Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: xAwVJKHozi+qQwS2E2MYHurPvMF2H3WqnF1TcYrQ+BA=
Subject key identifier: 25:6E:2F:E4:90:AC:2F:94:BA:5D:4D:B0:C2:71:00:17:B1:9A:3C:5F
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 01967FB3EA7705CA9813FE807E701DB1445C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0AC1
Signing time: Tue 29 Apr 2025 04:00:19 +0000
Manifest this update: Tue 29 Apr 2025 04:00:19 +0000
Manifest next update: Wed 30 Apr 2025 04:00:19 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: XnHtBn5Ks/zuej8fB219L5Juz+gpCunmCnNIcDAeT8k=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:ea:77:05:ca:98:13:fe:80:7e:70:1d:b1:44:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Apr 29 04:00:19 2025 GMT
Not After : Apr 30 04:00:19 2025 GMT
Subject: CN=256e2fe490ac2f94ba5d4db0c2710017b19a3c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:0a:b6:db:07:28:a4:69:64:13:d0:6e:fd:
c2:75:a0:ca:68:98:d1:d9:3f:db:f7:52:f0:23:34:
ed:1b:ea:74:01:9f:2e:b6:cb:18:f5:d2:d5:5d:2c:
1d:a7:1c:91:40:66:8e:04:63:b7:0b:78:5b:a6:1c:
b7:c4:81:31:6d:a7:df:72:60:d4:09:c4:82:d1:a3:
46:8d:40:bf:27:f9:6f:e8:f7:17:a6:89:09:0b:41:
76:ab:85:9d:e0:15:c5:7c:49:d9:6b:ce:a1:a7:fd:
7a:8e:e9:76:81:8c:d8:c8:e7:21:52:43:c5:95:65:
a3:cc:f0:91:6f:72:f9:c6:b5:6b:fb:56:ff:06:db:
8f:45:bd:03:ba:50:2d:c2:e4:80:a6:80:b3:fd:2b:
c2:d6:e1:91:aa:63:88:7e:d9:d4:7d:7f:ee:c6:9a:
c8:0f:78:75:1c:83:ea:77:7b:af:ff:dc:59:30:f2:
2b:a8:39:46:84:30:38:c9:69:51:11:fa:75:d4:e1:
3e:95:9d:4c:a5:80:37:10:1b:37:b0:9c:4d:28:43:
46:6d:d0:c8:2f:b1:7f:fd:32:2a:3f:e6:59:aa:78:
c7:2a:9b:33:1b:e1:48:e9:59:d3:40:15:b8:01:8c:
12:94:ed:6d:55:52:fa:b9:a2:7c:7b:aa:80:7b:5f:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6E:2F:E4:90:AC:2F:94:BA:5D:4D:B0:C2:71:00:17:B1:9A:3C:5F
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:41:70:0c:81:00:ea:24:73:d0:50:01:be:51:47:b4:00:a8:
83:b7:d0:f0:05:e8:19:22:18:bf:94:2e:39:54:3c:e3:f2:69:
3f:0d:14:5d:7a:f4:97:3c:55:ff:24:63:ca:c2:54:aa:68:92:
a2:22:95:51:ba:d2:b0:8e:c8:e1:4d:9f:7c:ed:88:c9:b4:ea:
4b:f3:19:d9:9f:84:ba:30:06:59:c8:54:89:81:05:a7:fc:f0:
4c:fb:d9:0c:35:b8:ef:f5:93:bd:17:b2:97:85:9a:2d:3f:ca:
ba:9d:66:91:cf:4e:3a:66:5d:48:73:3a:bc:34:fe:c1:9b:85:
b2:7e:1b:49:d5:9d:ca:5b:81:b9:7a:26:88:9d:d7:6d:bd:c7:
35:87:45:b0:ba:9f:b4:d9:42:4e:d4:4c:f3:0f:d3:d1:2c:d4:
f8:d0:62:68:df:3e:76:c3:0a:30:b4:1c:44:bc:50:1c:cb:12:
57:a1:22:bc:fc:2d:f8:92:b4:75:0c:af:d5:e6:41:55:9d:d0:
ef:0a:7f:16:7e:eb:44:cc:41:e4:bc:a9:1a:ab:1d:0b:e6:45:
78:73:c5:05:3a:d0:90:75:bc:0b:83:d6:82:a8:f3:75:af:c3:
fb:68:ee:e2:58:d1:83:d9:5d:4b:0f:a9:40:d2:95:bb:9c:be:
f6:5f:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:50:57 2025 by rpki-client