Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: 6s+kD+QRrziuMH6yX2wqOZuJZgkbml4T4pwMWMDmBoM=
Subject key identifier: A9:0D:2E:67:7A:FB:CE:ED:24:18:BA:4B:C2:00:33:35:38:A1:33:14
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 01964D471B7A8AAF45A947943CAF2720B8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 09:00:27 +0000
Manifest this update: Sat 19 Apr 2025 09:00:27 +0000
Manifest next update: Sun 20 Apr 2025 09:00:27 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: 0emVzzZpILcmyMY6k94zdhxfPQXzSpaMcy/lDzOXoX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:1b:7a:8a:af:45:a9:47:94:3c:af:27:20:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Apr 19 09:00:27 2025 GMT
Not After : Apr 20 09:00:27 2025 GMT
Subject: CN=a90d2e677afbceed2418ba4bc200333538a13314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:0a:f1:f0:4a:df:ae:10:7a:b6:33:5f:f7:
e5:27:bc:08:90:a5:74:06:79:37:e7:67:44:94:16:
a7:ee:58:f5:3e:24:b3:4d:5d:a5:7e:53:ae:bf:24:
af:8d:fd:6d:1f:90:4f:8f:05:d9:e7:30:b0:7a:3d:
30:fa:60:6b:32:ca:e6:78:53:b0:bd:8d:29:6e:27:
f4:13:20:2d:b3:03:68:1c:e8:2e:4e:54:2d:eb:8e:
f0:89:63:15:9d:a8:a6:ba:41:83:73:09:a1:89:22:
66:e0:d4:b2:be:d2:37:0d:70:22:57:b1:3a:68:89:
72:3d:dc:e1:aa:2a:4e:dd:95:d8:bf:9e:2a:48:fe:
93:43:33:98:0e:52:16:4a:37:88:07:13:cc:36:fa:
d2:09:e7:bf:d5:63:bd:0f:f4:4c:87:9a:71:4e:21:
1e:48:00:32:8b:bc:2b:77:ae:31:23:b2:84:6b:b7:
c5:d6:5b:90:13:9c:8d:9e:d3:c6:d6:00:19:bd:e9:
53:84:3d:19:39:67:3a:64:fa:70:22:d0:3e:c6:d1:
e0:45:5c:02:c8:fc:fb:bc:02:a6:93:a0:8e:73:c0:
2d:26:5c:03:6d:e8:48:1f:8c:bd:26:b5:80:0a:01:
68:fd:79:cb:cd:ac:e5:3b:eb:b9:69:cd:12:ca:19:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:2E:67:7A:FB:CE:ED:24:18:BA:4B:C2:00:33:35:38:A1:33:14
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:eb:3a:5f:2e:f7:24:09:67:c5:25:5c:7c:77:3d:62:b0:b2:
aa:d9:a7:b7:d0:81:c4:c4:6e:d1:31:d6:fb:df:b3:f0:13:24:
42:d3:56:82:35:1b:a2:01:7c:6a:78:7d:45:e1:fd:4e:96:01:
7e:a2:ea:76:51:22:f6:61:db:52:b7:ff:42:1f:a7:be:8b:bb:
4c:51:8e:ab:77:63:f3:e5:10:ab:77:e3:b1:94:7d:69:a2:f0:
fd:3e:42:62:8e:15:c5:e8:10:16:e6:82:c3:15:7a:88:73:86:
38:e5:99:06:a6:ac:47:87:7c:72:0d:ed:1c:12:37:2f:07:7e:
f6:84:81:c4:86:03:88:f7:ec:0c:e3:10:82:7f:b3:fc:ad:e2:
6c:cb:f3:9a:34:37:f7:e9:bb:57:4f:39:65:b3:4e:66:5a:16:
99:17:7b:23:ef:4c:64:08:33:ad:05:66:b9:1f:38:cd:6a:0a:
61:27:80:6e:b8:e5:c0:29:ff:6c:2f:f1:b9:a4:68:71:b6:17:
39:1f:f6:57:d5:f4:b7:b2:ab:7b:22:4e:21:20:89:41:c3:62:
5a:b3:6d:6e:a0:53:48:56:5a:ee:60:b5:97:2e:b0:1e:8e:bb:
14:68:6b:5d:4d:5f:60:58:17:4d:43:d5:cb:ae:44:b9:88:9d:
20:1b:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:56 2025 by rpki-client