Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json)
Hash identifier: bVadhlI/W6RoTYLiA87CVm803Wobf1SJTjhzBNR2Tug=
Subject key identifier: 73:D8:14:51:53:AD:69:4B:1A:89:E0:3E:86:0E:44:A9:32:3F:8C:D0
Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Certificate serial: 01964CA234BF254D6F28477F8FD73415E3BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
Manifest number: 01B5
Signing time: Sat 19 Apr 2025 06:00:20 +0000
Manifest this update: Sat 19 Apr 2025 06:00:20 +0000
Manifest next update: Sun 20 Apr 2025 06:00:20 +0000
Files and hashes: 1: MYDLO2vvDKfPNW5B_jde2eQkJYg.roa (hash: wV9kbvDo8W5gfhdwsvfFoAGi3mrp4nPR/cUxhX5vacM=)
2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: skxenaRBfc1a2knQQTEu4fbtU6BItDIoQk76P/aHTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:34:bf:25:4d:6f:28:47:7f:8f:d7:34:15:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74
Validity
Not Before: Apr 19 06:00:20 2025 GMT
Not After : Apr 20 06:00:20 2025 GMT
Subject: CN=73d8145153ad694b1a89e03e860e44a9323f8cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:fc:ed:95:09:42:00:35:87:62:f1:f6:a6:
ed:e2:29:79:15:e7:6f:0b:c5:be:ae:75:54:2b:ba:
ea:39:30:c9:8a:3a:d1:ff:b0:98:80:a5:44:d5:07:
da:a1:5c:93:1a:5c:92:6a:5e:50:4d:55:09:cf:ae:
6b:18:92:ab:01:d4:fa:a5:aa:6d:b0:13:92:48:6d:
4f:cd:54:7d:36:34:06:ee:5a:9d:4d:c1:a3:ac:3a:
a8:72:9d:bb:26:d4:86:0b:00:c4:26:ed:a6:26:ea:
22:e7:93:1f:db:4b:d6:ab:c2:42:3d:25:c6:e5:b2:
48:e6:62:46:c9:dd:22:76:16:4a:b6:c4:bc:46:5c:
9b:b5:ab:cd:41:f6:8a:25:f3:56:da:f6:3a:e5:b8:
b7:06:87:79:95:4a:ab:c7:18:b3:0f:66:8e:d4:1d:
6b:56:f5:68:34:c2:0b:1e:01:16:08:d1:df:9f:66:
07:71:75:13:b6:ed:ac:6f:59:7d:4a:ff:a1:07:85:
34:7f:d4:a9:02:51:7e:71:4f:06:cf:a0:3d:58:86:
ef:6d:28:ee:b4:06:1c:93:bc:cb:34:3e:47:1a:77:
8c:03:e8:59:b3:9e:ff:a8:3a:1a:65:6c:50:30:15:
e3:e7:70:d3:ff:26:4c:a8:ad:0c:bd:dd:ca:1f:1a:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:14:51:53:AD:69:4B:1A:89:E0:3E:86:0E:44:A9:32:3F:8C:D0
X509v3 Authority Key Identifier:
keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:28:de:0c:f3:aa:e2:17:dc:ea:9d:8e:e6:4c:5c:7f:31:
da:20:51:04:bc:ca:2d:2c:2c:f3:da:ae:4e:5f:1b:9f:94:85:
d7:b2:5d:83:6b:03:49:bf:db:f4:5a:2b:b0:dd:51:72:75:02:
0a:50:30:e4:75:0f:2e:f1:b7:7c:63:ce:60:fa:84:bd:a2:ba:
39:4e:ac:65:0b:2c:b5:76:37:92:6f:05:3d:b2:2d:ba:60:83:
cf:c7:34:7e:9d:13:15:92:72:fb:16:da:26:95:c7:1b:43:b9:
61:72:eb:f4:be:33:da:10:1c:f3:88:9f:89:6f:4b:a5:2b:8a:
e1:7d:05:86:c1:3a:54:a4:5c:38:da:75:6a:28:83:4f:2a:97:
82:94:25:3e:be:32:2b:0e:18:d6:0b:3a:fd:4a:d6:9d:a4:9c:
b0:76:cc:00:12:36:32:ba:27:f9:85:89:ae:e7:fe:da:b3:68:
ef:d1:9d:e3:b4:3a:8e:72:3e:8f:09:54:57:72:6b:d8:2b:10:
94:aa:bb:6c:fd:59:21:b3:7d:19:e4:1b:b7:e1:8c:73:cf:0e:
98:3a:ac:60:bf:d5:11:6a:9c:c4:83:97:86:ec:1b:86:65:cd:
fe:aa:95:1d:58:65:fe:45:e5:e6:b6:a2:e2:f4:38:b2:dd:5a:
7f:f6:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:56 2025 by rpki-client