Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: lN8ooOOGIiW2J0zxhGxodFvypNe550ZWI1OdHCGzIPE=
Subject key identifier: 96:1D:CA:05:C3:8C:A8:C6:FE:CD:59:4B:F4:51:3D:8D:14:CA:6D:37
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0196383FA041D7A89945DE372C32D0AA399F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 14ED
Signing time: Tue 15 Apr 2025 07:00:15 +0000
Manifest this update: Tue 15 Apr 2025 07:00:15 +0000
Manifest next update: Wed 16 Apr 2025 07:00:15 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: IWxUejXWO9Av9YAGD/Yk34+QZn8AiWtoVQlHz7lfcLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:3f:a0:41:d7:a8:99:45:de:37:2c:32:d0:aa:39:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Apr 15 07:00:15 2025 GMT
Not After : Apr 16 07:00:15 2025 GMT
Subject: CN=961dca05c38ca8c6fecd594bf4513d8d14ca6d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:53:b0:7b:ef:76:7d:35:1c:e2:0b:74:09:
d1:5b:e6:52:37:e4:0d:af:70:6d:63:8d:16:f8:2f:
f8:ff:39:96:8b:45:a6:80:b3:f6:80:5e:75:de:43:
de:3b:90:eb:77:46:26:63:4b:03:49:c1:3d:5c:ec:
96:55:5d:e7:87:fc:3b:5b:eb:06:3b:f1:06:61:bf:
f7:a4:be:8e:b0:43:0d:70:f4:0c:fd:80:1a:78:7b:
d1:86:d6:80:df:e3:7c:8d:31:08:e9:b8:1d:df:27:
a7:0b:4e:f0:d9:cd:99:04:38:8b:ac:19:09:d0:0f:
13:56:f3:fe:0d:82:ff:ff:54:13:a0:f2:27:d0:ec:
31:56:77:f8:10:26:06:38:50:a0:a8:7b:a6:8e:71:
85:97:8e:fe:94:40:cc:96:db:b5:78:ce:f6:97:b1:
d5:02:54:b7:db:21:a5:60:2d:37:c1:47:b7:30:7e:
6f:92:8a:16:c6:87:8c:1a:1c:c4:9c:72:66:3b:8b:
b4:c8:5e:b9:d6:d0:37:d2:64:ec:c7:26:c6:13:4c:
81:7c:e5:90:88:22:2f:5b:45:9b:77:65:16:54:db:
b5:50:2a:ee:62:72:53:3d:83:3b:aa:5d:c8:5c:7e:
61:ef:20:9f:95:7c:db:9f:4d:64:b9:f8:87:9e:3f:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:CA:05:C3:8C:A8:C6:FE:CD:59:4B:F4:51:3D:8D:14:CA:6D:37
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:16:f2:79:7d:0c:10:15:c5:68:f9:a1:41:9b:47:8f:cf:d4:
0f:a7:ce:d9:de:b5:2f:a3:4c:65:bf:ac:73:09:d8:71:28:80:
21:93:ee:9a:ce:73:1b:e2:47:28:ff:88:b1:73:7c:b5:e5:1b:
72:0a:37:e2:8d:db:40:80:4c:7d:bb:7e:84:a4:88:2c:5d:1d:
c0:a5:32:b2:e8:9c:f0:73:75:10:42:14:aa:f2:8f:55:f9:39:
9b:42:e2:36:27:26:17:fa:75:5c:a6:a1:d9:27:14:7f:12:43:
d6:71:e6:53:e9:99:c4:4b:8b:e0:84:34:34:56:42:72:cf:0c:
1b:e7:d6:35:ca:f5:df:bf:4b:1f:e3:e1:46:5b:bd:f6:2d:28:
70:d1:13:8b:f5:b1:59:51:78:78:0f:e3:28:6a:91:bc:57:a2:
19:57:19:4c:52:8c:21:2d:98:8f:fd:3c:7f:02:38:c2:a7:05:
51:bf:ab:a8:85:6c:2a:3e:19:75:6c:a3:2e:a1:9f:49:39:ea:
0d:a8:94:3d:f4:58:f0:56:43:f4:d1:c5:44:4a:42:fd:b8:55:
c8:c4:37:89:9a:41:64:15:5c:6a:3f:35:ae:86:1c:06:71:3f:
e6:8c:3a:4a:a3:26:57:ac:ba:44:89:e6:c6:5c:3f:9d:dc:d6:
a4:58:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:20:04 2025 by rpki-client