:84:97:fc:5d:79:e1:f5:57:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:00:CA:E6:5A:76:10:09:BF:A9:9D:FA:A5:6A:2B:AC:95:92:A9
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6d:92:57:95:26:34:a9:9b:2e:f8:c8:95:bc:44:62:e9:a8:
a5:59:24:8b:b2:2d:7e:44:16:1e:53:3b:44:dd:82:36:8c:1d:
7b:cf:de:6d:22:db:b6:ca:cb:49:8d:73:de:cd:74:03:3f:07:
4a:91:48:a2:80:40:8c:8f:ff:34:00:77:88:73:19:bb:8f:73:
f5:8d:f3:01:2a:24:a5:b7:3b:96:42:13:7d:66:21:2b:cd:d1:
21:20:4a:df:1b:e7:66:fa:78:08:bd:53:b2:f0:ea:81:b3:a1:
21:c2:86:ff:42:9c:4e:bf:2d:37:7f:dc:e5:9d:e9:53:36:96:
cb:56:3c:f3:0a:f8:df:97:bb:62:5b:d3:98:59:ad:20:8e:15:
8e:59:40:d6:e3:3f:b2:d9:0d:47:58:9f:a9:0e:51:b5:18:e0:
53:b8:f6:a0:eb:f2:51:a7:e5:60:62:57:5f:57:9f:ca:5f:49:
7a:ff:39:2a:34:aa:06:3d:50:a2:8b:35:89:eb:14:74:e3:ac:
88:a8:df:61:36:6a:93:f4:14:7c:7a:20:b2:35:5c:e0:8c:af:
83:f9:76:ea:d8:2c:bf:b7:f6:24:b1:c7:5e:32:d3:58:7a:26:
ca:e8:04:84:5e:c0:4d:3a:de:c6:14:a3:76:ae:cc:b5:26:d4:
f8:0a:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:25:36 2025 by rpki-client