Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: +KhtI3VxxixPpoP0iiMfEAXYetlNv3nCPLX1nZA0J4M=
Subject key identifier: EA:A6:6A:F1:55:AA:F5:0F:6E:94:31:C8:CF:49:53:3B:E6:37:AA:BB
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 01965801F13811E9C3422D16BC2E576727F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 124B
Signing time: Mon 21 Apr 2025 11:00:44 +0000
Manifest this update: Mon 21 Apr 2025 11:00:44 +0000
Manifest next update: Tue 22 Apr 2025 11:00:44 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: L00zrfwiR+IgvOsXg49P/ai6OpITAoSpkzNK7/iFQeo=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:f1:38:11:e9:c3:42:2d:16:bc:2e:57:67:27:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Apr 21 11:00:44 2025 GMT
Not After : Apr 22 11:00:44 2025 GMT
Subject: CN=eaa66af155aaf50f6e9431c8cf49533be637aabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:6e:5c:e5:bc:fd:22:d2:0f:71:5f:7f:e6:
6b:52:e3:a1:7a:c2:c8:e8:8c:25:c6:69:2f:8f:aa:
08:fd:f0:ff:96:5c:4e:bb:0b:27:99:dc:e8:35:d6:
08:93:9f:63:9e:cc:0c:b6:47:eb:ef:e1:38:5b:65:
e6:c9:a3:46:ff:ab:6b:8c:db:ee:ac:43:53:ac:64:
04:68:20:6f:ff:cb:a9:3b:08:9a:fd:ae:03:f1:31:
61:e2:ca:cb:c8:bf:c3:98:d4:4b:f3:2a:60:64:77:
d6:59:07:52:bc:e0:da:1b:6c:be:89:68:5d:84:4e:
81:67:e9:f1:3b:e8:a4:df:b9:7e:e7:92:ce:ee:b9:
51:53:ef:ad:61:75:9f:3a:d3:b9:2b:a3:f0:39:bd:
48:39:30:eb:b3:5e:73:29:41:36:33:22:74:b6:e2:
87:06:80:33:fa:6d:04:aa:8c:97:e7:6f:f4:a3:82:
ae:34:f2:07:2f:c9:13:00:bb:be:3b:7a:e0:93:e1:
45:35:7a:c0:d5:1e:05:47:ac:d7:2c:e0:db:b6:37:
c5:c7:c0:f3:c8:e1:be:e9:2a:9a:1b:bc:72:ba:d0:
14:40:d4:e4:7c:2e:8d:93:38:26:2f:91:a2:67:07:
a9:56:77:76:a4:a9:f3:5e:b5:61:b2:21:f2:5b:53:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A6:6A:F1:55:AA:F5:0F:6E:94:31:C8:CF:49:53:3B:E6:37:AA:BB
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:19:01:d0:cd:d1:b0:80:17:87:be:66:e9:ae:3e:07:75:
6e:12:94:3a:b5:7b:cc:3a:b1:b1:2c:ec:76:dd:a4:2f:e8:cd:
a4:8a:7e:26:70:5f:f7:8d:1a:2c:87:e7:d2:cf:aa:cc:39:5a:
24:04:06:b4:b0:6e:f2:2c:02:1b:b6:57:b8:e6:65:f6:8e:51:
6d:b2:79:0a:91:b0:2d:37:cc:20:43:aa:bb:35:20:82:92:ed:
d3:0b:a2:0a:9c:83:90:ee:3f:d1:39:fc:51:d9:1e:92:87:2b:
a1:85:f7:cc:5f:81:68:74:3f:ec:7b:a3:3a:87:77:3a:8e:2c:
4d:15:92:f6:08:a1:d8:64:f2:9c:b3:6e:69:48:04:6d:64:cd:
70:4f:17:86:97:aa:83:96:81:de:bb:62:c8:c1:73:2f:c5:e3:
5e:f5:68:b8:04:9c:a6:8d:83:e7:00:f3:65:c8:24:d2:b9:60:
c8:bb:ca:81:fd:1a:fd:d8:04:05:3f:bf:85:14:43:0f:d1:cc:
ac:35:bd:ab:8e:6c:58:16:04:bf:ac:14:bf:4a:9f:45:78:42:
7d:3a:e4:eb:24:5b:49:6f:33:04:12:3b:a0:da:eb:22:aa:fe:
9e:b9:8c:a8:80:55:e4:a3:dd:00:1e:81:84:87:6f:86:c5:2c:
21:a0:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:44 2025 by rpki-client