Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
File: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft (raw, json)
Hash identifier: 5c/X06+3+2RhkJmPM8t6SNDlBS0h/hmBhH6VQUjwXvM=
Subject key identifier: F3:B6:4D:02:C9:CC:16:3A:10:F7:F8:63:97:6A:D5:95:E4:95:74:2B
Authority key identifier: 6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
Certificate issuer: /CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Certificate serial: 01964C6B7902288300D2CFC17A50888194DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
Manifest number: 0763
Signing time: Sat 19 Apr 2025 05:00:33 +0000
Manifest this update: Sat 19 Apr 2025 05:00:33 +0000
Manifest next update: Sun 20 Apr 2025 05:00:33 +0000
Files and hashes: 1: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl (hash: zZJBBR5w48OvcoMoJxvAh5wJv0nqe3pk+u5BxloAil8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:79:02:28:83:00:d2:cf:c1:7a:50:88:81:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Validity
Not Before: Apr 19 05:00:33 2025 GMT
Not After : Apr 20 05:00:33 2025 GMT
Subject: CN=f3b64d02c9cc163a10f7f863976ad595e495742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:e9:79:a0:a9:bf:42:8a:0b:78:14:de:64:
cf:2a:c4:60:4b:b7:d3:82:58:1e:c1:0a:42:9d:a6:
fe:67:16:f6:a3:02:d4:bf:bf:74:16:5b:cf:80:f2:
84:31:a6:79:c2:86:c3:7e:58:d4:d1:0a:ed:08:eb:
09:1b:d7:4a:23:c8:e8:09:b6:a9:d2:56:ae:c5:07:
75:da:0b:e5:ae:41:39:36:01:3f:da:f3:ad:f3:74:
22:c1:ab:d1:48:98:26:ac:87:2d:b5:44:cd:4f:36:
d3:0b:06:0e:52:75:a2:13:ba:72:74:e0:e8:ce:62:
d0:94:46:05:21:22:df:a5:97:71:ae:91:0f:3d:e1:
34:94:0f:a6:d7:48:f0:f3:2b:aa:09:c9:b1:b0:c6:
96:8f:62:80:80:3b:0a:37:3b:12:e2:e6:16:73:12:
4e:5c:97:4c:c9:82:67:17:51:8a:36:70:85:a5:98:
26:e2:9b:d2:9b:78:38:4d:3e:ba:34:3d:da:dd:13:
01:7c:f8:27:81:ee:d5:ec:56:13:69:6e:ad:10:20:
6b:56:65:73:51:2e:3f:b9:a6:2e:58:8b:5c:a2:65:
ce:f3:28:8e:cd:52:8d:16:d9:a4:07:6b:aa:4e:89:
1e:df:dc:c8:5d:d1:6d:38:43:6b:68:57:43:85:f0:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:4D:02:C9:CC:16:3A:10:F7:F8:63:97:6A:D5:95:E4:95:74:2B
X509v3 Authority Key Identifier:
keyid:6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:af:43:ae:80:03:5d:bb:18:40:d2:b6:0d:2c:22:66:2a:fd:
1b:aa:67:52:2d:dd:b8:74:73:1f:08:ea:c7:1d:2e:1f:f1:31:
26:14:f3:44:7d:23:1a:d7:10:c4:7a:3b:e6:54:d2:f2:73:a7:
bd:c9:89:66:43:74:d4:19:75:32:05:ec:e3:ea:9c:60:ea:8e:
28:e0:9d:e2:d6:4c:ec:b3:39:f9:4d:67:69:48:2f:07:a1:0d:
5a:82:2c:04:58:42:29:91:92:55:33:c4:25:52:f3:0b:8e:6b:
bc:92:9e:23:6f:a6:82:eb:3a:9b:da:84:99:38:43:98:41:30:
fe:3f:60:bc:7e:82:b4:2f:e0:e5:b8:9a:cb:fd:4d:f6:28:5c:
2e:a2:32:d8:2d:1a:1d:19:78:40:d2:ae:a6:48:21:98:8c:6b:
a9:ef:26:14:58:a9:21:f5:6b:0a:44:ac:4d:2e:d2:f8:bf:d8:
3b:e5:48:b2:73:f3:0e:63:e1:e0:f2:29:40:1b:02:ab:08:d8:
05:26:88:8f:b3:78:46:d4:42:90:72:dc:c3:71:08:3a:37:17:
1d:1b:72:b9:fb:4e:18:56:b8:10:b6:f8:cb:a0:53:58:59:d6:
9d:00:bd:5c:89:6a:61:e8:59:8a:c9:ad:dc:38:6a:56:f7:49:
0d:4f:18:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:43 2025 by rpki-client