Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: CdyH+KzBsuLXbNkx++l5rH+Di5qKl3fqmJwnk1S0+Lg=
Subject key identifier: 89:61:AE:15:CB:10:77:4E:8D:FF:E2:4C:C2:52:E0:45:46:31:D0:80
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01963E0B1594124F8FFA6B0DCCAF30098680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0CF0
Signing time: Wed 16 Apr 2025 10:00:35 +0000
Manifest this update: Wed 16 Apr 2025 10:00:35 +0000
Manifest next update: Thu 17 Apr 2025 10:00:35 +0000
Files and hashes: 1: DxUn4bmVojvn8sm2tByEo7v-9lY.roa (hash: LqNhwNLFgBfOiDjw34sJzCVs1lSfUwZfgMTqZtNLRrQ=)
2: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: ztb08+d8v/28Yeo/auGWCn8eo6dFrbF/rvrhkqaIOpA=)
5: mNAF2VYNOm40TevDLixep8OByyQ.roa (hash: IS1EBlMWFeP4mcyqN/4gcodeTTb5ux4e/60FBp3gFB0=)
6: rwZ6jpTAm_ZRHWKYYj7M2LFDbMg.roa (hash: P1FZuevse97L9jR3eornH1YCc2srAhdguPvW85KpUfQ=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:15:94:12:4f:8f:fa:6b:0d:cc:af:30:09:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Apr 16 10:00:35 2025 GMT
Not After : Apr 17 10:00:35 2025 GMT
Subject: CN=8961ae15cb10774e8dffe24cc252e0454631d080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:de:b6:82:b9:b8:de:b5:8f:0c:a6:44:80:
f2:79:50:5b:fd:af:5d:b9:23:64:e5:76:84:16:d5:
ce:25:94:04:57:29:ba:e9:a2:8b:f8:0a:35:96:88:
ff:4a:a8:0f:92:48:31:25:e7:84:27:06:80:91:35:
cf:01:ee:61:41:77:66:2b:66:97:c2:fb:63:8a:3f:
c9:ef:5f:4b:e5:ac:65:05:47:07:6e:ad:cf:86:42:
e8:a9:5a:1c:e2:44:bb:73:ec:62:22:e6:5e:d0:bb:
99:28:b0:f3:77:76:ee:fc:9a:17:48:23:56:da:3d:
0a:b1:ec:93:79:ab:3f:49:09:b4:11:99:17:97:e6:
7d:fe:23:ff:c2:53:ff:a1:72:19:0e:fc:bd:cf:c1:
04:e7:ca:5a:a1:bf:e9:b3:83:9a:04:37:dc:b7:bb:
5b:a5:81:46:90:79:05:d3:a6:78:df:a1:96:78:a1:
95:34:14:89:1e:00:d9:df:fc:f3:1b:37:39:cb:bf:
41:d5:46:30:59:f2:94:4c:01:60:ef:75:f9:df:da:
a1:7e:99:d2:77:3d:fb:54:f8:37:9c:70:18:68:17:
85:ed:fb:6c:17:8b:20:27:30:2a:7d:02:c9:4d:46:
a7:1b:cf:4e:f9:2f:19:15:bc:ee:05:8c:bc:a3:f7:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:AE:15:CB:10:77:4E:8D:FF:E2:4C:C2:52:E0:45:46:31:D0:80
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e7:60:ad:ea:fe:97:20:b3:8d:8f:28:26:4e:86:a7:d6:0f:
dc:bd:33:90:2b:5f:c5:f9:d1:2d:23:de:46:9b:3a:89:3b:81:
24:dd:a5:39:d0:c9:86:c9:32:d7:8c:97:c4:9e:f1:e0:bf:79:
66:37:8f:65:da:0d:7c:6e:88:b0:28:10:2b:93:48:01:c2:eb:
38:54:46:58:2a:9a:02:98:6a:7a:d3:ad:1e:2f:8b:1e:67:af:
c2:c4:9e:5b:c7:7e:b7:10:3e:cb:d6:83:ae:fc:0c:0d:03:08:
54:2f:ad:55:5d:bc:b0:a2:ab:70:c4:4e:e7:5e:45:ba:20:34:
e8:32:f7:da:27:7d:13:4a:68:14:cb:31:16:71:9a:4a:0b:fb:
52:0d:f6:7c:4c:70:ed:04:f1:fc:d9:ef:5f:3a:81:0a:33:27:
31:01:b8:f9:c6:df:32:a1:55:bc:05:7d:2b:c8:fb:73:28:1b:
f7:da:58:7f:80:3f:86:eb:d4:f0:ea:7c:6d:63:fc:ec:c8:65:
b0:d7:c0:70:b5:68:bb:c6:29:14:c0:be:05:c3:76:d1:85:51:
75:be:3c:6e:d6:8d:41:71:95:4d:be:bc:55:9a:82:db:00:90:
6d:73:52:86:0e:14:68:c3:2d:cd:7f:f3:9a:60:e0:e0:70:8a:
f8:f9:83:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 18:04:51 2025 by rpki-client