Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File: v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier: R8n3EqelU8iFnkeefQebTY8h6eunADMq0gOJlRPRN2g=
Subject key identifier: 2D:87:91:F4:7A:BA:54:54:9F:8A:4A:92:8D:49:0B:63:09:F8:95:A6
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer: /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial: 0196741DDA604060C00413B0FB12D5C043D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number: 0CE8
Signing time: Sat 26 Apr 2025 22:00:35 +0000
Manifest this update: Sat 26 Apr 2025 22:00:35 +0000
Manifest next update: Sun 27 Apr 2025 22:00:35 +0000
Files and hashes: 1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: qtYWQPHl/pvj+yu0YmaaL3PqubInhgI+6E03Y5q3Axc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:da:60:40:60:c0:04:13:b0:fb:12:d5:c0:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Validity
Not Before: Apr 26 22:00:35 2025 GMT
Not After : Apr 27 22:00:35 2025 GMT
Subject: CN=2d8791f47aba54549f8a4a928d490b6309f895a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:86:7f:46:82:d6:b8:ff:fd:36:eb:06:42:
15:0b:cd:e4:28:63:68:f8:42:21:6b:59:9a:31:04:
e2:0b:4f:55:02:0d:63:63:07:b5:63:b3:01:62:ec:
61:6a:25:57:d7:7b:54:eb:d4:c1:6e:84:00:c0:15:
58:29:d7:5b:a9:da:ec:a7:c3:bc:20:70:47:77:05:
76:ea:eb:ec:7f:03:c1:75:17:b3:c8:d0:12:e8:a4:
c6:f8:82:cc:45:60:8b:f1:6e:c1:a4:66:18:a1:9b:
4f:68:6a:c8:45:c4:ef:e5:a1:67:22:46:e1:e4:1d:
4d:75:d9:2c:30:a7:37:13:2e:11:33:7b:32:33:3d:
6e:a7:47:f0:bc:d1:ab:d6:77:23:0c:9a:57:23:10:
c4:a6:69:7c:48:47:ca:30:e0:c7:50:af:bb:3e:0d:
d0:91:00:5f:7c:ae:c6:ca:bc:e8:93:30:6e:91:d3:
f6:8e:e5:bb:98:c0:5f:b7:da:b9:9c:06:b9:f0:d6:
fb:f1:27:b3:21:99:da:86:13:44:c6:5d:03:0a:23:
95:30:14:f0:a5:c7:fb:cb:d5:af:ad:27:4d:4c:5a:
1e:2a:49:eb:3e:68:b1:80:91:ec:d1:a7:a1:ec:a5:
22:53:e0:3e:40:6c:26:f3:df:48:97:0d:23:d9:a9:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:87:91:F4:7A:BA:54:54:9F:8A:4A:92:8D:49:0B:63:09:F8:95:A6
X509v3 Authority Key Identifier:
keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c0:21:76:ca:c4:1c:2b:7d:cf:7a:a1:bf:de:e2:7d:c3:cb:
64:80:56:59:cd:f4:7e:c2:58:e1:34:58:9f:aa:4f:a8:e1:69:
e6:23:1a:bf:54:c3:0c:f7:8a:2c:ea:4e:b7:95:89:95:e3:38:
9e:a8:3b:b9:f0:29:48:eb:b1:d8:49:ad:96:54:5b:4a:d8:79:
96:b3:ad:ec:9d:8f:85:b1:20:3c:cf:1b:b5:44:00:2c:63:cd:
b0:7e:0c:1e:50:af:bf:da:0b:59:ca:56:7a:12:53:f2:a2:a4:
f0:d8:a0:15:a7:cf:87:7d:11:07:aa:f8:52:87:0a:23:8a:28:
f2:2e:30:1f:35:b0:c1:2f:7a:57:32:3f:1a:6c:60:ee:54:93:
ac:db:d5:4f:bc:16:be:72:be:1a:0a:27:bf:05:07:52:86:14:
19:e3:b9:08:14:fa:1c:98:1c:51:72:59:54:a9:72:1c:75:e3:
b2:e6:5b:26:fa:00:34:46:41:e8:d1:9f:72:be:57:f4:00:f1:
3b:c3:c7:0b:bc:41:e9:b7:d5:40:8b:83:ec:df:ed:9c:a0:5d:
cb:31:13:3c:5b:bc:6e:04:01:d6:b4:da:17:2e:ae:f8:7d:51:
08:3e:2a:1f:7a:1f:ea:42:ef:5c:0f:f5:77:4b:34:84:4d:11:
ba:b0:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:27 2025 by rpki-client