Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: //dN3+E8gB/qE5UW+brTPpksBKXIDwy/YD1hV9lIDyo=
Subject key identifier: BA:59:30:A8:23:66:16:7C:F0:DB:9F:9D:4D:73:4E:7C:9E:66:39:FE
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019655A637DC997B0FB389E29B4274081DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 00:01:18 +0000
Manifest this update: Mon 21 Apr 2025 00:01:18 +0000
Manifest next update: Tue 22 Apr 2025 00:01:18 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: vGSw5wLbP19alsa3iUxlpAg8f7duI7zJtcQ4YMwvBPg=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:37:dc:99:7b:0f:b3:89:e2:9b:42:74:08:1d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Apr 21 00:01:18 2025 GMT
Not After : Apr 22 00:01:18 2025 GMT
Subject: CN=ba5930a82366167cf0db9f9d4d734e7c9e6639fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:1e:f5:b0:22:78:ca:61:92:fc:b5:0a:c4:
03:03:25:88:bf:77:4e:01:7a:09:5b:6f:a4:74:0e:
6a:2c:10:2e:49:1f:d8:b8:92:11:02:d1:b9:67:15:
00:d2:39:a5:f9:33:64:af:fd:df:15:9e:41:93:00:
3a:85:27:82:39:2c:48:fc:b5:60:a5:df:21:6b:06:
e5:f1:6f:bd:ca:4d:72:83:6d:b3:79:e7:ce:81:6b:
d8:a7:95:93:b1:0a:ca:83:98:5f:ff:75:00:0c:9d:
6f:a7:fa:cb:95:20:68:db:02:4b:c2:6e:a7:cd:82:
ec:a9:40:a1:a3:a0:9a:9e:61:5a:7b:8d:27:2f:19:
94:b2:cb:8a:29:99:3f:25:d8:6e:ef:85:e3:f1:27:
93:14:f0:29:dc:6d:96:fc:60:a9:80:78:88:99:e6:
c2:48:e5:e2:be:0f:de:39:13:35:b4:ac:ef:df:20:
1a:74:56:71:6e:50:8c:45:36:5d:71:1b:97:c3:b6:
3e:fc:c4:68:d8:79:c5:b9:54:37:0f:92:94:60:61:
7f:21:fe:0b:f7:8e:85:28:aa:c9:0a:f3:65:9a:ab:
6f:4d:72:c1:a6:3d:ba:d0:ff:51:5c:58:f6:ab:22:
31:23:35:da:1e:35:b2:4a:96:fa:83:fb:f3:02:ef:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:59:30:A8:23:66:16:7C:F0:DB:9F:9D:4D:73:4E:7C:9E:66:39:FE
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6e:b7:2c:c1:51:2f:05:c2:02:6f:15:8b:c6:56:68:f8:0b:
c2:8e:92:a5:2e:a5:b9:cf:53:80:16:69:88:ef:be:38:6b:c8:
ca:5a:43:e7:50:86:18:49:a0:b0:97:6c:30:b4:74:f0:95:d5:
42:de:3d:46:e2:5b:c6:f3:37:65:1c:ae:24:d1:0a:9d:ef:b7:
10:9a:ab:0b:72:1e:90:aa:0e:1f:53:9c:8d:ef:15:bc:4c:a3:
01:41:05:a9:1f:1c:fd:91:30:9c:2d:ba:81:89:e7:22:51:32:
f6:46:8c:38:36:a2:ef:0f:2b:5c:23:10:48:87:cd:36:ad:d7:
35:2b:b7:f0:ad:17:8f:2e:e4:0c:b1:50:e6:9d:e0:b2:70:87:
dc:ef:f3:aa:a7:a2:c6:7c:64:82:c5:31:d9:7c:ac:a3:61:01:
7c:c6:df:ef:1c:3c:27:1c:4e:dc:7f:5b:0f:c5:16:0d:51:fc:
11:cf:46:1d:12:48:bf:c8:c7:4d:7b:e6:56:60:0a:48:87:50:
af:94:ae:b0:77:d1:60:b5:51:c6:91:1f:a1:1e:59:8e:f4:42:
7a:aa:3c:95:a5:ee:a1:2e:73:66:51:c4:84:42:e4:80:0a:78:
5f:7e:36:9c:60:dc:8a:c3:7e:53:aa:a4:68:cc:75:81:42:f4:
ae:40:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:57 2025 by rpki-client