Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: S/UwxW+Os/GZBhGT/vxt4Pm0uLNxr/TS+yx1jK2WjiY=
Subject key identifier: C0:82:74:41:68:11:A6:A0:B9:F4:B0:61:A4:52:D7:CD:D5:03:42:1F
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0196865B6359D4A4EE430851F17CB39C6EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 12FC
Signing time: Wed 30 Apr 2025 11:00:58 +0000
Manifest this update: Wed 30 Apr 2025 11:00:58 +0000
Manifest next update: Thu 01 May 2025 11:00:58 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: VfoUehS0HHd3cgtUGOhPXy1iJ3o+M1yHeLdGiw7WqYU=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:63:59:d4:a4:ee:43:08:51:f1:7c:b3:9c:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Apr 30 11:00:58 2025 GMT
Not After : May 1 11:00:58 2025 GMT
Subject: CN=c08274416811a6a0b9f4b061a452d7cdd503421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:06:16:e0:e5:71:e0:49:b7:cf:cf:b0:61:
0a:32:5b:22:5c:69:bd:ba:a9:a4:da:39:0a:b0:0f:
39:1a:a6:7b:96:f2:05:76:b5:1e:78:3b:f8:8f:2f:
19:da:86:7d:fb:2e:b6:29:59:68:fc:db:c4:56:ba:
77:c1:e0:92:77:b4:da:92:73:63:e1:86:82:88:88:
bb:ce:c4:63:35:35:41:aa:dc:83:73:d7:70:63:84:
b8:0a:14:7f:6c:7b:67:7b:69:16:7e:f9:d5:ab:b3:
3f:bf:44:0d:82:56:8e:dd:df:80:6b:d1:93:7a:f3:
9b:d1:b1:94:29:81:29:82:d7:67:a6:bc:33:5d:8d:
66:0b:50:fd:58:8e:e2:98:4a:17:fe:21:a6:70:56:
62:d1:ac:b2:ef:c3:fb:3e:1c:94:31:eb:58:86:65:
d6:c0:6a:e4:de:15:19:ec:41:6c:20:08:e7:ec:6b:
67:33:93:01:5a:8b:a2:ca:b3:b3:09:5f:f3:5a:bf:
d6:29:f3:a6:4f:0e:9d:47:cd:3d:0e:a1:d3:9d:e4:
72:f4:b9:52:d3:90:5b:51:7c:b0:ba:4d:01:6d:48:
95:08:42:da:5e:99:7f:35:74:e1:0a:bb:17:1b:13:
62:e2:67:f6:b1:1f:69:e5:48:43:df:c4:cc:77:1e:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:74:41:68:11:A6:A0:B9:F4:B0:61:A4:52:D7:CD:D5:03:42:1F
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:b7:ca:cc:e7:da:28:98:21:bd:4b:95:f3:64:83:04:9d:
bb:b3:0b:5f:7c:c2:75:d4:8d:47:52:cb:a1:e7:46:3e:f2:41:
b9:98:b6:58:84:62:53:fb:77:d4:29:ef:98:8a:25:dd:13:b3:
04:30:17:8d:80:42:19:a7:fa:92:ff:fa:3f:b2:ee:a8:87:15:
48:52:ea:7d:46:2c:82:78:9b:49:a0:b8:a3:f6:38:26:c0:65:
8b:b9:b9:23:0b:11:63:79:62:db:8a:43:40:95:90:69:53:66:
63:8f:18:50:15:04:b7:66:55:fb:41:08:9a:a2:3c:8a:55:b2:
ad:51:d3:bf:1b:05:4c:e3:e1:ee:dc:d0:a0:23:a7:5d:b0:c5:
8d:46:af:4f:23:e2:69:b6:99:37:e0:7d:4d:92:bc:eb:16:f4:
18:c6:a8:b1:0a:ae:ec:f9:59:46:fe:4f:c4:52:76:d1:c3:62:
05:f0:80:d1:e5:ee:1e:e0:86:aa:f7:86:8c:27:05:f8:af:cb:
05:c9:0a:f2:46:01:f4:54:ec:af:a5:45:42:3e:0d:52:8b:b7:
c7:f6:d6:1c:ec:89:a9:20:0f:9e:44:d0:63:e4:c4:53:16:72:
fb:10:31:ad:b7:4f:8d:2c:ef:38:b1:6d:76:10:bb:6c:90:b6:
33:8c:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:44 2025 by rpki-client