Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: QfcL/z86lRFI1YBOmtS3uRD+1/v6t7WujvkKJMCOvaY=
Subject key identifier: B7:CB:F4:96:E8:34:32:09:86:80:0A:2F:05:63:E8:9B:05:E1:C3:BE
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 019673E6D4B615244EC6C1E73A366AB0CA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 21:00:29 +0000
Manifest this update: Sat 26 Apr 2025 21:00:29 +0000
Manifest next update: Sun 27 Apr 2025 21:00:29 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: ub0jiMiyHk8hVIgU2+KKGKtfxzGNAgapLAYLO1lRvfY=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:d4:b6:15:24:4e:c6:c1:e7:3a:36:6a:b0:ca:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Apr 26 21:00:29 2025 GMT
Not After : Apr 27 21:00:29 2025 GMT
Subject: CN=b7cbf496e834320986800a2f0563e89b05e1c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:ca:db:a7:83:41:e0:f2:f5:dd:50:20:d8:
59:e7:61:83:47:2c:1b:d0:01:8e:e2:96:7f:17:b7:
b0:87:a3:35:7b:8d:cb:49:7f:8a:fe:4c:fd:f5:8d:
2f:89:cc:8c:23:3d:8c:08:2c:ea:d1:8a:30:b0:e1:
18:d9:a6:f6:9d:00:cc:1e:37:75:57:ac:a4:f9:f4:
f8:1d:b3:65:c6:ec:f1:20:02:4d:7e:1f:5e:94:4a:
61:9a:a0:bd:5f:84:e9:c9:96:0e:95:c0:0e:cb:25:
10:68:05:d9:d7:b2:ac:fe:e4:b8:fb:70:0d:75:8a:
60:b5:64:57:38:08:69:5d:20:3e:f2:ae:1c:e6:c9:
38:78:67:83:d9:fa:68:5f:08:27:60:79:03:04:c5:
79:55:2e:82:73:06:7e:fb:56:69:be:07:a2:f6:cb:
03:d5:fd:60:c7:76:0f:ba:79:ad:ca:9c:2f:5a:29:
fe:c3:a2:a1:d0:91:ee:49:82:04:9d:7d:41:60:4a:
67:4a:c0:23:5f:46:c4:11:d4:51:33:b8:ab:af:07:
db:ff:e1:a1:84:c8:cc:1b:a6:a8:d2:f8:ba:c0:79:
18:f3:01:fa:45:46:c0:2b:da:7c:f5:6b:a7:87:c2:
a1:06:75:08:9e:d5:1c:94:8e:96:6a:5d:b8:f0:bd:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:F4:96:E8:34:32:09:86:80:0A:2F:05:63:E8:9B:05:E1:C3:BE
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:f1:43:80:51:45:f2:47:ea:42:a3:e1:72:b4:72:b3:76:
9a:cd:a7:b2:ec:03:4a:fc:f5:5c:b4:57:a9:48:ed:a1:cf:3f:
49:89:54:e3:06:ec:db:21:d8:20:f4:0a:0b:c4:e8:a7:b5:ff:
90:f2:30:c4:4a:d1:5c:ad:4d:f9:6e:64:8a:1b:50:bd:c7:46:
4c:da:4e:29:7c:70:76:5c:7d:b7:e7:a6:bf:df:f4:75:5d:64:
e3:8f:03:c0:2a:04:c8:82:14:86:46:6a:dd:0b:f3:08:93:ff:
ea:a1:bb:9d:73:a4:f1:8e:bc:a9:1b:3f:ab:89:77:e5:5e:bb:
7b:2f:99:6d:17:99:66:01:04:61:49:e5:9d:72:35:d4:b7:49:
09:55:58:2e:0d:49:bf:20:71:cc:b6:4a:41:40:fc:1f:2f:0c:
aa:46:e0:7e:7f:2c:7f:6e:64:f2:0f:ac:c4:64:75:a7:b2:9f:
c6:91:fa:61:0a:96:22:53:7a:ac:28:d1:26:10:67:cb:b8:4c:
39:0c:23:33:c4:3a:6e:fd:dc:56:92:d8:57:35:a7:e6:47:2a:
dc:67:7e:c3:dc:96:02:6e:37:b7:e8:eb:b4:b7:6c:5f:38:49:
67:85:d7:69:99:5f:26:38:3a:51:1a:3e:ac:0e:cd:dd:d4:f2:
58:69:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:53:26 2025 by rpki-client