Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: ICQLXOA1u+s8ot6Ae1KMmVZq5qIN8+4Ge+AC4rlhMXc=
Subject key identifier: 8B:65:6B:3A:22:49:3A:EB:07:7A:0D:8A:6D:B7:07:48:F3:51:3B:6D
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01967454B1BE5A205F73D418DEA71B1921F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1231
Signing time: Sat 26 Apr 2025 23:00:29 +0000
Manifest this update: Sat 26 Apr 2025 23:00:29 +0000
Manifest next update: Sun 27 Apr 2025 23:00:29 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: /gu1yRioI9BFAvhL/6HSgvElekh+D4TjJQ0mKZSsY4s=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:b1:be:5a:20:5f:73:d4:18:de:a7:1b:19:21:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Apr 26 23:00:29 2025 GMT
Not After : Apr 27 23:00:29 2025 GMT
Subject: CN=8b656b3a22493aeb077a0d8a6db70748f3513b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:d3:f8:47:ec:7c:fd:1f:34:20:78:a2:b8:
e3:4c:9d:db:c1:ff:9e:7d:ae:4e:74:f4:84:c9:9b:
83:9b:92:47:47:5f:e5:70:ea:37:07:a0:2a:a2:83:
cc:4b:8c:61:7f:4c:22:45:55:82:eb:24:e5:b3:0a:
81:27:33:62:74:af:95:73:3f:90:30:32:7e:d9:b2:
94:20:04:f3:ad:72:fe:20:a7:c3:67:d2:49:21:74:
0e:86:37:2d:03:73:12:65:01:5d:b1:28:5f:b0:04:
a8:e0:71:fd:6d:f4:fb:8c:33:db:0b:97:e7:4e:95:
97:05:b8:fa:45:87:73:ae:8c:b7:78:b8:03:72:9e:
b1:dd:65:35:7e:3d:24:7d:7c:83:42:dd:fa:2d:db:
08:eb:33:b7:d3:df:c6:a1:3d:01:46:73:d5:c2:b8:
98:73:7f:84:fc:89:d0:71:ad:20:e0:fe:d8:d4:18:
c7:f4:28:70:3a:03:85:fe:3d:32:ad:3b:42:6f:e4:
13:3b:76:3c:7f:de:b4:4a:75:e0:8e:f0:c9:f5:ad:
18:2a:d0:b4:62:69:15:ea:1e:a9:ad:7c:2a:a8:22:
85:ea:59:9d:20:7d:55:2a:f8:4a:0e:36:ac:f1:e9:
33:a5:79:e3:52:b9:9c:51:33:cd:63:74:39:94:0a:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:6B:3A:22:49:3A:EB:07:7A:0D:8A:6D:B7:07:48:F3:51:3B:6D
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b0:a1:16:6d:94:f8:1d:fa:89:77:80:91:5d:bd:1d:c3:8d:
1a:a9:f4:37:93:af:a6:41:e0:fa:21:69:4b:71:71:1f:e1:a0:
cb:cc:ba:b9:19:b3:0f:75:ba:fb:36:31:3e:71:7a:b8:e0:e0:
f6:96:f1:0f:0b:be:0a:6c:32:84:b4:7a:61:23:57:bd:76:79:
91:a9:f9:83:e2:45:b2:6a:5d:9f:19:31:09:74:34:4d:0e:7f:
8d:59:05:11:da:35:4d:76:d9:a1:21:f3:9d:a6:a8:da:97:05:
1f:5b:62:52:5b:01:99:4d:53:ad:29:da:52:70:67:7a:13:53:
b0:52:e5:d5:dd:d3:bd:fa:bc:59:41:ce:73:e1:41:05:aa:6d:
f9:79:2b:b6:7c:10:41:88:2c:91:db:b4:a2:0d:1b:db:b0:fa:
35:04:da:76:f3:53:f5:78:77:b0:63:61:5c:c9:4d:9f:59:06:
46:4b:f8:94:63:0a:d8:20:4b:92:ca:55:db:8e:b1:cf:94:4f:
43:ec:07:3b:7b:04:73:d0:df:58:fd:53:c0:7c:6b:57:c3:4b:
05:3d:a6:70:78:9f:b4:28:48:3a:5c:dd:68:32:aa:97:f7:dd:
ac:9c:a4:4a:fa:0f:27:98:a7:c6:28:af:99:8a:00:f8:49:1b:
cf:3e:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:02 2025 by rpki-client