Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: SC3wl4Mihpo2FFAr2ebLfLJ67NwfNnmDNHVtuLxxezw=
Subject key identifier: EF:B0:D6:91:BE:2A:05:DC:E2:9C:A9:0A:31:63:90:B7:A3:B0:E2:63
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 01962AF2F9524E22B6441E4E1792F3EBDD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 14EC
Signing time: Sat 12 Apr 2025 17:01:28 +0000
Manifest this update: Sat 12 Apr 2025 17:01:28 +0000
Manifest next update: Sun 13 Apr 2025 17:01:28 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: UqwK9+mmW+msRuQ27GTg00XhHYHQzw/q3tUqAnYIquc=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:f9:52:4e:22:b6:44:1e:4e:17:92:f3:eb:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Apr 12 17:01:28 2025 GMT
Not After : Apr 13 17:01:28 2025 GMT
Subject: CN=efb0d691be2a05dce29ca90a316390b7a3b0e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:14:5b:d2:b2:55:9c:1d:3e:40:3d:9c:bd:
d5:c1:13:f8:f5:0b:35:ef:c7:66:bc:25:49:1f:db:
16:70:e3:47:52:9f:f5:41:d2:af:29:7d:ba:aa:31:
d1:4e:bc:2c:17:3b:d3:20:2d:13:58:ad:59:6c:0b:
3a:9e:c3:bf:83:c6:df:38:89:1f:e4:30:52:17:73:
0d:41:ea:14:9c:56:19:72:69:83:f0:0e:52:79:1d:
ca:8d:10:18:30:49:e5:b1:1e:59:1c:86:82:8d:51:
92:25:4e:70:4d:e8:77:78:51:58:fc:3f:07:29:3d:
31:cf:a0:6f:14:08:db:fa:10:ec:0e:4c:26:38:9f:
62:b3:c6:23:06:fd:c3:ac:13:29:53:82:98:ae:fa:
0f:ee:ff:39:8e:0e:4a:f4:e5:ff:c7:d1:7a:53:09:
c0:df:bd:65:dc:33:a5:af:19:a1:40:c8:34:e9:53:
fd:ee:a9:81:95:41:78:4f:4b:ce:23:56:68:c8:db:
bc:a6:be:9a:ac:e8:75:0d:0b:81:00:33:58:69:14:
7f:9b:8e:c2:12:cb:51:2a:0e:d9:03:3c:e5:33:89:
b5:98:50:1e:7b:b8:0d:39:52:38:23:39:1a:76:a6:
1a:64:ea:33:17:1a:5c:1d:ba:c1:05:cf:e7:fa:58:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B0:D6:91:BE:2A:05:DC:E2:9C:A9:0A:31:63:90:B7:A3:B0:E2:63
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ef:e3:15:be:21:18:77:14:58:29:4b:28:45:b3:db:a4:89:
97:4c:2b:b0:56:40:17:fa:fa:ed:01:c1:d9:a9:be:cb:2a:91:
dc:2c:68:8e:ef:55:f0:01:91:60:75:ee:ce:36:a5:70:47:99:
a3:17:9e:a1:93:23:1b:e7:33:61:3a:38:da:34:64:7c:20:e7:
e7:db:9c:ae:26:ce:95:57:bf:bc:21:ab:bb:2a:7f:8f:0e:d6:
be:16:23:4b:f1:a5:b4:7f:38:de:ac:cf:1c:c2:4a:41:1f:89:
14:fe:06:fd:81:bd:1b:f1:26:73:17:11:aa:b2:66:6d:da:16:
1f:1d:f0:89:07:88:57:ca:e4:4b:19:d6:48:e8:a5:21:6d:27:
6f:4b:6d:1e:d2:88:99:93:06:03:67:07:49:9d:de:f7:85:e6:
9d:cd:bf:91:47:1a:38:86:c6:f8:34:73:49:4d:20:c0:a8:7f:
1f:03:1f:bd:ec:67:a2:2a:60:ad:f1:e4:f2:f1:91:fd:08:1e:
01:22:f8:b0:4b:68:7c:1d:6f:11:2e:f9:ea:86:d5:6d:40:15:
02:77:e9:a1:83:54:91:f5:55:5e:90:da:17:95:c1:9a:bd:49:
63:99:b7:01:4d:7b:63:68:60:28:42:a9:dd:d2:cd:4f:21:4c:
af:d6:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:39:44 2025 by rpki-client