Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: xb5PD/PAORFK4gS7HGLO/19ZDBcOK3XQxxLBBohqj1U=
Subject key identifier: 1E:13:F8:AB:E6:DB:11:0E:03:87:B4:2D:9E:8C:A1:7B:A3:28:FF:78
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0196458D6171218D91E922CE03E90B6D9569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 21:00:15 +0000
Manifest this update: Thu 17 Apr 2025 21:00:15 +0000
Manifest next update: Fri 18 Apr 2025 21:00:15 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: rNh12ZgiuwWPtleKU7mgd41/q8Udjue/iDFKHLgW1Xg=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:61:71:21:8d:91:e9:22:ce:03:e9:0b:6d:95:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Apr 17 21:00:15 2025 GMT
Not After : Apr 18 21:00:15 2025 GMT
Subject: CN=1e13f8abe6db110e0387b42d9e8ca17ba328ff78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:46:6b:19:ec:30:e0:b1:1d:b5:10:a6:03:
15:a4:9e:ac:38:82:a7:f6:62:24:51:f0:a4:68:72:
6e:42:e3:3e:62:9d:85:00:d0:e4:88:80:e7:48:c7:
a4:a2:ea:47:51:2c:9e:ee:bd:de:9b:09:ad:7c:8b:
fc:02:bd:87:4b:6c:6c:2f:25:ca:99:48:81:fc:29:
e8:0d:3a:62:2f:1e:fe:f6:d0:3c:47:0f:55:3d:68:
89:55:16:8d:63:5e:2d:75:e8:3b:71:fb:86:9b:7a:
05:e6:26:eb:7f:82:9a:aa:a5:98:f9:b5:7e:1a:3c:
61:59:ec:d2:63:4f:85:23:05:22:31:42:f4:fc:03:
32:76:aa:b1:d6:93:3f:6d:b2:35:34:48:7c:a8:8e:
55:d5:1b:1d:df:41:b7:4a:17:b3:24:52:6d:b2:87:
4d:0f:49:91:11:43:a7:f8:63:6d:06:cd:4a:df:6b:
64:42:a9:cb:d1:ed:7a:ec:e8:e1:a2:82:38:b4:8c:
51:1d:22:8d:d0:6b:45:70:cb:cb:f1:54:35:f5:c5:
47:c4:48:6a:8f:6e:de:27:18:38:cd:e1:c3:41:0e:
1c:4f:7c:47:9e:1d:54:f2:50:17:5c:b2:ca:54:bf:
78:63:2f:0c:c5:0e:27:4a:b0:a1:ed:f7:a5:f4:4c:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:13:F8:AB:E6:DB:11:0E:03:87:B4:2D:9E:8C:A1:7B:A3:28:FF:78
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d6:ec:df:87:4b:55:c7:4b:cf:75:fa:2c:87:7a:65:a0:61:
84:79:1f:46:87:1a:f1:51:47:cb:ed:d5:d6:59:f0:dd:12:5c:
9f:3f:16:cc:4e:e0:21:a4:b0:81:1d:0e:a5:5a:a3:8f:6d:28:
72:37:db:60:b2:74:a9:42:54:08:ef:9d:76:72:b2:f4:55:40:
d0:e9:77:70:d9:51:a8:96:06:aa:2a:d4:d7:0f:de:5a:0c:8d:
13:cb:1e:f0:89:fd:31:d9:80:4a:8a:c2:c9:fa:da:be:22:c5:
27:6a:cd:ab:e8:48:81:7b:3c:0b:f3:0f:48:b6:31:c4:d2:cc:
7c:8e:d4:bf:b4:eb:b8:ea:25:ab:67:4c:57:0c:7f:36:25:39:
fa:bc:41:cd:05:37:4d:c9:8c:74:01:d7:c8:4d:63:29:5c:e0:
a4:1d:2b:4b:e9:dc:86:8c:25:6f:d4:3d:dd:87:b1:3c:d2:d9:
e7:79:92:32:09:b6:09:6a:1f:88:d7:8c:0d:e7:c1:57:fe:96:
b0:48:79:96:33:e8:ba:29:8d:d4:aa:d5:96:7a:7b:89:2f:67:
be:83:5a:7b:84:3c:d6:a0:85:3b:2e:0a:57:a1:fc:ab:29:f8:
16:76:9e:33:10:74:77:92:99:a5:6e:00:ed:54:d1:21:2a:b5:
a3:a6:12:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:50 2025 by rpki-client