Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
File: bqK-NzL279WcfeWrAwcqASxxte0.mft (raw, json)
Hash identifier: RdV/nQ08+hod9hP1ix6TFVBRFseARW/X3BsHPKmd5zI=
Subject key identifier: A6:6E:24:52:AA:17:EC:97:AF:FF:A0:80:97:87:3A:31:6D:05:4C:DA
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 01964EC7E5733A2A2B9AA5CCB2B1D170A223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
Manifest number: 1223
Signing time: Sat 19 Apr 2025 16:00:45 +0000
Manifest this update: Sat 19 Apr 2025 16:00:45 +0000
Manifest next update: Sun 20 Apr 2025 16:00:45 +0000
Files and hashes: 1: PWqnw0c_B4f5uiecMpdwpL-VvcE.roa (hash: U77gGzVbzz3/VE1ufiaUseYNuoW+zWwbp+s9nBJADUU=)
2: bqK-NzL279WcfeWrAwcqASxxte0.crl (hash: Fm41D4lJl7WYLmmmGmF3OfP7+d6rJEk8HoIF3+sTTqI=)
3: wQXUeRnOKpyt-UT9Y5wSBXvQMCY.roa (hash: bcR2MNuNZW8l1a/xl1JtyMuKzTNFRLkA134VnDPvPnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:e5:73:3a:2a:2b:9a:a5:cc:b2:b1:d1:70:a2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Apr 19 16:00:45 2025 GMT
Not After : Apr 20 16:00:45 2025 GMT
Subject: CN=a66e2452aa17ec97afffa08097873a316d054cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:ac:38:cb:0f:e2:17:b9:be:d9:62:47:c2:
eb:83:fd:fb:c6:6e:53:10:dc:b7:40:ad:34:c3:dd:
25:35:09:d0:c5:bd:f7:73:bc:e8:3a:3b:bf:ac:83:
3c:7c:54:14:01:de:ab:36:ab:8a:e1:45:be:a7:8d:
ac:46:1a:c1:89:c6:72:12:1c:ae:e7:ea:51:63:c0:
80:43:54:62:1e:e0:75:a5:bc:12:b9:80:42:48:e3:
89:86:80:6a:a5:fa:ae:df:6e:b3:98:79:0b:24:36:
73:90:f6:bd:9f:aa:a2:f6:ed:16:16:8a:b5:ee:b5:
2d:57:f2:3d:fc:67:0c:96:2d:1f:d5:7d:ff:d5:48:
0a:bb:fd:ff:a1:aa:4f:f2:33:f2:af:0a:30:b7:ba:
41:59:f2:61:bf:8d:c7:fb:c0:36:f6:80:43:1e:c4:
65:64:b5:50:d3:99:f3:78:9b:aa:0c:19:b2:e4:4e:
a5:d6:da:9c:b3:e8:45:a1:4d:77:b3:e6:4b:60:b6:
27:5b:8c:4c:b3:89:75:fc:e0:d0:99:6c:0f:5f:f4:
fc:59:78:fa:bb:8b:b3:46:6f:7c:0c:18:dc:2a:71:
5e:04:29:a5:12:f9:e3:1c:db:d0:36:4f:d7:d9:ba:
91:49:b4:cf:0c:a5:eb:fc:b5:fd:8b:68:88:50:b4:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:24:52:AA:17:EC:97:AF:FF:A0:80:97:87:3A:31:6D:05:4C:DA
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d9:14:e5:6e:b5:7a:1c:2b:22:ae:4a:04:7f:06:c0:81:30:
b7:70:63:13:71:03:da:c2:3e:e4:09:ad:1f:48:03:f1:00:7b:
12:ab:1c:10:db:93:1f:40:ea:45:5a:eb:b2:f3:d6:7c:c9:40:
6f:bf:07:b1:f6:f9:4f:ea:e4:41:02:04:8b:1c:08:68:13:bb:
b2:57:3c:b8:ad:57:1c:f6:18:9c:11:73:26:50:0a:c1:d8:c6:
47:84:78:4f:bb:c0:4f:2d:fa:f1:f4:a9:16:10:18:fd:5d:df:
5e:97:cc:5e:1f:cf:2e:10:7f:66:fc:da:07:27:6d:55:b8:09:
89:ac:f8:4b:9b:91:10:dc:16:4d:d3:ba:c7:72:84:66:0a:74:
ab:f9:4e:7b:3c:fb:0c:23:b3:65:ec:b3:8e:27:6b:61:0a:6e:
11:59:3a:21:53:85:9c:c2:a1:24:a9:c1:74:4e:b6:ca:2e:cb:
f1:f1:57:54:64:a2:09:75:30:e6:66:35:3c:65:fc:6c:77:b2:
94:b9:e6:cc:d4:c0:43:d2:58:7f:ee:a3:94:f9:09:1b:ee:15:
1f:6e:11:9d:71:b5:5f:95:40:81:db:2e:68:d9:04:3b:47:2e:
44:0b:14:01:e3:db:39:7a:ee:64:c1:db:40:a6:4c:f6:a5:3b:
e7:63:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:40 2025 by rpki-client