Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: KORjL2Fls4xIc3galrs3V6pTZPrYvbEyb4MUXehlWkY=
Subject key identifier: B1:A0:71:DF:F0:4C:D6:7D:6B:BF:7B:43:46:92:BB:D2:14:15:05:11
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 01964C6C01B8A70E34CA4B33243825068908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 05:01:08 +0000
Manifest this update: Sat 19 Apr 2025 05:01:08 +0000
Manifest next update: Sun 20 Apr 2025 05:01:08 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: R0ggZEjQ4efqkuedTeGEAyNjzeSB1eesXsN/xUFLyyU=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:01:b8:a7:0e:34:ca:4b:33:24:38:25:06:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Apr 19 05:01:08 2025 GMT
Not After : Apr 20 05:01:08 2025 GMT
Subject: CN=b1a071dff04cd67d6bbf7b434692bbd214150511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:f0:e4:86:1a:74:72:4c:43:f8:05:11:57:
d7:84:84:9e:3e:2a:fa:49:a9:c2:03:f6:4e:9f:60:
92:fc:18:0a:f9:4a:b5:c4:83:ff:1b:06:f3:fb:7d:
ed:ff:65:3f:7b:6f:4d:7f:e7:03:06:de:15:cd:4b:
2c:13:23:ff:f8:06:f7:47:33:49:97:6c:06:cb:30:
16:1c:f1:0e:f7:78:d6:a3:0f:47:2e:49:53:48:f5:
cc:5a:78:ff:12:52:e9:a9:c4:0b:ab:04:19:b8:b9:
41:49:91:92:24:be:13:58:ec:dc:e7:0b:f7:96:a5:
d9:93:2a:49:6a:0e:28:ef:3a:40:1d:b6:8e:69:84:
ad:22:a7:48:b5:ae:9d:8e:e6:5c:da:e3:39:ad:a9:
33:84:4d:a7:c6:fc:97:a8:b6:1f:4b:c5:52:62:18:
f1:7e:32:7d:e5:33:1b:9e:5b:3d:b1:35:42:10:ed:
35:47:21:f3:fc:d7:6c:d9:df:bf:df:56:5c:b1:ee:
85:8b:58:fb:ec:0d:9f:28:be:c5:45:47:77:50:9b:
98:8f:56:6b:7c:c6:75:78:34:4d:51:21:71:c0:cf:
9d:44:cb:8c:59:89:67:00:04:ca:f5:78:91:a8:5f:
43:e0:e7:62:f0:02:8a:2a:d2:5a:ef:a1:14:d4:b1:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:71:DF:F0:4C:D6:7D:6B:BF:7B:43:46:92:BB:D2:14:15:05:11
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:02:1c:6d:64:26:99:cf:ec:00:74:09:7d:21:a1:13:b8:c4:
d6:68:23:89:b6:62:f7:49:13:20:31:8d:47:ea:62:99:9d:a0:
21:6e:87:d9:3f:fc:ed:2e:f4:55:2d:02:5e:5a:a5:04:55:76:
73:87:2b:ee:db:c5:83:bd:d2:b9:cf:1d:ac:37:28:e2:f5:cd:
eb:62:31:1c:84:ab:e9:26:ef:de:96:02:29:f4:a7:69:09:3e:
90:d9:62:31:15:f6:ee:1a:6a:42:1e:57:83:8d:59:34:12:79:
ec:6e:6c:07:f9:df:6e:bd:13:8c:5c:86:ed:87:e3:8d:40:29:
79:14:99:50:ca:5f:31:7a:b9:85:3e:e4:b6:91:15:45:d2:b7:
30:50:d6:97:a7:81:66:cb:60:f2:69:47:1d:4f:7b:ef:94:27:
ab:9b:29:bf:39:e6:03:a8:30:42:03:68:77:d2:85:82:56:96:
7b:25:09:76:c9:a3:35:91:75:18:39:3f:a8:9d:9b:13:ae:64:
fc:2e:a7:73:c3:9d:68:d0:fe:0e:0b:bc:fa:23:24:df:05:2b:
da:58:d3:55:7c:80:77:cd:27:df:e4:da:31:85:c4:68:8a:ce:
8c:ff:4b:1d:09:d1:88:2f:a0:a3:fe:cb:c5:1d:95:87:07:d1:
c1:b7:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:29:34 2025 by rpki-client