Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: 8NR8jsFSCmLWXYU1C//anBIQkujbgtUhvx8r2hEQ0no=
Subject key identifier: 8C:AF:C9:3E:2B:04:DA:43:AC:E3:87:4A:BC:60:AC:81:5D:40:5B:80
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0196556EC7A37E34CDC4C753E15D3BABA83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 23:00:45 +0000
Manifest this update: Sun 20 Apr 2025 23:00:45 +0000
Manifest next update: Mon 21 Apr 2025 23:00:45 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: Y/LWM42IKPstAfT8GibDecrqFQzdRKhhjNfHrzTIe2w=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:c7:a3:7e:34:cd:c4:c7:53:e1:5d:3b:ab:a8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Apr 20 23:00:45 2025 GMT
Not After : Apr 21 23:00:45 2025 GMT
Subject: CN=8cafc93e2b04da43ace3874abc60ac815d405b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:e1:47:f8:a9:1d:15:55:93:73:a5:bf:82:
6d:6d:38:31:1a:45:1f:0a:93:a0:a9:40:db:13:73:
b8:7a:ad:2f:1a:21:23:5a:ae:6c:17:25:54:e9:18:
3a:ee:f4:36:9e:33:2e:01:ba:94:0a:34:02:4c:05:
6e:a4:e3:50:ff:2a:a0:0f:d3:6f:a8:fa:1b:b5:f6:
e1:4a:98:61:62:c5:4d:cc:5d:23:e7:3e:60:a1:9c:
b3:f4:f2:c4:d7:9c:29:fd:ea:c6:42:a2:28:43:6a:
1f:f1:38:76:d4:7f:79:c9:2c:2c:a2:7c:ff:04:46:
73:14:a3:10:38:7d:6c:88:d0:6a:03:79:ce:a1:3c:
aa:24:73:7c:57:db:4a:b8:c8:e0:b1:de:4c:63:6e:
03:93:cc:33:83:38:84:cf:46:e7:62:25:9d:3c:10:
1b:60:a5:17:e6:5a:0f:cf:a7:53:e1:a6:aa:da:40:
fb:cf:d7:64:12:70:cb:3b:96:ab:b0:b3:a8:f2:cc:
ce:17:85:3c:f0:e6:68:66:e7:bb:c4:4c:35:82:31:
81:be:da:4d:c6:8f:28:09:4b:4e:7d:d6:58:c4:d4:
4b:3d:23:0f:4c:74:59:e9:9d:b2:06:be:55:cf:cf:
50:a2:36:f0:eb:eb:74:94:dc:4f:3f:70:77:39:0a:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:C9:3E:2B:04:DA:43:AC:E3:87:4A:BC:60:AC:81:5D:40:5B:80
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:1c:49:20:56:93:ac:ea:a5:f1:88:b5:85:5a:7c:80:cd:
bc:77:48:e3:81:a0:f9:f3:79:4b:39:1f:6f:10:43:f7:ee:1a:
12:be:0b:bd:32:10:05:a7:af:2f:32:25:00:c7:6e:c3:89:87:
a0:2b:fc:df:58:fa:8f:10:d4:d3:72:ac:aa:75:68:e3:cc:ad:
cb:9a:9e:22:df:ef:bb:e0:82:97:29:8c:5a:a8:4d:5e:3e:4d:
ad:db:6d:11:fe:b3:77:b5:a5:23:cc:ba:32:db:8f:b3:0a:b6:
e7:91:36:90:3f:d0:c4:ff:d7:21:68:32:47:f6:8b:b3:02:c1:
8b:92:ae:19:d3:c1:04:9b:ce:5e:e7:52:4b:22:89:e4:ad:38:
d9:d9:b3:c4:24:76:1a:31:d2:ac:31:69:1e:37:7d:ed:18:43:
fc:4f:ba:8a:4a:bb:44:6d:e7:fd:c8:64:df:74:e8:56:74:16:
3e:d0:15:f7:5e:1b:68:b7:45:57:57:da:0d:e0:f8:6f:48:a5:
29:a5:1a:9a:ab:6a:f3:87:f5:e7:51:f8:79:be:c5:be:6a:eb:
48:fe:93:ad:92:6c:e6:84:39:34:27:af:b6:4e:cb:bd:3a:6d:
16:dc:91:6b:2c:46:17:17:93:3d:d0:68:9a:fd:e4:8c:1e:f8:
dc:e7:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:41 2025 by rpki-client