Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier: NdxiIeryOqsoOgwSKPjiUKGb9Qto8wRMkPRMdt6UY+Y=
Subject key identifier: 56:C1:3D:88:37:2C:6B:34:3D:43:9B:4C:77:A8:27:9D:F0:5E:47:18
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer: /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial: 01968FCBF65D91B6A66143165E8C04A98D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number: 02A9
Signing time: Fri 02 May 2025 07:00:30 +0000
Manifest this update: Fri 02 May 2025 07:00:30 +0000
Manifest next update: Sat 03 May 2025 07:00:30 +0000
Files and hashes: 1: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: YcRYWzQ3TBd2UGmjd3U64QtJ4g2OtB8Y8QgqZMVOcOs=)
2: xfuYQjKIwNsH8n8qNl-5nn5swlA.roa (hash: EURGAPm/xAIC/hIpJIK0VPaCfzGhmdAUIaI/It3KKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:f6:5d:91:b6:a6:61:43:16:5e:8c:04:a9:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Validity
Not Before: May 2 07:00:30 2025 GMT
Not After : May 3 07:00:30 2025 GMT
Subject: CN=56c13d88372c6b343d439b4c77a8279df05e4718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:6d:00:56:2f:2f:01:08:cf:3f:8c:72:c3:
96:3e:ff:88:4e:d0:1e:9b:d2:f3:42:a5:53:4a:41:
de:3a:29:ea:1a:fc:99:67:4b:e8:69:aa:cd:48:a5:
48:55:d2:bb:53:7f:81:c4:65:1f:08:04:d8:3d:d8:
f3:5e:d5:47:a7:c0:56:0b:6e:5d:56:61:6a:c9:0f:
0c:cb:24:9d:33:14:55:b7:09:0d:b9:b7:64:22:bc:
39:65:1b:ac:2a:81:22:58:84:8d:2d:a9:f7:4a:91:
ad:97:7b:b5:6f:9e:e6:83:c9:c3:c5:28:cb:2c:23:
15:09:73:ed:fd:e1:97:8a:d1:cd:40:02:fd:37:f3:
dc:a4:c5:fe:9e:01:85:8c:fa:99:c8:e9:06:71:32:
83:cb:64:bc:72:ab:32:66:0e:b0:91:c3:66:1b:0a:
8f:39:04:0f:5b:4f:40:45:43:9e:ef:90:7d:c3:3f:
03:8c:41:e2:5b:39:ad:1c:ad:4c:d6:39:4a:1f:5f:
f1:d0:69:2c:b4:98:57:94:b7:a3:82:cc:6b:ad:f1:
ed:54:6e:c7:3f:c1:59:73:d7:39:01:fc:68:e9:3e:
ce:64:34:6c:d3:b3:51:08:b9:7e:a7:39:c7:27:e6:
b2:33:d6:a6:97:c0:1b:a0:fa:2c:c6:35:41:ad:a4:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:3D:88:37:2C:6B:34:3D:43:9B:4C:77:A8:27:9D:F0:5E:47:18
X509v3 Authority Key Identifier:
keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:63:3b:f4:16:b2:da:ff:6d:87:7a:7c:c1:21:d9:5a:5e:
34:99:a9:b0:c4:b9:d9:20:d5:1d:60:2b:a8:79:56:0a:42:cf:
53:54:21:e2:9a:4f:a4:c8:1e:6a:b3:cf:57:dc:b2:c1:20:68:
ab:84:ac:1f:5b:47:69:26:1c:df:b5:0a:9d:23:6e:7b:31:81:
3e:c0:57:72:fc:e8:84:1d:7e:96:2a:44:c8:f9:b9:e6:60:84:
55:52:2e:09:af:1d:f7:a7:28:ef:37:ed:0c:88:25:6d:b6:98:
2c:24:f9:a4:e2:ed:36:61:e0:7e:e3:0e:1b:95:20:fc:ce:b4:
ca:42:d4:a3:fb:30:84:33:8b:bb:17:e1:15:f5:d7:cd:03:d3:
bc:7f:7d:10:6d:10:39:3a:64:9b:c4:c6:4b:82:42:4d:48:46:
da:2f:14:ff:07:e7:dd:bd:b5:14:fb:56:be:8e:89:c2:77:de:
03:22:59:d4:fc:7b:7c:a5:81:82:f4:d0:a5:08:89:9a:bb:47:
aa:b9:a0:e3:fe:e2:e1:e8:07:95:8c:ab:74:db:66:78:48:d1:
f3:96:2d:db:22:c5:9d:a3:24:7a:6b:6f:e9:58:ba:59:8b:dd:
6a:2b:9c:05:6f:bc:56:20:66:18:a5:70:8f:b8:47:53:2c:bb:
10:3b:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:33:17 2025 by rpki-client