Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: 8e83C9gnBV+NU1akpQX0/3LVs6w/71gm80Jp4Wd6MRc=
Subject key identifier: 88:B1:A0:75:62:1F:C6:EB:9A:EE:6A:67:7F:F7:D3:8A:68:04:AA:13
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019656EEC48B00FC5932CC3C9129B32F456F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 06:00:10 +0000
Manifest this update: Mon 21 Apr 2025 06:00:10 +0000
Manifest next update: Tue 22 Apr 2025 06:00:10 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: EeXddYn1A/DsreaZiHnHpsNi6TMb3IUlUmBFQ+yaH2o=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:c4:8b:00:fc:59:32:cc:3c:91:29:b3:2f:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Apr 21 06:00:10 2025 GMT
Not After : Apr 22 06:00:10 2025 GMT
Subject: CN=88b1a075621fc6eb9aee6a677ff7d38a6804aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:35:be:83:25:ea:43:f1:c2:4f:fd:3a:10:
21:08:72:76:67:aa:71:6d:82:2b:d4:65:83:45:e1:
62:b7:80:d4:2c:b6:06:a0:64:ab:48:8c:9e:10:b8:
b8:aa:a9:e2:19:81:69:2f:69:a2:3c:91:59:f6:4c:
eb:73:f6:5b:80:e9:c1:73:9a:55:9d:cb:48:36:1a:
9a:48:c5:3d:c6:0d:f5:07:f8:4f:1f:c6:4b:45:fc:
a1:4c:d6:3c:45:f9:2f:2e:7f:a8:ad:90:37:85:26:
bf:01:f2:79:97:08:8a:d5:45:f1:0c:c2:d2:dd:28:
c0:87:23:d8:16:21:ea:a6:d6:6a:09:eb:2b:48:90:
b3:05:6c:d9:2a:b6:26:4f:9c:15:d0:c0:fa:4a:9e:
43:c9:8c:6d:40:56:1d:98:be:70:c7:e1:61:2f:fa:
97:eb:cf:99:e8:65:8e:11:87:e8:7a:0b:21:46:72:
62:0d:0d:65:d6:2b:4e:31:bc:f3:d7:ae:9e:18:2b:
62:fb:24:23:6b:7e:ee:74:32:06:86:5d:5d:7c:54:
1b:d3:eb:7a:05:47:b9:96:26:29:31:0d:2b:53:d8:
62:52:5a:a7:78:f0:52:dd:a2:ec:a9:68:40:2b:ba:
e8:9c:45:f3:1e:f2:e9:cb:d5:f7:9f:df:cf:ca:9f:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:A0:75:62:1F:C6:EB:9A:EE:6A:67:7F:F7:D3:8A:68:04:AA:13
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:9a:2a:50:23:9f:33:d8:25:b2:fb:30:f1:68:a0:f9:6c:
30:b7:27:68:68:3b:ac:94:6b:57:65:be:f7:70:08:7f:50:13:
7c:95:f9:af:80:cb:2e:40:dc:e0:4a:0f:b4:28:2c:a5:e0:f2:
49:31:46:71:47:1a:27:94:33:2a:23:f1:12:44:16:52:25:67:
22:ad:79:8b:e7:20:95:54:11:3b:35:7a:86:d0:3c:40:e9:5e:
26:03:07:79:c2:82:93:9b:3d:d3:4f:2d:0a:2b:c4:ab:4b:5e:
3b:33:fd:5d:09:dc:eb:65:29:9e:86:4f:e4:35:c6:a3:85:7c:
f5:b8:9f:31:d3:27:42:ed:a2:7b:3f:dd:87:a4:56:dd:79:7c:
6c:93:60:3a:ba:f2:18:44:6c:76:10:23:9e:7b:8a:58:ef:7b:
72:da:20:74:a4:14:30:26:97:c6:59:12:d7:78:22:26:c4:9a:
e8:48:67:43:69:5b:4a:e4:bd:ac:8f:dc:e8:78:5e:90:ab:20:
a0:ee:5a:0a:ab:67:28:90:1b:42:b1:55:c1:11:6a:1a:31:9e:
2d:55:38:f9:40:d2:60:70:53:38:c0:58:7c:86:5b:32:d3:54:
5c:0b:e5:02:72:1a:2f:0e:eb:31:aa:db:52:9c:1f:ab:ab:14:
65:a6:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:10 2025 by rpki-client