Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: 6Ogz5p7PdNZwMYPl+/Lnt7SHNXGpEleI3orOZE7EVkc=
Subject key identifier: 74:F9:39:2B:5F:B5:8C:E8:E2:6A:A9:B8:57:29:32:03:6B:B4:25:F6
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 01964A463C00E19468CAE77B760D54D3F036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 0581
Signing time: Fri 18 Apr 2025 19:00:38 +0000
Manifest this update: Fri 18 Apr 2025 19:00:38 +0000
Manifest next update: Sat 19 Apr 2025 19:00:38 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: /K/u5L2PYmuIkeGyIVCClyahIFo8L1OL+9zSkmybBxE=)
2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:3c:00:e1:94:68:ca:e7:7b:76:0d:54:d3:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Apr 18 19:00:38 2025 GMT
Not After : Apr 19 19:00:38 2025 GMT
Subject: CN=74f9392b5fb58ce8e26aa9b8572932036bb425f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:32:97:49:e8:30:f0:c4:3f:0d:c5:66:21:
f5:e2:97:7c:00:f8:19:33:a0:1f:7a:27:03:d3:c6:
58:bc:b1:13:0a:34:8e:c9:76:72:43:65:4c:7e:87:
0e:c0:70:3d:9d:29:82:bc:87:3e:ed:91:24:c7:9c:
68:ae:93:d6:99:a1:ad:01:ca:6e:29:12:0d:ea:98:
a6:cf:79:1d:17:89:29:ea:e9:c6:e3:19:3c:9d:fd:
ec:52:cd:6c:b4:ab:8e:96:80:53:8d:68:06:64:d0:
c0:70:b2:dd:e8:bf:a6:36:79:c7:e8:ab:49:16:cf:
81:cc:2e:00:fd:55:38:38:6e:41:d1:08:32:22:c7:
35:5f:8f:af:0c:4d:88:43:7c:9f:6a:3a:c2:11:fe:
01:f4:cb:38:66:51:4c:f8:c5:a7:86:fa:0d:9c:f7:
37:a9:5b:e7:71:28:d4:db:11:78:96:3e:1b:3f:84:
d5:14:98:01:6d:d4:59:e3:23:8e:1c:f6:ae:18:fa:
fc:63:1d:73:16:ae:de:1a:06:4e:ed:89:2a:b9:90:
14:82:98:36:f6:86:bf:dd:60:ec:00:e2:ef:e7:28:
99:65:81:d6:bb:bf:d1:60:92:76:6c:f5:ab:36:77:
81:35:f4:ff:68:11:22:6c:66:00:a7:fe:61:85:c6:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:39:2B:5F:B5:8C:E8:E2:6A:A9:B8:57:29:32:03:6B:B4:25:F6
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d1:67:53:f8:5e:06:74:4e:b2:1c:09:ec:0e:6e:b0:c7:b6:
ed:c7:6c:ca:57:b2:9c:f8:b8:65:e7:cc:a9:3b:8e:d8:6b:76:
97:6b:0d:2c:29:1c:1c:68:54:7f:94:07:23:2b:45:d1:25:0b:
1d:82:db:0e:0f:bb:4b:85:99:e8:6d:e8:20:fb:46:bd:58:aa:
29:01:9e:0b:17:b7:a7:8a:ca:39:ec:ec:da:e1:09:fe:40:0b:
0c:fd:ab:ed:31:1c:4d:5c:d5:32:9c:6e:cc:ac:95:95:bf:d9:
cb:1c:eb:97:50:b9:86:76:63:5b:17:85:3f:7a:de:78:74:fb:
09:2a:1b:64:b7:7c:3d:b8:80:9c:b1:ef:75:e7:f2:08:b9:4b:
68:d8:ec:2a:ee:7a:51:0f:73:6c:46:e0:b6:f2:e2:a0:fd:e7:
5a:2d:37:6a:c5:60:1b:43:d5:ae:1e:42:7f:3f:4b:87:78:dc:
a1:2a:28:e6:11:c4:96:e0:70:9d:fb:a9:32:52:5f:4a:81:39:
3a:e9:c7:55:6f:bb:2b:11:6f:f6:9a:d3:c9:52:c9:6b:56:af:
cf:53:17:17:a3:5f:5b:a0:f3:53:aa:7f:31:ac:dd:c3:69:4c:
67:16:f9:16:6e:1c:39:88:eb:9e:49:46:88:d4:6e:88:41:11:
bb:37:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:36 2025 by rpki-client