Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: i4GL7o0Mi+keesijKFVa/SVFXlOKiwUMONN01m2qs4E=
Subject key identifier: 7A:E1:DC:A4:56:F3:65:A0:5B:6A:FC:9E:8E:78:B2:9B:7A:91:BF:81
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019682EC344DADE76444058EA7BB7DA9DF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 07A5
Signing time: Tue 29 Apr 2025 19:00:39 +0000
Manifest this update: Tue 29 Apr 2025 19:00:39 +0000
Manifest next update: Wed 30 Apr 2025 19:00:39 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: giFz8v/B2hXREcayar/SPKZqC8tJdMNp4L7Bac22qSY=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:34:4d:ad:e7:64:44:05:8e:a7:bb:7d:a9:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Apr 29 19:00:39 2025 GMT
Not After : Apr 30 19:00:39 2025 GMT
Subject: CN=7ae1dca456f365a05b6afc9e8e78b29b7a91bf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:82:fd:6b:2f:f0:e9:cb:40:8a:a5:29:d3:
bf:60:2e:c8:8f:22:ff:de:00:2c:3f:a1:45:db:4a:
d7:8c:53:f0:af:12:18:a7:f2:66:08:bf:3d:d9:c9:
a4:50:51:2a:76:c4:21:81:22:f6:a8:67:46:82:db:
d7:84:9e:ca:c2:aa:0e:4e:50:62:26:36:b5:6d:c9:
35:33:00:6d:ed:1e:8b:3f:40:6d:63:f7:ef:0a:8c:
82:2e:8d:8d:09:99:38:46:ea:82:2e:9a:df:9d:33:
9f:23:a8:43:77:46:a1:78:ba:c0:2a:9c:92:72:85:
7b:77:39:11:05:b0:be:fb:67:fc:eb:23:ed:01:3f:
76:ae:bf:91:08:9d:61:4b:d1:44:1e:c6:1f:4e:9c:
e7:4f:0e:17:90:6c:21:cc:98:8a:b0:85:d7:a1:b9:
fb:5d:e3:d3:ec:b8:96:ee:53:70:99:f4:7a:93:48:
84:dd:70:bd:18:be:ba:aa:f4:64:7f:ad:52:57:56:
43:99:06:90:ab:66:ee:f0:78:4c:0d:65:15:a1:df:
38:50:9b:72:05:45:61:cd:8a:c4:d4:34:01:17:39:
12:3e:42:c5:09:fc:6c:bd:69:f0:65:eb:0d:03:ba:
16:eb:7a:8b:c3:bd:b9:6c:2f:7d:19:9e:d9:f3:32:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:DC:A4:56:F3:65:A0:5B:6A:FC:9E:8E:78:B2:9B:7A:91:BF:81
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:88:12:02:3b:ec:fe:32:a5:2a:35:3a:d4:7c:c5:76:34:2b:
01:68:80:0c:0a:70:2b:6c:71:df:49:c7:85:bc:85:89:cb:51:
fa:b5:e7:40:0d:e0:89:30:73:d8:49:89:b4:18:31:3b:67:fa:
2e:cf:6c:b6:1b:d9:ea:11:3b:d5:aa:a0:81:41:d1:ac:35:00:
52:fd:58:7d:c5:16:55:00:fe:16:f0:99:2b:5f:0d:6e:f1:39:
7f:57:e9:29:5a:3f:c4:62:21:07:41:64:b5:b8:73:2d:54:4b:
06:a6:b7:72:8d:07:c9:2e:5d:5b:19:1c:88:e9:4d:b6:8d:26:
3e:b1:85:82:a2:f1:3d:3b:66:29:65:0f:8a:15:0e:9c:54:96:
33:a3:6d:67:7f:cf:6e:6e:a3:9c:65:bd:4f:ed:a5:a6:0f:56:
0a:c5:93:7a:00:c4:1d:cc:57:ea:ca:ed:10:6b:d7:19:24:13:
83:78:e3:3a:7e:90:32:d4:a2:13:a7:26:0c:d4:f6:6f:9b:3b:
9a:ac:9e:fa:de:8d:70:3c:f2:6c:0c:b8:fe:11:96:00:36:9c:
62:e7:2a:fb:ae:73:c4:6e:56:82:2b:83:3d:43:ad:cb:c4:5f:
e7:ec:ab:c7:8c:f8:85:c0:04:68:fe:7c:bc:4c:95:fd:80:1b:
16:d5:46:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:50:25 2025 by rpki-client