Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: H0UUu4tr1AOe3rYsVm9bLD+EM7FGvbL5d/fWRYwM5o4=
Subject key identifier: D5:82:B3:13:97:1F:5F:69:96:50:1B:EE:1D:4B:40:96:79:24:60:20
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 0196564A19DB9E0AC6467835FEA78E0B82A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 06F5
Signing time: Mon 21 Apr 2025 03:00:18 +0000
Manifest this update: Mon 21 Apr 2025 03:00:18 +0000
Manifest next update: Tue 22 Apr 2025 03:00:18 +0000
Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: 7L2JwBO1nD5PO39vizauk5cNiHDjgwl1oGpcR50vHJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:19:db:9e:0a:c6:46:78:35:fe:a7:8e:0b:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Apr 21 03:00:18 2025 GMT
Not After : Apr 22 03:00:18 2025 GMT
Subject: CN=d582b313971f5f6996501bee1d4b409679246020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:80:d5:a4:80:5c:97:fa:9a:92:8c:56:c7:
c9:25:77:79:50:1b:fc:ad:85:54:66:97:76:e5:25:
8b:13:26:2b:5b:ed:f1:6e:9c:2e:7b:74:8b:4b:50:
9d:08:03:d9:02:d0:24:8e:8c:22:81:b7:ab:47:51:
0a:79:bc:d1:9c:25:2c:37:12:bc:58:0f:ac:18:dc:
91:e7:6a:17:0a:a3:09:59:18:e2:86:04:c2:ef:26:
1d:68:cd:10:d0:69:df:c6:b8:db:f9:0a:46:7c:31:
2b:00:e0:d7:b9:0e:a7:c9:9e:69:eb:4b:f5:25:8e:
87:4c:9a:0f:74:5c:e8:d0:e2:cc:82:6a:04:93:a2:
bc:1b:03:a9:aa:af:28:de:0c:53:fb:5e:f3:2a:41:
d1:ca:eb:ce:d5:69:99:dd:0d:bf:cf:cb:57:54:ef:
b1:f7:0a:31:f2:66:ae:e0:1e:bd:f8:be:f3:33:84:
c0:07:be:a9:35:a1:4d:8a:ad:3c:1c:9c:20:6f:ec:
96:df:0e:e1:eb:5a:2f:cf:5f:29:05:db:5d:8b:b1:
f0:f3:a3:ce:3a:24:63:29:e7:59:d7:1f:1d:28:09:
ca:d3:26:2d:00:0c:8a:1b:b6:f7:1a:70:23:51:95:
83:34:04:1b:6f:a4:2d:78:b8:e5:03:15:17:cb:79:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:82:B3:13:97:1F:5F:69:96:50:1B:EE:1D:4B:40:96:79:24:60:20
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:7a:72:b8:ac:3c:c4:da:fa:e5:f2:4c:18:aa:0c:1b:59:b9:
5c:4c:6f:f5:86:18:62:31:b0:77:f7:4f:2a:29:95:53:2b:97:
e2:f1:3e:7c:42:87:2d:14:e9:e2:7d:d0:76:3a:31:d7:61:5a:
05:21:93:7c:c7:09:da:aa:8c:8f:a5:ae:35:27:8b:62:45:4c:
86:82:38:20:1a:69:a5:fa:99:d8:ce:ee:23:17:83:d9:55:cf:
b8:e3:0d:c5:66:2c:11:9b:12:24:18:d8:b9:05:bc:93:18:5c:
fc:40:95:29:77:94:24:2c:dc:73:5b:2b:7c:6a:5e:de:d7:5b:
53:db:55:58:74:84:79:61:cd:54:97:ca:6a:d1:e6:ea:53:9a:
8d:61:53:be:20:37:13:df:82:4d:55:3c:c6:e3:fc:95:64:90:
b0:cb:13:50:7b:4e:27:67:58:40:1a:df:b0:63:ee:98:b7:36:
f8:f4:f2:0f:71:5e:fe:b6:bb:87:1e:08:78:40:c0:09:9e:36:
87:aa:e7:b2:b1:fb:d5:35:5d:01:5c:95:74:47:8b:f0:88:4d:
e3:44:82:73:62:68:ba:1b:89:d3:75:0e:54:fc:62:00:1b:5d:
47:0d:d5:93:a7:34:46:7a:6e:ab:1f:fa:8d:93:66:00:9c:a7:
0b:1d:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:02:31 2025 by rpki-client