Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier: BWj1JX7hf/roFrbVJfHOIK4417n8esSqbrC6oM0uT1g=
Subject key identifier: 36:E6:2F:4A:74:65:6E:EB:48:3E:C3:65:46:2C:73:27:EA:B4:00:46
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 0195903D592F36C20E0C1961073448EF25DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 16:01:34 +0000
Manifest this update: Thu 13 Mar 2025 16:01:34 +0000
Manifest next update: Fri 14 Mar 2025 16:01:34 +0000
Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: KEGE9NHk4iJ1drZ7XQVwiSX6isoaHZHjosGdYQ8LoM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:59:2f:36:c2:0e:0c:19:61:07:34:48:ef:25:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Mar 13 16:01:34 2025 GMT
Not After : Mar 14 16:01:34 2025 GMT
Subject: CN=36e62f4a74656eeb483ec365462c7327eab40046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:01:df:a5:27:fe:09:72:9f:4a:7a:ab:d6:76:
63:4d:1b:19:ee:5d:bd:d2:3b:d9:fb:64:97:78:99:
30:a1:0b:ed:b4:b0:9d:fe:6f:cd:f5:cd:7c:6e:8a:
b3:26:b9:ad:48:6a:0c:09:52:62:a6:ec:82:20:5f:
b2:6a:24:0a:f1:db:e7:61:b5:a0:1c:a8:1f:49:08:
09:f9:04:79:99:a7:85:3c:77:42:48:a8:8b:3a:83:
a0:2c:f7:18:d0:e2:a0:d5:43:ee:dc:42:b7:6d:d9:
20:94:25:f7:f7:1d:29:38:dc:e4:ae:38:74:92:92:
d8:7a:85:ea:b1:23:3e:c8:8a:99:1d:a1:27:6d:93:
bf:78:e7:d9:a0:c0:97:c1:7c:9e:d7:82:4b:c2:8a:
d0:b9:95:e5:8b:fa:01:70:d7:b3:ce:f2:e2:d1:80:
e4:f9:a3:b4:d0:3e:79:39:18:7a:55:5e:c5:56:3a:
1b:b4:f3:09:5c:ad:aa:db:3a:46:3b:33:93:8d:dd:
42:a4:d5:59:ac:68:24:e1:69:6b:f8:97:99:25:48:
65:e4:1f:65:51:d4:0f:b2:14:e6:a4:db:79:aa:71:
ed:d6:42:d0:39:15:94:88:07:3b:d6:70:91:ff:d5:
f1:19:f2:43:ef:e1:cf:34:a4:75:b4:c6:9e:f5:a2:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:2F:4A:74:65:6E:EB:48:3E:C3:65:46:2C:73:27:EA:B4:00:46
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:eb:a9:81:e6:cd:8c:85:e3:69:7d:04:57:f5:ca:81:62:a1:
33:8a:a6:fd:c2:21:88:37:4e:53:cb:4a:c2:63:7b:5d:06:3e:
17:6f:f8:06:29:ea:29:70:bf:43:56:29:f9:61:55:3d:0b:22:
13:93:fc:3e:8a:ed:ce:1e:3d:ca:92:92:e4:37:6f:52:41:b8:
a2:b9:b6:d6:bd:8c:6e:df:62:59:20:0f:63:47:87:58:92:ef:
cc:b2:85:fb:62:cc:63:ec:59:20:c5:3b:5f:73:51:42:4d:0a:
0c:72:51:b9:2a:d4:7f:3e:b0:1b:7e:dc:6a:bc:48:7f:ee:78:
be:00:0f:c0:f4:9e:00:3b:3b:e2:e1:c6:32:72:f4:30:d3:d0:
fb:95:29:1c:f5:dd:24:5a:a1:98:b6:80:e1:de:2f:9d:81:56:
af:eb:d5:73:37:08:fd:1a:e0:e0:f0:b0:d4:bf:8e:da:d6:18:
2a:f9:5c:ce:ff:af:7f:87:e0:96:a3:87:4d:7b:49:61:9f:57:
da:90:95:1c:e3:5b:46:9f:af:39:07:1a:09:8f:3c:21:17:98:
08:e7:c8:b7:15:50:02:9c:84:68:d2:17:6b:01:79:d3:f3:16:
f8:b7:62:85:e3:da:8a:d7:93:f7:f6:9d:a0:d9:fb:ed:9c:8c:
c6:dd:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:37 2025 by rpki-client