Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: h7Uiu1AcvbODyPm5Kp7Iy8J+WQgnWfyzdq/pT08AWn0=
Subject key identifier: 72:5E:4B:8A:B3:26:9E:20:A1:31:43:EB:0F:D5:AB:1E:94:26:36:11
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01965E3A92618596E22B340247EF7EEBF6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0BE7
Signing time: Tue 22 Apr 2025 16:00:18 +0000
Manifest this update: Tue 22 Apr 2025 16:00:18 +0000
Manifest next update: Wed 23 Apr 2025 16:00:18 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: 0kWe2GPX4+so8u6INzQTFzcrNDPrkLoEj7V7FQs80TU=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:92:61:85:96:e2:2b:34:02:47:ef:7e:eb:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Apr 22 16:00:18 2025 GMT
Not After : Apr 23 16:00:18 2025 GMT
Subject: CN=725e4b8ab3269e20a13143eb0fd5ab1e94263611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:3f:7f:78:ef:49:4f:a8:77:9a:c7:58:6c:
0b:69:e6:3b:32:39:3f:8a:69:49:0e:db:14:58:2d:
b1:34:23:ff:c3:03:18:3b:c7:c4:ed:56:c8:31:67:
26:4c:82:9d:30:56:c5:7d:2b:bd:03:2f:a0:ef:54:
e7:87:d8:10:50:49:a1:a7:4d:18:08:c4:d2:23:fc:
90:e0:81:d9:06:97:cd:23:d6:51:f4:05:23:c8:94:
84:3d:c7:50:92:e1:5e:1d:da:c6:14:89:1f:54:59:
73:36:9f:76:30:d7:d0:58:d7:96:e1:d6:71:29:30:
d2:81:6f:d2:16:af:fd:e4:7a:88:3b:24:e6:df:cf:
53:c7:e0:3b:50:1e:bb:05:e4:42:9b:2a:12:75:fd:
37:6c:91:af:e8:2b:36:d7:5c:53:ac:39:a6:1b:8e:
d2:0e:b0:7b:58:c5:65:da:62:bd:34:5d:60:2c:ae:
b3:e1:84:f7:5b:49:26:ac:6a:da:6b:67:0e:30:95:
4d:4f:cb:ea:50:f3:be:5c:9c:f8:e0:a0:6f:0b:a7:
71:80:0a:ec:0b:65:e8:d0:b3:c3:6c:c8:50:0e:6b:
5b:c4:4f:a1:67:a8:1a:10:7a:03:54:ec:a6:3d:71:
c3:cd:51:aa:d7:57:2c:54:84:fc:69:c4:dc:0f:60:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:4B:8A:B3:26:9E:20:A1:31:43:EB:0F:D5:AB:1E:94:26:36:11
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:9a:95:b1:bd:f3:47:72:57:6b:ea:9d:95:8b:13:1a:28:
b7:25:7f:ca:ba:f8:6a:c8:a4:14:a8:6e:16:e0:a7:65:d6:c3:
4a:61:cb:09:e5:ad:2e:01:63:b0:5b:61:9e:2d:b5:53:a2:8f:
16:d1:1f:c9:df:bd:f3:20:1f:e4:32:32:f3:4f:d8:18:ae:10:
65:f6:7d:f8:8a:2b:fa:1c:df:52:b5:4c:d8:dd:79:c8:4b:c6:
77:04:c9:78:8b:c3:a2:aa:51:4b:88:b9:dd:7d:93:28:9a:2e:
a3:42:36:7b:25:39:60:71:90:de:aa:59:9b:e2:08:b1:06:fc:
a9:94:77:48:25:f4:2c:ab:c2:be:e9:c6:db:f4:e5:cc:fc:7c:
ed:ac:7b:3d:53:35:85:de:be:ac:0a:55:de:fd:23:7f:09:b6:
7d:c0:ee:8b:0c:85:04:1d:d0:bf:c4:46:ad:f2:0e:ea:35:b2:
d4:6f:57:c9:88:0b:c5:16:8d:76:f5:3b:bb:e1:12:de:73:5f:
3b:7a:01:50:ef:dc:61:ba:c9:59:85:82:f7:25:29:55:40:cb:
75:c7:6c:65:fc:e1:45:e2:93:6e:61:ef:51:3e:fc:82:52:f5:
a2:6c:42:44:fc:b6:ec:a2:e6:b0:2e:db:bd:5d:e6:bd:21:d1:
7e:e6:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:05:08 2025 by rpki-client