Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File: B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier: hCOwARWAnP+joFza18t7bB8Cft9noA93NXN0cw/SRHo=
Subject key identifier: BA:DA:49:2C:87:4B:15:5E:22:A1:F5:87:B2:A2:1E:3C:48:A8:F7:FD
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 0196108E279DD1132E3528B90B7DC1DCB28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number: 0C64
Signing time: Mon 07 Apr 2025 14:01:13 +0000
Manifest this update: Mon 07 Apr 2025 14:01:13 +0000
Manifest next update: Tue 08 Apr 2025 14:01:13 +0000
Files and hashes: 1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: oEawYw8kfu7yDDvr1KSFGjrLG2AOMprv3AQDb5SqCis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8e:27:9d:d1:13:2e:35:28:b9:0b:7d:c1:dc:b2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Apr 7 14:01:13 2025 GMT
Not After : Apr 8 14:01:13 2025 GMT
Subject: CN=bada492c874b155e22a1f587b2a21e3c48a8f7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:49:54:e3:c5:6a:45:0a:a7:58:ee:6f:a4:
a4:37:85:22:28:fe:ec:2f:d9:60:ed:3c:b1:4f:b0:
ba:46:c0:7e:e0:9f:aa:e6:c7:a6:48:f7:77:db:f6:
74:96:67:e2:e3:86:cf:22:dc:a4:c3:6e:50:82:21:
05:ba:05:84:f4:bc:20:80:02:38:36:97:09:54:5b:
e1:58:a3:b2:92:d7:05:fc:f8:48:a9:29:64:ec:ab:
5e:18:41:26:74:04:b4:c4:67:4b:dd:5b:c5:48:30:
ff:e2:a0:a7:4c:79:85:59:96:e9:88:c4:4a:9c:39:
c5:08:3e:9c:99:a2:ea:05:fa:b1:99:2c:93:0c:88:
ca:62:bf:44:ae:95:13:33:e6:73:b3:41:56:9e:4d:
83:1e:fb:37:99:56:bc:38:fd:0c:be:9c:5f:10:2c:
37:94:64:52:5f:b8:f9:91:e3:c4:45:4a:fe:a2:32:
be:af:99:8e:b6:98:8b:8c:20:ba:19:ae:ea:ba:26:
2f:d0:e7:a4:fd:25:87:86:2a:ba:09:67:1f:36:94:
73:30:fa:6a:d8:55:c7:74:3d:d9:b5:d2:d3:4d:4d:
1b:dd:42:71:76:40:06:cf:cc:dd:d5:88:a9:bd:8c:
d3:25:85:a4:a5:d0:bb:b0:87:54:cc:24:c9:eb:f1:
eb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:49:2C:87:4B:15:5E:22:A1:F5:87:B2:A2:1E:3C:48:A8:F7:FD
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a2:67:25:14:43:76:7f:49:15:19:0f:5a:09:8d:b5:6b:df:
8e:9b:a1:1b:c0:08:5b:0e:84:f8:f5:50:b2:a4:73:d1:de:02:
96:cf:1b:45:9a:f7:0d:ae:9d:0f:07:f7:33:92:a2:6b:f4:75:
f9:1f:15:4b:ee:e1:c2:b3:38:1e:a4:50:25:66:79:ef:49:e7:
87:e9:f9:63:8a:e0:3d:7e:72:b7:87:21:a2:5f:3b:7f:3b:ae:
5b:51:07:67:df:4b:26:e1:cc:b3:96:42:f1:cd:41:7a:ea:da:
c4:0c:7e:9c:42:ab:a3:a1:c9:d6:25:3b:17:d1:2f:d6:f9:54:
6a:74:56:37:3e:94:83:f6:db:b8:b0:88:c4:57:26:30:ce:8e:
4e:70:51:cd:de:32:b7:4d:56:6b:64:1d:85:c4:dc:74:4b:34:
38:34:5f:1b:a3:10:da:db:74:44:4f:f3:d1:37:31:65:6c:4f:
d8:9d:62:1e:14:0b:ff:fb:f9:e1:41:25:b2:e9:5f:a4:9e:35:
bc:a4:99:df:ee:cc:de:06:8c:11:2e:57:24:8f:fb:44:49:f1:
45:1a:61:ec:b2:13:61:8c:f0:bc:66:18:99:df:bc:a1:d8:e3:
08:82:a3:25:85:f5:0c:ff:b3:14:7c:c1:2f:76:4a:d1:ad:77:
5c:e3:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:39 2025 by rpki-client