Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: 7+q5GoelCh3+5dntypWL4cvultku9omJIbpp/kHH7HE=
Subject key identifier: E8:3A:84:57:2D:00:F5:EF:40:AA:A7:43:0C:06:AD:29:5B:F9:B6:60
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 0196285FF8D449894EEDE2A1E7D236F875C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 05:01:40 +0000
Manifest this update: Sat 12 Apr 2025 05:01:40 +0000
Manifest next update: Sun 13 Apr 2025 05:01:40 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: SbuuBwmv3uCUh8IBkHZeQBj/hRKHFgMP1bYq5wE5SCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:28:5f:f8:d4:49:89:4e:ed:e2:a1:e7:d2:36:f8:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Apr 12 05:01:40 2025 GMT
Not After : Apr 13 05:01:40 2025 GMT
Subject: CN=e83a84572d00f5ef40aaa7430c06ad295bf9b660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:23:08:47:98:11:6e:94:d7:fb:68:17:80:b1:
f5:ea:51:26:9c:5a:e6:53:b2:08:67:85:e3:75:50:
da:ca:c2:3f:2c:ae:d3:b1:8f:f7:e2:c9:c3:d9:c5:
e1:70:0a:f0:97:52:c8:fc:d6:92:01:05:0d:7d:cf:
cd:12:80:75:49:da:9f:42:bf:2e:e7:a0:44:51:25:
db:fa:b6:36:7b:fe:3d:60:be:07:5b:53:34:1f:77:
84:c0:ee:ae:a7:43:0c:67:3f:8a:a9:12:74:2b:6f:
f2:d9:03:06:21:75:9d:63:be:7c:62:a6:5e:7e:50:
4e:54:5e:ae:06:01:41:02:1c:46:5b:ed:55:dd:2b:
4c:e7:02:d8:52:62:eb:d8:6a:9e:c5:ea:72:45:08:
f5:00:84:0c:8c:51:0c:a3:74:d4:24:b5:6f:0a:08:
98:29:bb:82:d3:52:65:69:65:0f:e4:98:37:00:50:
22:a9:ec:6a:ec:11:da:0e:91:ef:47:c9:6d:8f:f6:
ab:d5:50:39:7a:19:86:81:03:72:94:20:3d:0d:0c:
17:e9:0c:0a:89:61:7a:a1:74:ff:13:4b:5a:25:c9:
1c:77:d8:49:4d:83:8b:c5:ac:54:6b:cc:d2:63:bd:
a5:67:74:d5:b5:1b:b3:4a:7d:bf:02:16:0a:a7:49:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:84:57:2D:00:F5:EF:40:AA:A7:43:0C:06:AD:29:5B:F9:B6:60
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b5:48:92:fe:94:ac:b4:42:e3:b8:94:3d:97:b5:42:d1:56:
76:f9:92:18:76:ff:36:7a:22:f0:9f:d6:6f:20:46:32:d0:53:
1d:ae:20:96:3a:f1:0c:da:45:93:e0:13:d3:d1:3c:e9:fe:04:
95:5d:81:53:16:ae:9a:d7:a4:be:82:f1:f6:9b:26:58:2f:44:
fa:e7:f0:5c:20:c1:e3:71:cb:e9:82:40:7c:ce:55:18:90:38:
b9:f7:a3:ec:78:b9:18:30:f1:9f:cf:08:23:dd:0e:20:af:19:
e1:f9:c7:5e:e1:e5:50:53:7b:78:d0:4d:52:64:f2:18:64:da:
4d:3b:3f:74:78:6f:c6:e1:12:57:dd:08:6a:fc:e3:c9:4d:91:
f0:70:5b:b7:5a:fc:0f:d8:f9:30:fa:c6:41:3c:72:f2:cd:a8:
e7:39:4e:5e:b4:68:e9:a9:41:05:d7:d5:b8:c3:62:1a:c5:b8:
a8:cf:6a:e3:86:63:9a:90:42:84:b9:02:b7:92:62:74:fe:96:
1b:90:6e:ee:78:cb:6f:df:18:44:fe:1c:d3:41:5c:02:cc:c1:
2e:51:de:6d:e2:72:20:c6:16:5c:31:bc:00:5b:13:a6:80:3c:
28:00:71:7a:5c:34:ce:b2:72:2e:e7:69:5f:8c:3c:02:3c:35:
e9:55:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:08 2025 by rpki-client