Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: rEuqOPLltqItHXvwN6jry61/fdGdJxcIDZdMUCeH0v4=
Subject key identifier: 6B:65:C7:B7:C3:66:37:51:CE:A2:66:51:3C:EB:20:F7:4D:52:8E:B9
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019673B04052CCA91A2B0B564D4FF884E6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 20:00:52 +0000
Manifest this update: Sat 26 Apr 2025 20:00:52 +0000
Manifest next update: Sun 27 Apr 2025 20:00:52 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: 8n86z1DWQE64z47x7i7+SKsfuxMsBrkCNhiqlT/KIO4=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:40:52:cc:a9:1a:2b:0b:56:4d:4f:f8:84:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Apr 26 20:00:52 2025 GMT
Not After : Apr 27 20:00:52 2025 GMT
Subject: CN=6b65c7b7c3663751cea266513ceb20f74d528eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:76:29:5c:e0:97:bc:90:03:dd:67:31:b2:
6d:32:b0:23:cb:f5:ab:f4:6e:da:0b:92:f7:8e:63:
af:55:9f:e8:b0:b0:98:13:5f:95:85:00:1f:c4:a7:
c2:7d:06:cb:47:39:fc:b6:26:03:31:14:14:f3:c2:
e3:25:06:74:5c:d6:d7:19:19:5f:b5:ed:71:44:bf:
3b:81:a9:72:f1:f6:25:2b:78:f0:32:c3:81:e9:e5:
ef:37:6d:ec:5d:b2:4a:15:f5:fb:67:7c:8d:85:93:
53:e0:51:0d:79:fc:72:7f:74:b8:21:4b:17:94:d6:
80:5b:23:35:60:57:c3:e2:c0:f6:aa:72:35:ed:5a:
b3:0c:63:4f:0c:ce:bf:1c:c7:b3:64:e3:95:7c:ef:
81:86:7b:44:5f:64:9a:05:7e:a7:6e:2c:e6:0e:b1:
52:08:d7:1b:76:89:c1:d1:71:68:69:5b:ae:d9:59:
65:bb:85:37:d4:bc:17:28:2c:9b:9d:08:6f:54:ab:
db:a7:dc:70:5c:fa:24:0f:28:36:67:76:05:1f:63:
50:cb:71:a4:46:80:d4:00:a0:cb:ef:fa:7d:1b:71:
c8:f2:ed:d2:ea:07:b1:8a:7a:e1:53:9e:b0:87:c8:
54:33:94:67:6b:c7:c0:08:0b:de:74:7b:65:fe:54:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:C7:B7:C3:66:37:51:CE:A2:66:51:3C:EB:20:F7:4D:52:8E:B9
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:26:a1:46:63:4e:84:99:f4:45:37:2a:54:7f:5a:96:8d:
21:c4:6a:4c:9d:f5:74:ad:66:d4:8e:13:7a:72:08:40:8e:c9:
b3:d2:82:a1:b1:4a:78:4d:35:5d:14:61:34:2c:ed:6a:a6:64:
69:d2:ed:65:62:68:23:63:0c:cf:4a:93:00:49:5f:7d:f6:ae:
4f:22:00:9d:5f:66:1d:74:7c:0b:90:7e:84:f8:f0:15:08:8b:
2d:a9:3f:fe:05:f6:a9:e9:63:e1:8f:5b:b8:26:02:30:3b:f9:
ba:10:b6:7c:4c:40:79:64:ad:23:3d:46:0f:1b:ef:8b:56:5c:
4a:71:28:ae:81:71:31:d1:d4:c2:1d:89:f1:98:75:68:1a:0a:
ff:cd:4c:6d:45:df:92:9c:da:aa:67:1a:44:8d:2d:8e:96:8e:
9f:96:e3:c6:5e:ed:7d:26:c5:51:24:85:8f:41:59:3b:85:ff:
e6:45:31:30:ff:66:24:9c:0c:43:a3:06:32:d0:e1:12:82:48:
c3:37:7a:45:41:7f:0d:11:27:c7:49:4b:77:3d:1d:5e:51:54:
80:ab:7d:32:48:ea:b2:54:ca:8f:76:b9:94:54:3d:d9:13:c3:
82:2d:83:2c:48:4c:5b:90:1e:c8:bd:3a:30:81:7b:ca:f6:1b:
a3:1f:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:26 2025 by rpki-client