Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: PvbQJSoluNtkP1P6XrjRRctdxK+Q2egbAVORhUOcHWA=
Subject key identifier: 14:C0:76:71:2F:67:32:59:F8:91:98:C7:9E:BA:76:3E:4F:EB:FB:00
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 01969002975E5488EFEB4ADC065FD912F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 08:00:11 +0000
Manifest this update: Fri 02 May 2025 08:00:11 +0000
Manifest next update: Sat 03 May 2025 08:00:11 +0000
Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: XFMdOoLrcjvjdj4Y2RGjxGEtBup5e10ovRtsNkFYcDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:97:5e:54:88:ef:eb:4a:dc:06:5f:d9:12:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: May 2 08:00:11 2025 GMT
Not After : May 3 08:00:11 2025 GMT
Subject: CN=14c076712f673259f89198c79eba763e4febfb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:0d:94:26:30:5b:18:12:97:a1:7f:94:2b:
fb:de:46:02:8f:df:d2:eb:8d:5d:b7:fb:72:fb:6f:
b1:a2:93:06:78:e9:15:0f:b0:96:83:d7:ac:85:6c:
ee:1c:f6:92:f0:a3:e3:de:be:30:50:03:3e:75:b8:
37:34:b0:b2:c9:b5:b3:11:c1:20:27:d8:fa:30:0f:
e9:d5:34:54:e7:f5:9b:04:6f:67:fd:5c:0b:0f:3f:
91:75:86:ef:86:18:b8:50:5d:6c:59:97:95:4f:ea:
82:18:5d:a3:d4:bc:af:f0:09:25:46:9b:20:11:9c:
43:39:67:e4:0e:73:82:a1:23:9a:a1:cb:c3:55:8c:
e9:d1:f3:aa:c0:8f:23:6c:dc:d1:84:e3:2d:75:ec:
e1:56:2c:3f:a3:86:dd:b9:4c:27:7d:77:0f:65:8b:
9c:a4:8f:b8:59:0b:5f:b0:ae:73:d9:0b:05:44:c8:
3e:13:cc:d7:71:58:37:b8:83:71:bf:63:b4:b7:ab:
25:2e:c9:1b:e5:a0:32:bf:5a:0f:ce:77:cc:c0:c1:
64:f6:9a:e1:e4:17:d7:7c:46:52:f3:7f:a5:08:9b:
83:ae:23:43:82:21:77:4e:44:d2:df:cb:d3:42:e0:
60:e3:66:0c:93:71:cf:82:9f:fd:0b:ee:c9:ff:6c:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C0:76:71:2F:67:32:59:F8:91:98:C7:9E:BA:76:3E:4F:EB:FB:00
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:93:4b:3f:b3:cb:cd:68:77:b8:89:b6:37:9e:94:40:45:
f5:0f:61:3e:3d:bf:bb:24:8f:a0:d0:39:61:f1:d5:c8:36:f4:
0c:f2:fd:0d:8b:d6:7f:b8:de:db:f8:86:0b:51:f6:82:4a:51:
d3:69:cc:f5:2e:da:99:c4:74:1c:0f:df:34:f8:f1:ed:59:b8:
b0:66:be:52:70:22:f7:ad:a8:c0:72:32:c1:87:be:ac:5e:f1:
dd:82:d7:77:81:e7:c3:4b:c5:0b:b5:d0:39:6a:78:d0:39:c2:
f4:82:b0:68:62:76:43:36:dc:53:a5:7a:94:9e:f5:2f:11:bb:
c9:87:ee:af:6a:25:7f:0c:a7:e2:8c:59:86:7a:b6:ad:4b:e1:
7b:cf:83:34:16:41:53:09:56:6b:ee:74:80:e0:81:db:da:d2:
3f:af:00:69:6e:61:09:c8:59:e4:c0:93:fd:7f:ec:03:a2:39:
6a:f6:92:e7:2e:3e:77:b2:6b:bb:12:fa:71:1c:17:d1:36:6e:
b0:aa:53:5d:52:88:4d:7b:c2:b1:5e:97:eb:3e:e7:91:15:cb:
07:da:16:d3:2b:12:78:fe:ed:fa:32:0f:6c:40:ec:25:ea:52:
df:fb:64:43:60:80:3f:f2:ed:63:aa:39:a7:aa:a9:31:34:0b:
72:24:79:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:17:46 2025 by rpki-client