Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: MgnXpoK+ckpBqClMNbt7p+SMMeUgwZ1+6L7pd3uirKk=
Subject key identifier: 4C:1E:83:8C:4C:2C:42:52:04:00:14:42:C7:DF:A3:DE:9F:7F:87:60
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 0196846C7FBCC9DC3ABCCAD1879D5E3C1C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 0FAB
Signing time: Wed 30 Apr 2025 02:00:25 +0000
Manifest this update: Wed 30 Apr 2025 02:00:25 +0000
Manifest next update: Thu 01 May 2025 02:00:25 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: HYQ0VSKByK+oV8jGeCXhFZ8jK/jztE/DLe8qnEvExno=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:7f:bc:c9:dc:3a:bc:ca:d1:87:9d:5e:3c:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Apr 30 02:00:25 2025 GMT
Not After : May 1 02:00:25 2025 GMT
Subject: CN=4c1e838c4c2c425204001442c7dfa3de9f7f8760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:d7:43:4e:45:e7:0b:5a:78:4d:ca:88:26:
a6:46:49:de:3e:32:a5:2e:b5:e2:ad:c4:7b:e6:bc:
fc:f8:64:0e:51:b0:ca:c8:3a:9b:be:26:a0:02:5a:
53:a3:29:e6:99:84:05:7e:1f:0a:27:ce:92:fc:2f:
ec:ff:98:ae:66:38:e4:bc:e1:1c:d4:e9:7b:9a:b3:
1f:da:da:fb:b4:ee:6d:07:dd:8a:08:8f:5d:4a:d0:
6a:74:80:a6:49:f6:ba:b4:cf:0b:8a:ed:9b:39:fa:
7f:fd:5a:56:e9:ae:5b:70:d1:9e:c8:93:a7:16:de:
51:94:ac:33:8b:22:d1:02:77:f2:65:16:72:97:74:
1d:9c:5e:bc:ca:4e:e0:17:c2:91:23:41:96:91:91:
0c:24:fd:47:df:48:05:bf:80:1a:19:6c:22:39:69:
52:96:09:8a:c0:b4:0c:36:95:93:bb:ad:65:62:41:
c3:90:85:08:cd:84:99:6a:9f:da:d7:11:ff:34:47:
c0:2e:c8:5f:71:19:58:f2:fa:03:84:df:d8:d0:d6:
43:90:ec:2a:01:35:bb:d3:c6:74:09:ce:06:07:48:
34:b5:0a:49:38:69:3a:35:21:59:c8:b4:52:b2:92:
d8:ed:04:89:ca:cf:d5:97:94:e0:c3:ac:8b:23:0b:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1E:83:8C:4C:2C:42:52:04:00:14:42:C7:DF:A3:DE:9F:7F:87:60
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7f:9f:53:92:3a:09:be:33:ab:ed:12:39:7a:cd:79:9d:ff:
4d:36:c0:a3:41:72:f1:94:47:c9:28:d2:5e:62:ec:78:e8:01:
13:ac:e0:5d:0d:1f:fc:7b:9d:56:1a:0f:85:3b:36:a6:45:11:
c5:8d:e2:6f:b1:0c:b9:e1:c2:f1:59:5d:31:2b:a7:2d:55:c5:
26:2c:e6:74:7c:d0:1d:a6:26:e3:74:8c:4e:cd:72:c0:7a:ee:
25:54:e9:81:26:2c:24:d1:df:ae:48:d9:10:39:9d:84:f1:a8:
be:e7:56:67:bd:51:c2:a4:43:47:45:25:e9:7d:37:f9:80:51:
3c:5d:38:ab:f4:31:c1:86:da:22:82:ac:77:db:3e:c8:7c:f3:
58:f3:06:d6:60:60:64:c8:10:78:7d:85:da:c1:a6:8f:8b:4e:
62:79:2f:9a:36:d1:bb:75:86:02:4b:4c:f8:dd:0e:cd:ae:30:
2c:78:6b:94:fa:d1:ab:c9:a4:ce:29:e3:b6:ea:42:87:ce:34:
bb:c9:43:cd:47:1d:29:09:9c:70:f0:e1:69:58:76:c2:f9:b2:
a8:e3:d8:6e:fd:08:26:18:7b:57:9f:01:3f:ff:1d:aa:4b:3e:
b5:a2:ae:62:bb:5d:45:70:d1:8e:be:15:02:07:4e:6a:78:a7:
63:d6:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:54 2025 by rpki-client