Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: bKS57TbvEJcmQxafuHh6mfxaYWCzPbX/Rk/1Cfa761g=
Subject key identifier: B9:3E:82:99:B4:F6:AA:D4:F9:B2:FD:A8:53:B6:1C:8D:45:FE:70:8F
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 01964EFED16CCA0364D95DD76A8DF19912D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 05E1
Signing time: Sat 19 Apr 2025 17:00:44 +0000
Manifest this update: Sat 19 Apr 2025 17:00:44 +0000
Manifest next update: Sun 20 Apr 2025 17:00:44 +0000
Files and hashes: 1: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: Q+1dfLwXKVZnL1GAoLJD4JfV/4AuJ0sqwn+hlzWmcQ0=)
2: fcZemZl1vze9O7p9AxyuSyrFuZM.roa (hash: FwV5i3nd9L09P7VibTZwPG5Ywt6qHvbEJ0CkZEQ+EhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:d1:6c:ca:03:64:d9:5d:d7:6a:8d:f1:99:12:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Apr 19 17:00:44 2025 GMT
Not After : Apr 20 17:00:44 2025 GMT
Subject: CN=b93e8299b4f6aad4f9b2fda853b61c8d45fe708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:72:da:f9:56:8b:b9:25:4e:02:5d:b4:17:
20:d7:7f:57:5c:a3:ef:88:b4:c0:4c:e5:02:59:e9:
6e:d8:28:d6:e7:3e:32:af:81:b1:87:76:a5:1a:de:
04:df:bd:96:7f:4c:80:c9:d3:9f:34:ed:81:77:10:
a0:ec:c7:80:e8:7d:33:fb:73:71:8f:b8:4d:2a:40:
d5:51:42:b4:b5:14:eb:51:04:f6:6d:9e:0e:bb:96:
f3:0c:f2:ef:24:c3:8c:49:d0:e6:55:75:40:c6:bb:
98:cd:76:1d:bb:e9:e7:97:ff:cd:30:d8:e8:23:dc:
ca:e1:c2:db:8c:5b:a2:51:9b:4d:b1:69:b9:4e:88:
c3:30:48:21:f7:40:ef:7c:67:2a:fe:c8:0a:1f:fe:
39:29:41:e6:43:c7:17:87:a1:0b:c3:20:4a:27:0f:
f7:b0:bb:d5:61:3b:9d:7e:07:b1:81:ba:eb:3d:28:
d4:09:bf:86:c5:bf:f4:34:0e:91:92:67:d5:b5:f0:
8b:1f:68:c8:c7:c5:5e:a3:2e:78:e0:11:97:ef:75:
12:d3:a7:f1:64:ae:17:7a:d5:e1:c4:40:2e:0a:53:
c6:16:09:2e:ee:93:41:e4:aa:03:a6:64:b5:24:cb:
fc:f3:99:71:04:8a:6a:b6:a7:b2:22:dd:38:31:3f:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3E:82:99:B4:F6:AA:D4:F9:B2:FD:A8:53:B6:1C:8D:45:FE:70:8F
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:29:65:b9:a1:92:f4:e8:49:e5:42:cc:62:b4:c5:35:2d:
33:7d:da:26:49:6a:33:80:3a:02:72:00:18:c5:03:ad:f4:7e:
ab:4f:fa:48:21:d5:53:c7:49:00:f0:04:0b:ae:86:df:2f:5e:
64:0d:96:5e:92:95:b4:7c:46:7f:78:99:9a:6e:40:33:51:62:
cd:da:0d:d6:ea:b5:fe:0b:81:4c:59:65:4d:b9:a1:26:14:44:
98:5a:e4:2c:03:d7:a2:e5:7d:6b:6b:08:ad:e1:a2:a9:b0:d9:
78:d2:7a:14:cd:81:93:7f:0c:34:55:71:43:9b:79:30:59:21:
6c:a4:80:94:86:7c:d3:99:04:ef:93:4e:91:8b:6c:0e:f2:fb:
cf:e6:ab:3b:94:00:f6:ff:20:57:ec:0b:08:30:ee:b3:44:b0:
92:04:40:31:35:c8:6c:2c:e4:3c:6e:91:53:93:3a:85:3f:cd:
5c:32:fb:f7:e3:ba:c7:08:58:53:b1:71:9e:18:73:80:a6:f2:
18:f4:3d:a0:7c:95:f8:76:94:85:0b:a4:25:3f:76:41:e4:48:
a1:69:16:c5:bc:1e:5b:8e:61:20:da:58:44:b0:d3:92:aa:25:
05:65:03:f7:b0:6a:1f:dd:d0:19:25:c6:bc:da:5e:80:e3:bc:
2c:46:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:43 2025 by rpki-client