Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: GJNZn0vztv+bCLb6KOvQ0c0Y00fV3vFQ9o6Eni6oj3U=
Subject key identifier: 32:B5:2B:AC:6F:A4:CC:83:72:3C:C9:C9:66:81:1A:06:11:7F:F7:A6
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 01958BBB968F57A36AAFC21C909DBD96B285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 08F9
Signing time: Wed 12 Mar 2025 19:01:21 +0000
Manifest this update: Wed 12 Mar 2025 19:01:21 +0000
Manifest next update: Thu 13 Mar 2025 19:01:21 +0000
Files and hashes: 1: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: YG5qx5q14rBK8ulhM6MI9ddM9tVgTia1dVU9QvBLKzQ=)
2: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:96:8f:57:a3:6a:af:c2:1c:90:9d:bd:96:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Mar 12 19:01:21 2025 GMT
Not After : Mar 13 19:01:21 2025 GMT
Subject: CN=32b52bac6fa4cc83723cc9c966811a06117ff7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:ca:0f:47:a5:23:58:a6:6b:8a:39:60:18:
40:90:18:87:22:6e:43:e5:54:e4:1e:84:15:34:6d:
45:8e:83:d7:dc:8b:aa:96:97:a3:2f:af:85:c2:25:
06:38:45:ea:a5:14:a2:b5:e0:4c:d9:d3:d7:78:a4:
25:63:1f:c7:e5:df:e5:89:16:6d:e7:a8:cc:c5:bc:
5c:4b:d3:47:d8:40:cb:2a:e7:4c:47:b6:ec:8f:f1:
98:ee:c1:be:80:cb:71:bb:ef:61:81:85:1d:e1:21:
af:13:f3:a7:d9:98:af:3c:96:46:b4:21:dd:eb:39:
1c:3a:d1:e5:96:aa:ac:c3:50:17:58:91:38:ea:ad:
0d:8c:77:0c:3c:1a:fe:14:1a:55:07:f4:85:49:67:
8c:e2:43:6f:ca:de:80:44:ad:f2:1d:b0:97:99:b1:
d7:0e:28:63:21:c5:87:5b:e4:15:8d:95:19:da:fe:
8f:47:7a:8e:01:4c:8e:48:7b:e2:5d:b2:a1:40:6b:
d3:2d:b8:9d:69:31:43:c5:d6:ea:ba:66:17:fb:8a:
60:d2:e5:df:3c:96:c5:e2:dd:07:32:57:10:9e:2d:
e8:57:0d:51:ed:7b:58:bc:ea:dc:40:4b:ba:3e:1a:
b2:90:dc:ff:dd:a9:45:2d:2d:71:0d:9e:74:a9:75:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B5:2B:AC:6F:A4:CC:83:72:3C:C9:C9:66:81:1A:06:11:7F:F7:A6
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:6e:97:e6:01:c6:c1:7a:e3:01:21:e7:0f:41:22:2a:82:
23:5b:6c:01:eb:10:1f:ae:2b:76:d1:91:07:a1:c6:f4:ae:ad:
0e:27:da:63:04:b8:13:63:cd:1b:ba:c0:c7:25:c4:8e:03:88:
23:75:8f:15:28:dd:3b:0c:0c:8e:70:b8:c0:72:44:80:10:f9:
8b:c6:ba:e4:db:30:6f:a7:37:96:ad:f8:ae:06:60:ca:df:7e:
cf:5a:36:40:b8:f0:2a:03:7a:5d:47:c8:5d:9d:92:63:b5:2d:
9c:db:ca:d3:61:36:1a:cd:2a:d7:bd:c7:2e:08:59:16:97:e7:
9a:d7:5f:bf:b7:d1:ec:42:04:6d:f2:05:32:92:c0:cd:cb:8e:
7a:c1:14:75:08:1f:15:85:36:6c:f7:40:28:b0:ab:f4:c3:00:
6a:e4:a2:86:95:c7:5e:b9:50:4c:ef:4b:21:7c:46:3d:ec:d1:
53:15:23:69:a4:ca:db:1c:fa:4f:22:8e:af:82:30:95:e5:30:
93:2d:41:d0:0a:e9:bf:e6:36:74:11:e9:22:8e:48:70:8e:b4:
2d:c4:fe:f7:db:81:ac:06:6c:a0:3b:89:12:4b:16:09:57:fe:
9f:ca:4f:75:08:66:b5:60:f0:bd:5f:bd:5f:dc:4b:a1:fd:e3:
aa:80:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:21 2025 by rpki-client