Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: Niki4qz66FjOblgVqVmmVttwef00EJBl3GIAPkR7nfI=
Subject key identifier: BF:4B:F9:57:4C:86:7D:3E:96:75:AF:41:5D:3E:89:5B:97:4E:87:58
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019650480BB1B6C6FCD08BF3D1C42604BCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0A54
Signing time: Sat 19 Apr 2025 23:00:20 +0000
Manifest this update: Sat 19 Apr 2025 23:00:20 +0000
Manifest next update: Sun 20 Apr 2025 23:00:20 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: Eonvj0ck2ovN9AmhI2Abik1BHVisTipJn530Ixw53+4=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:0b:b1:b6:c6:fc:d0:8b:f3:d1:c4:26:04:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Apr 19 23:00:20 2025 GMT
Not After : Apr 20 23:00:20 2025 GMT
Subject: CN=bf4bf9574c867d3e9675af415d3e895b974e8758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:16:81:2b:30:7c:4d:b8:d5:34:0e:67:6a:
3a:e4:1c:c5:67:de:52:ab:34:c9:1e:05:4c:d3:0a:
df:1c:75:29:a5:28:7f:95:17:de:bd:23:62:f0:ec:
82:59:86:ee:b3:21:16:f3:b0:da:71:cf:01:4b:52:
f0:dd:a1:4d:5a:93:1f:c5:dd:88:61:71:0f:d3:73:
a8:83:7b:06:5f:f9:80:ae:3a:ae:93:cc:34:30:56:
78:a7:42:6c:8a:2d:0d:47:65:f4:f8:8c:f9:a6:ec:
a0:b9:69:c3:65:21:78:dd:77:c5:7a:46:da:ed:f0:
34:09:a4:4e:04:d2:70:92:c8:6d:d1:ad:bd:f8:5e:
a7:0d:5e:3b:17:48:da:d4:b0:e2:36:1a:b3:ab:4a:
2e:f3:4d:7a:03:f3:fa:96:ae:99:df:65:6e:91:60:
b3:15:a0:0d:d4:e7:50:75:b6:78:90:c0:77:70:21:
38:1f:56:dc:1c:d0:38:5a:81:0d:20:a2:34:e7:2d:
6f:61:c5:09:fc:da:26:8f:48:b3:dd:56:3c:d2:5b:
98:95:42:cf:e1:fc:f1:8d:3a:ce:86:62:c5:14:d1:
76:6d:19:f5:57:c9:5a:97:9d:21:a4:29:ac:43:c3:
ea:b0:b5:60:36:33:bc:ab:0f:da:06:58:d5:c3:51:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4B:F9:57:4C:86:7D:3E:96:75:AF:41:5D:3E:89:5B:97:4E:87:58
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7d:81:32:e3:eb:e3:78:f1:c5:0b:c2:03:6c:2c:2a:97:63:
ee:16:81:43:ac:c3:7c:cd:9e:1d:09:aa:85:f3:50:b0:ca:5d:
fa:5e:b1:36:25:15:f0:cc:12:ee:cd:63:15:6c:6a:53:84:7b:
24:5e:f5:42:aa:17:e1:71:95:4d:6d:eb:97:51:b2:25:fd:78:
bc:30:9f:52:c1:cf:84:f7:d9:5c:c9:f4:57:ff:b8:64:1c:e8:
51:cb:74:74:60:db:d0:a7:85:3d:a8:57:e0:3c:70:ce:f7:43:
05:3d:23:c3:d2:79:fc:93:2f:f9:d5:9d:9d:2d:8c:63:b6:e3:
d8:5e:97:c8:4b:f1:05:58:8b:80:e6:cc:8d:47:6a:30:b6:ed:
fe:e4:e2:25:8a:0b:0e:be:21:20:1d:f6:bb:58:d0:07:3c:31:
6f:2a:73:1e:c5:8f:86:39:e0:8e:38:62:ad:43:ad:1b:64:47:
ac:d6:f8:1c:b5:ad:a7:6a:5e:99:47:45:6e:f8:68:af:75:4d:
a0:c1:cd:19:f3:e7:a7:7d:bc:bb:2c:57:4c:4a:16:28:48:d2:
97:d2:9d:a9:e3:51:f6:4f:b4:81:3b:cf:81:01:b6:17:83:3f:
7d:89:67:56:a7:c2:a1:ae:b0:14:ca:87:ca:b2:b7:56:62:9d:
dc:78:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:29:41 2025 by rpki-client