Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: 31GzUVhi7sGuNwdl89DEns2wh+xBKL/EloX9M22JY0w=
Subject key identifier: A1:48:86:5C:62:C1:50:75:60:7D:D9:01:EA:E6:CA:6B:07:58:CD:AC
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 01964EFEAB32139078E7BC9F170DEA1FCD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0C37
Signing time: Sat 19 Apr 2025 17:00:34 +0000
Manifest this update: Sat 19 Apr 2025 17:00:34 +0000
Manifest next update: Sun 20 Apr 2025 17:00:34 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: fN0R/vYplzaozWv/TmR0ngiskMxjcWrQ8CiWR53bLvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:ab:32:13:90:78:e7:bc:9f:17:0d:ea:1f:cd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Apr 19 17:00:34 2025 GMT
Not After : Apr 20 17:00:34 2025 GMT
Subject: CN=a148865c62c15075607dd901eae6ca6b0758cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:b0:d6:02:c5:70:7f:ed:33:fb:12:e0:a4:
fc:23:5f:f7:9c:91:d9:e9:27:d9:06:11:46:15:70:
44:d2:d2:7e:33:e1:8f:4b:26:4d:69:24:7f:b9:9d:
6d:94:31:4f:4b:f8:5f:a5:68:d8:74:8d:cf:01:c7:
27:de:b0:09:9a:a4:70:f4:c0:cc:12:d3:1a:4b:b8:
4b:01:96:09:b4:ee:05:fc:7d:84:34:fb:7c:b5:61:
13:81:7d:88:0c:43:89:f3:87:f7:a7:4d:6b:26:32:
b2:1c:d5:e7:9d:55:29:f6:12:86:ab:a4:e0:36:27:
da:cc:4a:3e:6f:70:39:b1:eb:10:07:44:eb:49:0d:
a7:35:66:01:97:72:09:ef:4e:eb:50:5a:f6:66:2f:
2e:a2:e5:90:61:c7:2b:e2:5d:c2:f9:a3:54:51:e1:
a9:16:d9:28:b0:da:5f:e6:9b:03:90:1c:69:13:53:
87:0b:ea:eb:16:f4:4b:84:f5:98:8c:f2:25:a0:d5:
7a:0c:bf:39:ca:7e:48:d5:c4:9d:e8:6c:26:71:0e:
66:8d:0e:ea:e9:df:77:e1:54:02:55:69:fc:31:f2:
c2:dc:cc:89:04:b4:d9:c5:d9:2b:ae:60:bc:9f:dc:
43:d9:8d:f1:8c:56:93:f5:05:fc:19:67:47:d9:58:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:48:86:5C:62:C1:50:75:60:7D:D9:01:EA:E6:CA:6B:07:58:CD:AC
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:66:dd:b6:73:a2:fd:60:72:95:aa:44:ee:16:ef:50:13:8a:
e9:3a:78:4b:73:a5:18:1f:bc:75:fb:05:0b:ed:41:c3:37:f0:
87:4d:84:70:23:09:12:8a:67:68:13:69:ef:5e:fe:23:ba:df:
80:c1:fb:0a:c4:56:06:0b:89:f1:d7:55:d7:b9:68:65:0c:3b:
8f:d9:d6:30:ef:b0:1c:5e:7e:2c:30:ba:84:cf:ee:9b:a5:b4:
90:a5:ce:c1:22:8d:3f:bb:f5:93:27:4b:00:8d:18:ee:7e:73:
d5:a3:23:e0:14:93:9f:17:5c:95:86:48:d8:a5:ef:66:f6:ee:
d8:3d:9d:86:0e:8b:ef:be:22:65:53:6e:8f:f5:3d:1c:4a:71:
bf:b5:e0:13:c8:54:8d:5d:82:d9:b7:04:61:ce:c1:4c:c4:b3:
b0:1c:06:13:96:14:3c:0e:d5:74:03:69:b8:3c:7e:35:7a:5e:
eb:a5:a8:5a:d4:d0:85:e8:ce:ab:2f:f2:ee:97:43:60:26:07:
33:cb:14:2d:64:03:25:b3:37:e5:73:c7:b7:47:6b:4b:d4:08:
1e:dc:8e:fb:ae:e0:d7:97:39:13:75:cd:86:52:da:94:bb:78:
ff:0a:a5:aa:f7:5f:6b:23:69:81:7a:77:d1:dc:1d:3e:b0:8b:
12:68:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:21 2025 by rpki-client