Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: BxmDpc7uFylbL35CiJO3FGl4lQyxcUWNVYsV+z9toZs=
Subject key identifier: D8:F4:76:EB:D3:B6:14:85:D7:B1:7C:AB:D5:72:54:D8:41:44:4A:FD
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01961357F0BE09BEAA394201A3FAF0AC69CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 14EE
Signing time: Tue 08 Apr 2025 03:00:52 +0000
Manifest this update: Tue 08 Apr 2025 03:00:52 +0000
Manifest next update: Wed 09 Apr 2025 03:00:52 +0000
Files and hashes: 1: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
2: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
3: EVOvB7sDScf41BENRNWFN92qCOc.roa (hash: v9rFJdO6bVhF4g/DVUTlP2lnOU6R9fjrxCCGGRzmhBo=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: q5yYI8+jCT616nrwJc7A0MmGSB6jmRX6DkPBIRmUavo=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:57:f0:be:09:be:aa:39:42:01:a3:fa:f0:ac:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Apr 8 03:00:52 2025 GMT
Not After : Apr 9 03:00:52 2025 GMT
Subject: CN=d8f476ebd3b61485d7b17cabd57254d841444afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:54:1d:c9:18:bb:d7:d5:2d:92:2d:25:4c:
d9:7f:db:ad:71:01:ab:c9:d1:2c:8d:9f:0f:3c:1b:
d3:aa:61:93:6f:db:b2:0b:4f:cb:01:70:d0:9f:90:
eb:1d:b1:36:d1:d5:34:0b:d9:cf:56:5c:62:b2:0e:
43:ee:43:c7:dd:67:d7:5a:25:2a:69:f8:49:d9:94:
8f:35:9b:5f:cd:df:c3:a4:5c:13:5f:b4:45:9b:c8:
98:68:d9:87:e1:39:ce:be:76:1f:af:df:70:e5:ad:
a6:1f:7e:67:5f:42:00:dd:05:a5:74:7e:4b:30:65:
59:2c:07:0c:1e:28:ba:0a:87:e3:2d:77:79:9a:b1:
a2:c3:5c:58:6d:a3:95:e8:30:80:fb:1b:e2:5b:b5:
5f:e6:e9:5c:ba:06:13:1c:60:d3:cf:e5:46:d2:1a:
74:f6:fe:3c:33:b3:97:ad:9d:4d:b5:a1:a6:88:f3:
b8:8c:6b:e6:6c:0e:d1:39:67:60:44:20:c8:60:3f:
fc:60:3c:dc:ad:53:d1:5f:b8:d8:96:d5:ba:1d:2e:
70:d3:b6:61:ec:5d:09:9a:9d:7a:0f:0f:f1:d3:b4:
e6:e1:30:77:df:31:16:d1:5b:9b:42:99:60:42:af:
04:c3:da:f2:f8:c4:77:b9:80:27:26:dc:25:f6:3e:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:76:EB:D3:B6:14:85:D7:B1:7C:AB:D5:72:54:D8:41:44:4A:FD
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:7a:82:32:b8:91:54:4b:f8:57:63:ae:82:80:9d:73:ab:
12:10:2c:a2:94:0f:8e:f7:59:66:29:7a:33:80:c6:e8:fb:59:
c3:30:53:da:88:b8:a7:b8:f2:ca:2f:76:06:e1:07:b6:f3:d1:
2c:6a:1e:7d:6c:62:8c:25:52:61:0a:76:06:59:64:c0:86:02:
44:cb:a0:42:17:1c:4a:5a:f2:97:75:29:4e:9e:c5:ec:b4:c9:
36:fc:7d:f6:60:e3:06:41:d9:36:2f:c2:39:bc:7e:89:3a:0a:
64:f2:a5:0a:85:e7:df:e7:81:1a:e7:31:55:0f:ea:df:a8:25:
14:56:12:94:46:73:6b:bd:c2:76:bb:97:2c:a3:fc:16:31:89:
6a:de:33:25:9d:c3:b2:90:d7:e0:48:bf:2c:59:2c:00:6d:30:
36:c1:4c:a6:f1:f1:6f:70:43:86:98:89:8f:48:7c:a6:bd:5a:
59:5a:59:79:b7:d5:ef:66:ce:d2:d1:21:c5:06:71:a4:6e:16:
bf:6a:72:1c:8f:63:54:1d:5f:d8:b7:4c:28:9b:d9:8e:c2:c1:
87:fc:64:19:0a:c4:7e:df:59:d9:af:9d:88:47:cb:c9:ba:c4:
20:cb:7e:df:94:26:ee:70:88:b4:be:f7:ab:f0:21:50:8c:f4:
a4:46:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:09 2025 by rpki-client