Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: Es8JwHIMIBI/1cJFAwyOzJCMzvhYiwHjRlBZs20c+qQ=
Subject key identifier: ED:DF:9C:87:A5:A3:FE:25:97:5B:EB:04:D4:3E:8F:DB:AA:FE:B6:2B
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 0196933B2413A8040E1E330012F941700309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 23:00:48 +0000
Manifest this update: Fri 02 May 2025 23:00:48 +0000
Manifest next update: Sat 03 May 2025 23:00:48 +0000
Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: p4C3BY/Buvus2KKSQncD4/HdPAkO+F/SieCfp66Kemw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:3b:24:13:a8:04:0e:1e:33:00:12:f9:41:70:03:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: May 2 23:00:48 2025 GMT
Not After : May 3 23:00:48 2025 GMT
Subject: CN=eddf9c87a5a3fe25975beb04d43e8fdbaafeb62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:39:e9:54:f1:46:af:8a:e8:7b:08:47:06:
08:de:37:36:a4:d8:ac:05:87:3f:26:b6:40:8c:8b:
ba:dc:80:88:3f:8a:8c:61:9b:49:10:c2:21:92:b2:
3b:04:62:3d:7f:80:fd:78:b9:f9:49:11:f3:e0:fb:
a6:fa:00:a5:72:8b:af:14:65:7e:57:5f:42:46:53:
ba:2d:5e:e0:00:8b:ca:80:c9:0e:bd:a4:e6:79:94:
4e:97:4a:d4:2d:93:71:73:f3:47:12:50:4f:9e:a7:
c2:b2:ed:67:cb:dd:78:f3:bb:6f:9a:48:8f:a1:68:
92:35:cd:96:4f:bb:2e:a9:10:2b:12:12:50:73:f5:
81:e6:47:ba:2e:db:9a:03:4c:3e:3a:88:1d:92:ed:
d9:b7:e1:4d:19:36:23:f4:af:13:23:b4:46:cc:e4:
23:10:20:ec:ed:68:b1:07:66:02:51:1b:0c:71:96:
a2:98:1f:a7:97:f6:0b:03:52:74:1a:c0:87:94:f5:
28:4f:6c:ae:f6:9e:18:ed:ad:b4:d1:32:13:dd:fc:
de:35:0d:18:08:9b:b3:f2:38:51:28:bd:01:9e:32:
05:23:51:fa:2d:5a:85:54:e9:04:c7:d2:08:a6:08:
25:9e:f3:f1:42:6d:87:5f:3d:31:97:ad:16:90:98:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:9C:87:A5:A3:FE:25:97:5B:EB:04:D4:3E:8F:DB:AA:FE:B6:2B
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:a2:65:52:1d:3e:49:2d:1a:e8:71:98:af:70:77:1c:ab:
a5:f4:b5:71:c1:ef:9f:cc:c8:79:9f:a6:2e:72:61:28:0c:5f:
6d:43:80:fd:1c:1c:08:6a:79:af:85:2b:2e:98:28:21:95:64:
76:7f:7a:f7:97:a2:d4:ca:66:b3:41:cf:6f:c6:13:23:ec:8f:
b9:c0:a1:08:b6:62:89:c3:c5:54:fd:3d:78:8f:16:ce:5d:59:
48:6f:2b:fe:72:54:22:fb:8f:30:de:0c:a2:1f:64:bd:1e:fa:
e9:ef:e3:89:ff:e0:cd:ad:84:ec:74:10:fb:f1:83:6e:b3:ee:
80:09:b5:ee:3d:60:6a:09:54:a2:66:4e:9a:05:f7:00:81:8d:
5a:ec:5e:13:45:b7:de:e6:66:7b:79:f2:e1:b4:c9:73:69:55:
17:a0:ad:ee:1e:5f:5e:0b:8a:82:f5:83:88:f7:ce:55:ea:14:
0e:f6:15:86:28:55:97:82:88:1a:f7:8f:62:68:59:65:ce:a2:
81:45:7c:2b:ac:eb:df:3c:e3:78:d1:32:60:b1:20:bb:b4:29:
b9:f0:52:89:64:89:89:8e:42:3d:f7:fb:ec:33:d1:a2:6a:aa:
ed:e1:52:8e:53:6b:42:f4:b6:c1:9b:ac:29:8b:db:88:08:6a:
50:19:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:31:14 2025 by rpki-client