Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier: StNe/MxYg7wJfi4JTbiVxBqOct7Pim/jQaeSclMVYnU=
Subject key identifier: A7:C1:F5:7A:04:C2:6F:67:60:46:CA:F5:48:87:1E:98:A0:B8:4C:70
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 01965D28208C2FCAE3FB286689F1B22D54FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number: 0AF2
Signing time: Tue 22 Apr 2025 11:00:32 +0000
Manifest this update: Tue 22 Apr 2025 11:00:32 +0000
Manifest next update: Wed 23 Apr 2025 11:00:32 +0000
Files and hashes: 1: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (hash: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=)
2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: VhHpEDu1C8d7I1c8gt6ENVeLBgHODKc9ZxbveXdPzTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:20:8c:2f:ca:e3:fb:28:66:89:f1:b2:2d:54:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: Apr 22 11:00:32 2025 GMT
Not After : Apr 23 11:00:32 2025 GMT
Subject: CN=a7c1f57a04c26f676046caf548871e98a0b84c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:a1:c0:dc:ee:64:57:6f:a6:bc:d1:01:0b:
2e:43:db:5e:74:6c:8d:f1:4e:18:92:a5:ea:88:e1:
c9:ea:9d:c9:50:8d:e9:ad:e5:2c:07:90:e1:af:8e:
dd:f8:35:00:ef:11:ab:35:6a:62:84:f2:66:79:45:
c3:34:f5:5c:fb:6a:01:d6:13:3c:24:ae:94:7d:29:
9c:b2:1c:55:25:b7:6c:6d:4c:eb:00:31:27:00:2f:
51:1f:e0:65:db:92:28:96:4b:a7:8b:6b:25:94:af:
d3:14:6f:91:63:09:72:3d:2d:61:d8:65:c9:f1:40:
a5:8c:ef:44:45:76:6b:40:9a:94:59:14:b0:a7:de:
b0:f4:89:38:d4:ca:10:dc:5f:ee:7e:d9:e1:af:60:
f4:12:dd:33:58:f7:16:ae:9b:22:4a:47:04:5b:28:
ff:02:34:59:55:e4:d4:6c:2b:f0:96:d3:0e:b3:ee:
38:37:ea:a5:0b:bd:1d:47:31:35:d1:72:9f:c9:7b:
59:0e:b3:c8:78:05:38:a2:22:69:85:ae:d4:31:ad:
37:d2:11:ee:70:1d:85:76:a9:9e:da:c2:40:da:e6:
98:30:b6:8b:0b:bc:0c:df:02:22:e3:e1:79:d8:97:
6c:e0:b9:d7:65:e8:df:02:c9:bb:88:00:28:c2:34:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:F5:7A:04:C2:6F:67:60:46:CA:F5:48:87:1E:98:A0:B8:4C:70
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ba:79:72:98:1d:e1:3e:38:82:97:3d:da:fc:e2:cf:22:3d:
cf:7e:04:62:85:17:8d:bf:65:81:e4:e0:72:52:fb:31:a3:13:
28:63:52:0d:8a:51:b5:00:17:71:32:44:30:99:40:6b:48:82:
23:26:0b:71:25:d4:e8:1f:3f:be:68:00:22:73:a1:d6:8d:f6:
b0:c0:cf:91:22:6c:e3:80:d0:1e:09:ac:68:8e:16:d6:f3:51:
f6:6c:73:0b:fe:c5:97:5d:69:2b:33:2f:1c:89:a7:7a:88:a4:
c5:6c:67:ae:bd:f3:f2:65:c8:bb:65:e6:0c:cb:49:88:21:6b:
48:e6:b0:82:1e:80:70:8c:3f:25:f1:54:f2:1d:8b:35:ba:c7:
d7:77:2d:5f:8f:23:5b:68:12:ad:bd:6b:6c:35:49:7b:0b:c6:
60:c9:25:e0:2c:0c:ed:a0:25:0b:5b:28:ce:06:c5:f9:a1:c5:
9a:b8:70:ad:b1:9d:6f:08:bb:f9:5f:a1:6b:a7:0c:8d:a3:a1:
2d:48:8a:6e:70:b4:02:6a:f4:a8:36:d7:90:15:44:71:44:90:
35:5e:5b:a5:96:a9:2f:0a:fd:11:47:66:6a:b3:89:f1:14:6f:
93:93:5b:e8:18:8f:6e:6a:40:a6:aa:79:48:25:65:7e:ae:28:
ad:38:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:22:37 2025 by rpki-client