Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
File: v6yXEHYmO92w7s9b6mV0pAW5hd4.mft (raw, json)
Hash identifier: fuPk5uhfOuA4yMjqcVy1DrTv1Run3zqqL02HBYwUSzk=
Subject key identifier: A8:32:B2:C6:56:01:53:06:8F:D3:81:1D:D5:07:70:96:DB:AD:5A:A8
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 019695CE34D2B25EBDC3E961D85C07830168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
Manifest number: 0460
Signing time: Sat 03 May 2025 11:00:41 +0000
Manifest this update: Sat 03 May 2025 11:00:41 +0000
Manifest next update: Sun 04 May 2025 11:00:41 +0000
Files and hashes: 1: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (hash: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=)
2: v6yXEHYmO92w7s9b6mV0pAW5hd4.crl (hash: sKr+zGWS99WWidJMd5HcbKdQyHPQnUw3WYLnEcmDEb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:ce:34:d2:b2:5e:bd:c3:e9:61:d8:5c:07:83:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: May 3 11:00:41 2025 GMT
Not After : May 4 11:00:41 2025 GMT
Subject: CN=a832b2c6560153068fd3811dd5077096dbad5aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:d1:71:78:2a:2c:3b:60:ac:cd:e2:07:04:
c4:3f:d8:2f:58:1c:58:18:b1:f6:8c:e6:e4:41:31:
54:32:84:e0:83:13:80:7e:84:1b:a4:be:f7:68:18:
6e:04:94:31:23:c6:1c:69:de:ab:ee:98:64:d7:04:
0c:9b:74:9d:29:ca:be:bc:b9:17:0a:d0:e8:45:27:
f8:c7:aa:eb:18:35:cf:47:2d:d9:63:61:9f:6a:90:
f1:e7:b4:27:78:77:43:47:37:02:bf:44:75:dd:33:
b8:d1:d4:9e:3e:21:f2:80:74:08:f2:94:49:05:7b:
e4:8b:82:dd:e9:d5:c4:7d:67:b2:95:e9:a8:74:a4:
c7:76:94:18:7f:66:09:34:ba:f2:fe:0d:6d:93:1e:
2c:07:e1:63:87:17:6f:5b:99:eb:ae:23:47:56:9b:
d9:f9:72:c5:97:d2:ca:bf:43:67:ae:f0:56:be:ea:
5b:86:bb:85:db:47:b6:3a:b0:ca:e6:35:80:a0:60:
2b:df:ad:e4:51:ad:f2:81:92:e6:ef:e9:a9:fe:c5:
18:ae:29:f6:ab:83:af:b7:25:48:1c:11:88:75:67:
d5:32:a0:7c:d2:68:be:7a:89:39:20:e0:38:e1:6c:
03:86:19:5d:b6:5a:0e:7b:29:a3:6e:ae:d4:0d:0b:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:B2:C6:56:01:53:06:8F:D3:81:1D:D5:07:70:96:DB:AD:5A:A8
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8f:ec:e2:50:ed:c1:3b:86:20:5a:de:ce:b2:b7:a6:53:97:
c1:10:6c:b5:1d:7d:0d:61:bc:1b:67:6e:13:c4:44:67:19:60:
7c:40:33:49:84:8b:99:17:cd:80:4b:01:4c:31:b5:f3:58:01:
e7:71:d0:0e:f2:e2:58:21:41:9b:b0:aa:77:44:25:b6:bd:b0:
46:c1:80:30:72:a8:b3:a8:78:53:0b:cc:50:10:da:f0:bc:eb:
63:84:94:91:35:1d:a1:0f:87:06:c3:b9:44:cd:d5:be:1a:74:
99:cd:93:1c:fc:79:bb:1f:87:fc:23:a6:0c:bf:89:7c:e3:b8:
26:75:20:84:2f:a3:99:fa:36:ef:5a:2d:d0:88:e6:dc:a9:74:
35:98:16:6e:d1:3b:c8:c9:26:30:cb:0d:b0:b2:1f:29:75:a1:
53:42:b2:4c:25:1d:05:66:f5:5b:14:1c:c5:9f:c3:e6:fe:0b:
7b:73:ef:c7:e1:02:35:7d:9d:81:3d:78:60:3d:6a:f9:c7:94:
2d:f9:52:7a:3c:69:dd:44:c1:23:15:ab:0e:cc:92:6a:be:0a:
1d:50:c6:2a:4c:d5:cd:e0:82:02:bf:4c:24:ea:fb:28:2a:33:
96:b7:58:6c:0f:92:8c:97:34:cf:a9:d0:dc:17:2d:f8:f6:14:
19:b1:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:05:57 2025 by rpki-client