Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File: rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier: XBGrVgWLsjTUR28oqv2wTr9bD+2jRyb+mtVWHT8k1QA=
Subject key identifier: 5B:A9:A4:DB:C8:B5:FF:44:B1:A9:0E:01:F6:96:B2:A4:93:7D:8F:F4
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 0196135813BCF31CFD670216A6A2CD81C08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number: 0884
Signing time: Tue 08 Apr 2025 03:01:01 +0000
Manifest this update: Tue 08 Apr 2025 03:01:01 +0000
Manifest next update: Wed 09 Apr 2025 03:01:01 +0000
Files and hashes: 1: djea3wowsH9-GL3nIoFch0gf_Ow.roa (hash: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=)
2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: mqJnNcodAT5NNMd2wt3MAYyOVvuLBGendMkaAIhMRxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:58:13:bc:f3:1c:fd:67:02:16:a6:a2:cd:81:c0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Apr 8 03:01:01 2025 GMT
Not After : Apr 9 03:01:01 2025 GMT
Subject: CN=5ba9a4dbc8b5ff44b1a90e01f696b2a4937d8ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:72:62:f8:bb:1f:ef:77:02:86:dc:5c:6d:
94:37:45:ec:d9:5f:8e:76:cf:a1:d1:01:63:4f:05:
df:f0:5d:6d:22:08:04:3f:a0:e6:ab:84:67:fd:29:
15:72:7f:82:b9:97:cd:99:3d:80:81:dd:4f:8a:72:
42:78:ef:67:07:57:f0:39:84:34:f0:3e:c1:dd:7c:
8a:6a:c2:6f:6b:46:c0:8e:29:82:75:07:6a:eb:3a:
2a:51:73:21:2b:07:0c:8c:8c:1a:ec:25:87:ad:cf:
61:0c:d2:e6:b1:54:0d:3c:11:a9:61:0b:27:41:f0:
60:1e:66:a4:ca:fb:e2:7c:35:95:be:ce:71:de:6b:
1a:df:1c:b6:36:40:9a:6b:1d:82:6e:0b:0c:1d:76:
4d:34:2f:25:69:03:82:64:80:aa:f7:ef:cc:3c:06:
ae:ac:ba:bd:df:97:d3:62:67:54:65:4a:cc:59:63:
80:4a:38:14:c7:a1:45:14:ae:f6:7e:96:03:dd:38:
c3:bf:9b:23:c9:a5:38:62:47:28:e9:cd:22:a1:88:
10:24:69:4d:68:06:7b:7d:e9:5d:04:f9:2a:40:72:
bb:a0:50:fb:8e:5b:99:1b:14:dd:b7:7a:27:8f:9d:
83:22:dd:95:0a:b3:4d:95:17:31:1c:a3:37:88:60:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:A4:DB:C8:B5:FF:44:B1:A9:0E:01:F6:96:B2:A4:93:7D:8F:F4
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:34:55:3c:20:ff:7d:29:97:a9:24:fd:91:b8:d8:d5:08:e0:
14:44:6e:4b:e5:b4:2a:db:84:16:c3:dc:4e:10:1c:cb:d7:8f:
e2:d9:81:54:ab:f2:cc:cb:f6:29:1a:ed:32:b9:2e:b2:6e:d8:
70:7a:f9:ec:e7:44:4d:f8:3c:c5:49:cf:c1:cc:88:38:3a:4f:
b7:4f:70:2f:a0:85:82:8f:9a:da:8e:ed:91:aa:1e:3d:a3:33:
b6:c7:b0:22:fc:7c:12:37:0c:b0:5a:97:12:ed:ec:45:0a:82:
7a:ab:ce:3c:be:0c:e0:8c:41:b6:9b:37:70:07:56:43:2f:a3:
a7:6a:a0:f9:5c:d7:33:30:cd:2e:92:c7:48:d1:e3:44:cd:4e:
3b:e4:7f:52:02:be:93:13:72:b0:72:9a:4a:69:2b:dd:56:7b:
0d:9a:ef:8e:fa:03:cc:d1:53:f9:7c:64:d3:49:86:8f:d3:ac:
e5:85:d8:0d:8e:e1:05:09:b7:ba:be:e0:7e:58:e4:9b:09:70:
ef:86:0e:b4:a6:cb:be:ad:df:c2:bc:9d:36:7f:87:70:2b:d7:
45:12:40:88:38:c4:1c:bc:3b:d8:f2:93:8b:99:dd:f1:47:f1:
5d:83:36:59:af:ff:87:dd:94:4b:84:e4:81:98:6f:b2:ff:86:
1a:dc:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:15:25 2025 by rpki-client