Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: Y7kdzCXw60LzrFnPUHkLzfhQ1lynesiMUheS5f/mXzs=
Subject key identifier: C2:E9:A8:BA:AA:FE:0E:3A:BF:61:6B:E5:B5:D8:FE:E8:B9:AA:F9:C5
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01958B847F048F56011A960F6013172AD55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1181
Signing time: Wed 12 Mar 2025 18:01:10 +0000
Manifest this update: Wed 12 Mar 2025 18:01:10 +0000
Manifest next update: Thu 13 Mar 2025 18:01:10 +0000
Files and hashes: 1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: r+HeFukeObekbYYF8IIemfuCka5Cb0a76ekHM41TJbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:7f:04:8f:56:01:1a:96:0f:60:13:17:2a:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Mar 12 18:01:10 2025 GMT
Not After : Mar 13 18:01:10 2025 GMT
Subject: CN=c2e9a8baaafe0e3abf616be5b5d8fee8b9aaf9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:fa:25:ee:6b:0b:43:8d:c7:76:53:b3:73:
a5:c6:ea:b7:b3:36:8a:df:61:3a:6c:96:1f:32:4e:
3b:76:be:9f:33:3b:00:40:68:47:81:ff:2f:27:9d:
34:e6:eb:36:6f:c3:40:41:22:45:24:10:5e:df:77:
03:7e:77:2c:e4:0b:6d:fd:0f:2b:4f:e2:fa:de:20:
44:56:62:a8:df:c1:6e:53:40:af:5f:67:5c:3e:05:
20:a9:76:22:f3:48:af:bb:3c:49:28:3a:4b:b6:26:
69:88:6f:71:0f:e1:11:14:20:96:50:f1:96:15:da:
19:24:00:b5:42:9d:3d:7c:33:5a:ac:de:bf:75:15:
ee:87:20:da:54:88:e4:60:53:35:bc:9b:eb:e4:f5:
61:44:ab:a2:9f:ef:40:67:ff:ea:9c:37:55:83:9b:
0b:58:e9:47:62:24:20:d6:21:55:c6:c5:88:69:d2:
bc:c5:8f:83:b6:59:3a:0a:6b:59:e5:61:6f:d2:42:
d4:70:ba:78:33:60:e6:26:bf:9c:8f:2e:e2:2c:1c:
c6:7a:fc:9c:63:90:d7:7a:53:c6:27:6c:a0:0d:ea:
4e:77:1f:f4:f9:9d:62:ba:0b:44:20:30:04:77:d3:
0e:3a:fd:bd:f2:fa:1b:b8:f8:b8:e2:a6:f3:e4:48:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:A8:BA:AA:FE:0E:3A:BF:61:6B:E5:B5:D8:FE:E8:B9:AA:F9:C5
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:37:19:18:c3:d1:fd:c0:67:2b:3d:1d:98:af:ef:4e:b9:46:
45:ed:49:16:bb:4c:8e:16:94:51:37:a7:32:e9:d1:07:dd:a7:
17:4a:ee:bb:0f:e2:65:aa:1e:b0:f4:89:0f:97:d1:1d:6b:08:
da:b0:03:da:60:cc:44:36:07:90:4a:87:80:18:24:ad:e2:a9:
06:46:26:75:64:a5:da:19:46:87:4f:57:a1:4b:c5:01:da:e4:
48:97:58:db:72:23:34:8d:41:e3:7d:67:24:80:ab:9b:26:62:
c2:59:b5:27:86:18:53:94:21:c0:0b:c8:23:dd:6e:b7:2b:7b:
96:37:ab:23:8e:b4:cb:02:59:b2:88:d5:21:5e:87:8f:11:9a:
15:41:bb:55:40:93:66:46:b9:48:69:e7:53:23:8d:95:55:5f:
e4:99:dc:d3:ea:12:1e:e5:e6:84:0a:37:e2:19:66:cc:54:02:
8d:f6:60:ca:0d:a7:4c:6c:ae:26:59:2f:b8:e4:a3:7d:c9:12:
48:88:11:75:ec:00:7e:6a:12:85:66:6a:4c:0b:6e:17:2c:94:
21:51:c2:5d:b1:47:d3:5d:29:df:c1:75:0f:64:0a:85:a1:df:
a5:c1:19:7b:02:e1:fb:13:8f:ee:0f:31:fe:7c:f6:75:22:ce:
e6:88:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:53 2025 by rpki-client