Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: sH4pUPKNNbV+jHlRuXB+ByN98P/KqPbSYn7EPScSYp4=
Subject key identifier: CE:24:42:C6:C9:1F:3C:A8:BB:F2:1C:4D:C1:1F:C2:BD:69:E6:37:A2
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 019653EE4EE4A787DA04AC977D7280778C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 12DC
Signing time: Sun 20 Apr 2025 16:00:48 +0000
Manifest this update: Sun 20 Apr 2025 16:00:48 +0000
Manifest next update: Mon 21 Apr 2025 16:00:48 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: B8eXRrfKEcL2x2ieLPvWY28fQpteh4EoQw6eSdu++ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:4e:e4:a7:87:da:04:ac:97:7d:72:80:77:8c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Apr 20 16:00:48 2025 GMT
Not After : Apr 21 16:00:48 2025 GMT
Subject: CN=ce2442c6c91f3ca8bbf21c4dc11fc2bd69e637a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:36:c7:60:cf:7d:4b:95:98:69:07:42:02:
42:a6:09:d2:fd:bb:25:41:23:9a:93:35:f0:1e:c7:
26:d3:16:b2:2c:1a:5b:28:3f:6e:4e:0e:fd:a0:f4:
48:5e:d7:6f:d7:d9:ab:1b:79:fd:4e:b2:fc:4f:87:
85:08:ee:e0:77:3c:ce:8d:07:2d:94:c8:cf:e4:db:
df:60:39:45:ef:63:5e:08:9e:6e:09:39:2b:d1:e8:
9d:60:34:22:e0:2d:38:05:db:40:f5:4d:82:79:b2:
6e:b5:95:ea:93:7b:d7:9c:1a:47:18:46:86:49:99:
a9:4f:40:ce:9f:16:33:60:a8:3f:bf:37:a1:e8:17:
1b:4f:5a:be:5d:6c:29:c3:72:76:36:83:fc:dc:1a:
c9:98:81:ba:44:ad:2b:91:8b:56:b8:0b:93:0b:d3:
b1:5b:a2:80:db:56:e8:c6:a3:c1:b2:2f:dc:8d:9d:
4c:93:27:f3:84:18:e4:d7:4a:93:87:59:16:cd:31:
80:b0:13:d8:62:f2:77:82:e3:1c:f3:9d:c7:f4:cf:
d5:86:54:d4:76:84:89:95:3c:7f:b9:4f:e0:ef:d1:
87:29:4e:a3:37:2f:db:7e:94:7b:e4:5c:67:38:c0:
fc:50:95:20:fa:75:8d:3c:f9:cd:49:44:88:25:53:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:42:C6:C9:1F:3C:A8:BB:F2:1C:4D:C1:1F:C2:BD:69:E6:37:A2
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:21:24:99:ff:29:73:64:53:43:57:fd:99:95:37:c5:a7:f8:
18:ce:75:9d:2c:ac:3b:66:48:06:11:78:f9:81:79:de:2b:e4:
cf:cf:b3:96:ca:4f:99:ce:fc:fa:03:35:a3:fb:1a:3c:42:6b:
30:d8:a3:6c:34:2a:69:da:88:9c:a7:07:d7:e8:9a:86:61:76:
c9:e8:23:f3:4e:55:41:33:4a:94:20:2c:2c:d8:a3:75:fc:88:
5a:d9:c1:73:09:ea:96:e0:e5:70:83:9e:aa:05:c9:b3:2b:37:
31:39:34:ea:63:6a:21:90:60:4a:bc:90:64:2e:d2:7c:d7:ee:
47:49:79:48:a8:c8:0f:da:37:c1:29:54:8b:8e:00:01:26:1c:
d8:54:e9:c7:c7:0b:0f:3d:ee:d3:f1:e2:2b:cb:bc:d9:72:66:
ae:ee:0d:a3:fe:e6:33:a1:d3:d4:5a:1e:6c:93:c7:85:dc:ef:
e0:48:25:5a:e3:e1:ba:c7:ed:1e:49:53:fd:a1:5b:b3:31:5f:
4b:d6:83:ad:ae:40:b7:d4:d3:f4:61:48:0e:13:be:2e:44:fd:
62:ad:a4:26:8e:31:9a:ef:2c:94:83:ac:c0:54:27:50:3b:78:
70:f1:a8:55:68:0d:83:03:4c:8a:5b:45:2a:e3:9c:b1:ce:4d:
d9:61:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:27 2025 by rpki-client