Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: yqsOVB/vwJK0f3ZKHjQmw+/sEgioyDG2H0IL3g6Q7s4=
Subject key identifier: 25:34:35:7D:E3:3C:A8:48:E3:86:74:63:C5:48:CB:F2:0A:31:BA:62
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01963FC24571F22D6CA4DB01F4A873E806E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0660
Signing time: Wed 16 Apr 2025 18:00:18 +0000
Manifest this update: Wed 16 Apr 2025 18:00:18 +0000
Manifest next update: Thu 17 Apr 2025 18:00:18 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 6SYRxNJcl7EY0Di+0lI/1OzEuCKV8Vz7n9u9Rloc+Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:45:71:f2:2d:6c:a4:db:01:f4:a8:73:e8:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Apr 16 18:00:18 2025 GMT
Not After : Apr 17 18:00:18 2025 GMT
Subject: CN=2534357de33ca848e3867463c548cbf20a31ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:ad:1b:d9:56:57:8e:5c:52:1f:c6:e5:e5:
d4:7c:b2:22:9c:67:1a:63:1c:39:d7:0a:fe:bd:11:
a7:c0:2f:e1:ad:d7:d7:a5:2c:07:92:c6:dc:1d:fc:
06:24:2f:97:50:d0:5b:dd:76:53:c9:14:2d:8b:b5:
52:0c:80:f2:eb:f1:69:40:b1:90:37:02:35:0f:3d:
bd:14:29:1b:44:b5:6b:6e:51:b6:75:2e:e6:a6:f6:
e6:a2:43:1e:c6:f4:57:58:7c:5f:d5:a7:b3:f1:f5:
71:b6:87:4d:05:b4:ae:1b:1f:c9:46:85:71:db:f1:
c4:06:13:45:d4:79:bd:55:8a:77:b2:10:6a:27:22:
e0:7f:d9:52:f2:76:14:ae:6f:13:04:c9:7b:9c:5d:
92:28:7d:ed:b7:8c:d3:f2:f7:ca:ed:f6:82:1a:a1:
bb:76:f0:b4:b3:39:a8:98:5b:2e:b0:2d:74:2c:f4:
f9:b1:26:67:28:eb:61:33:fb:26:32:e4:b6:6f:d4:
3a:93:1b:a6:a6:fa:83:88:3b:97:65:e5:04:67:0c:
b6:a1:82:e3:28:0d:ff:69:73:67:cb:f0:1b:08:29:
3b:21:08:c3:ff:71:d7:3b:76:a8:22:b7:d7:76:9b:
72:d6:a4:61:ce:11:f6:1d:05:d4:17:25:77:4e:e5:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:35:7D:E3:3C:A8:48:E3:86:74:63:C5:48:CB:F2:0A:31:BA:62
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:f1:19:74:ee:37:01:95:0a:79:1a:00:98:f3:f5:66:fe:
6f:49:9c:59:fa:20:1e:e6:66:25:8e:ba:0d:a0:47:4e:24:dd:
36:d9:68:8a:38:32:9f:1c:0d:7f:15:91:14:be:48:94:e8:79:
b6:49:7d:ca:2b:00:b1:b9:d9:a4:ea:2b:32:7e:87:3a:6b:93:
aa:d1:56:9e:28:cf:e9:cc:b1:15:be:dd:b8:56:39:9b:ed:f6:
09:78:7d:6b:14:2f:e0:62:68:5f:11:a2:aa:d8:5b:2b:c8:25:
34:bd:d2:90:48:92:76:36:16:6c:2f:ba:99:67:f6:df:06:66:
a6:a1:1c:b8:a2:ff:46:55:7d:ca:e2:a3:6b:df:4d:4f:a9:35:
1d:d8:0c:0c:1c:d9:7e:e3:3e:2c:6b:f3:9a:10:21:d5:14:e3:
d7:7e:a6:90:c6:29:e3:f7:91:4e:8c:db:09:2f:67:5c:d1:44:
09:66:21:69:d4:91:c6:4a:ee:de:4c:52:43:11:09:5d:31:8b:
3e:e8:99:a4:7e:73:b0:e5:e1:b3:6c:66:e0:07:fe:68:bb:48:
1b:63:51:0d:e1:84:0f:f2:0a:57:58:da:b9:3e:ac:de:f4:0e:
cc:9c:51:3c:bb:3a:b5:99:89:f6:2c:9a:77:46:e8:27:ba:4d:
95:1d:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:38:56 2025 by rpki-client