Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: Whc79PKCKxJQulRiPQhpEZrtJ9cwtMvJXR9UrhuSlQo=
Subject key identifier: 5C:9F:90:8E:4F:22:63:B7:88:45:F0:8D:9B:BD:5C:7E:0F:B3:29:A3
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 01958B4DFFA7E06CB9362A30FFA47B1825E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 17:01:39 +0000
Manifest this update: Wed 12 Mar 2025 17:01:39 +0000
Manifest next update: Thu 13 Mar 2025 17:01:39 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: mC+jkYWF6ByOlYSa9ZkNebC9laH4yYLwoaIRu7n7Ip8=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:ff:a7:e0:6c:b9:36:2a:30:ff:a4:7b:18:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Mar 12 17:01:39 2025 GMT
Not After : Mar 13 17:01:39 2025 GMT
Subject: CN=5c9f908e4f2263b78845f08d9bbd5c7e0fb329a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:30:86:84:40:f0:02:c1:ed:5c:fa:9c:3c:
31:f5:df:e6:5a:ae:3f:ef:c8:42:cd:3d:ba:21:4d:
ab:ed:b5:db:56:7a:0a:7f:5e:13:df:16:7f:8e:69:
62:54:96:2c:57:26:ae:d8:9e:c6:7c:16:7b:fc:ba:
d3:1d:56:24:07:c8:aa:e9:19:cc:f6:22:9b:43:26:
68:35:81:92:db:49:a4:67:4a:7e:77:89:1d:4b:5b:
7d:5a:35:e3:85:dc:18:35:7b:44:02:fb:03:0e:99:
a8:d5:e5:20:72:3a:b2:57:d0:67:c4:20:c5:a5:52:
70:94:02:82:f8:ea:d6:11:c9:cd:60:c5:31:26:e3:
6c:4a:9c:20:07:08:92:8b:a6:f5:0c:35:b5:b3:5a:
19:73:11:77:7d:9d:bd:37:3d:33:b7:2b:4b:c2:00:
89:99:1a:95:e9:ce:fb:f3:9c:3c:58:96:cc:d9:b9:
d9:79:9e:98:bd:ff:21:b5:1f:1a:b6:8d:a1:e9:a3:
8d:7b:16:95:59:e9:fe:ba:3a:63:46:e9:19:03:28:
5b:71:99:68:4b:ae:99:63:e6:19:7c:cd:84:d1:40:
7e:cb:1a:9a:92:2a:f6:f0:ff:45:5b:72:fe:5a:9a:
b4:17:fa:7c:c9:e4:0a:36:a9:d1:1c:5e:88:7e:26:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9F:90:8E:4F:22:63:B7:88:45:F0:8D:9B:BD:5C:7E:0F:B3:29:A3
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:b0:ba:41:28:aa:00:97:34:1c:6a:76:75:d8:63:a1:85:
68:32:ef:9d:7e:ea:f7:ff:a4:01:84:7e:13:16:27:04:e9:4a:
f1:ef:4c:d3:ef:16:b7:81:d6:7f:b0:c0:c7:65:40:d4:10:f8:
4d:f4:a1:17:68:fd:ad:e1:31:42:09:16:bb:71:c3:90:7c:fa:
2c:10:ac:a8:4b:ae:44:a1:93:f9:4a:90:63:88:be:f1:84:cb:
73:15:94:5e:41:d3:d4:25:c8:67:79:a9:e9:33:f1:e0:2e:9c:
c8:7c:c0:c7:44:1b:88:93:c8:04:91:e1:0e:06:c6:ea:32:e6:
5e:db:59:22:66:cc:70:d2:6f:b7:29:70:bb:cd:d5:2d:12:14:
81:30:4f:50:97:3c:48:84:bc:41:a6:8f:cb:e6:ad:fb:03:29:
e8:dd:39:c3:fe:6a:1f:e7:19:d7:30:14:16:3b:e6:35:31:8e:
88:36:9f:0f:28:f8:7f:0f:a5:0e:f0:0a:ca:23:50:c6:04:03:
bc:6a:eb:30:c1:2f:78:3f:29:32:f3:73:82:d1:95:4d:4c:7c:
a2:e8:a3:ca:55:c7:94:c8:89:d1:20:9e:b2:f4:e6:11:b7:e2:
a8:f1:bc:f4:74:90:a9:33:e1:9a:31:40:75:70:fc:97:21:5d:
57:8f:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:50 2025 by rpki-client