Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: k7aQbR/w3Z99Svlv/yhRAul6kIlvsnoTgjceHhC0fnE=
Subject key identifier: 71:E3:BC:70:09:96:C5:A7:85:4E:A8:13:5F:1C:A0:7D:62:20:C1:64
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01967BD72CD6FFA95B9C06B21C8AFE9E60EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 151C
Signing time: Mon 28 Apr 2025 10:00:21 +0000
Manifest this update: Mon 28 Apr 2025 10:00:21 +0000
Manifest next update: Tue 29 Apr 2025 10:00:21 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: cSOmMfW2dINh7sonBM6ty+C/JoeBwQUqRw2t9mVfD78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:2c:d6:ff:a9:5b:9c:06:b2:1c:8a:fe:9e:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Apr 28 10:00:21 2025 GMT
Not After : Apr 29 10:00:21 2025 GMT
Subject: CN=71e3bc700996c5a7854ea8135f1ca07d6220c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:0e:8f:7c:0c:46:47:f0:8f:92:bd:43:e9:
3a:fa:12:6d:61:91:99:b2:e5:d5:15:b8:a2:31:42:
df:53:96:1d:18:ad:bc:67:c8:b1:5e:f8:5d:6e:05:
75:34:39:19:95:10:70:8f:33:77:a7:ed:83:e1:6f:
1e:c7:1e:49:5b:45:b0:d3:1a:b4:fb:c9:4a:47:3a:
75:be:2a:cf:11:be:c6:b8:83:c1:43:f0:50:f5:d2:
9c:fd:03:bd:cb:2a:ce:82:ed:e1:93:4f:b5:3f:9e:
47:1c:d7:1b:ca:72:32:47:02:eb:91:49:33:d1:2d:
ff:ee:c0:43:0b:6e:da:9a:bb:c5:8f:e8:ed:34:c2:
76:d2:cc:8e:a5:a7:53:d9:64:2f:82:6d:82:e3:80:
52:e8:20:1f:14:3a:0f:7b:b3:c8:e9:ba:fc:ce:73:
7d:89:ab:92:46:39:2d:e2:32:5d:ed:b0:b7:94:fb:
64:fd:a0:de:aa:76:52:a9:c5:d0:c8:fb:09:d5:26:
0b:06:de:4e:b1:86:51:cf:cd:be:cd:e9:00:22:b7:
ef:bf:48:f9:99:c9:82:61:68:b1:49:6d:06:54:48:
6d:77:8b:2d:05:c4:26:00:88:1e:0d:85:99:e9:dd:
6a:d6:ea:41:93:4c:71:8f:ba:3a:9d:2c:dc:08:d5:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:BC:70:09:96:C5:A7:85:4E:A8:13:5F:1C:A0:7D:62:20:C1:64
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a7:78:7e:0c:c6:59:8e:ed:e5:9b:03:38:63:da:21:85:a3:
3f:fa:57:db:23:46:51:63:aa:09:66:1b:13:82:ba:ce:a7:cc:
ee:3a:53:5f:90:f0:21:88:0d:b8:43:da:c8:75:2e:8c:ef:66:
76:0c:af:6e:9f:de:c2:d4:18:cf:11:75:17:03:b5:d8:fe:9b:
30:a6:69:82:70:fd:78:68:ab:47:12:3e:6f:84:85:af:cd:73:
4c:83:3b:15:b5:91:f8:fb:6e:e0:a0:63:d0:9e:bb:3d:53:4c:
9b:b8:a0:c1:9c:18:35:5e:07:fc:ca:e3:aa:d4:13:30:ac:cd:
c5:52:d8:e5:18:6b:c4:1b:2a:1e:dc:90:0f:41:b2:04:fe:e3:
65:75:83:05:32:a1:94:58:7b:89:f5:56:14:53:be:05:76:8b:
0f:ec:d1:ee:b6:54:fc:15:aa:50:7f:65:cd:b4:90:f8:0e:9d:
9a:97:b5:e9:32:fd:6f:dd:5c:48:67:9b:6e:b5:35:36:08:b3:
97:e8:3e:ab:ed:96:2c:d5:c4:fe:79:21:be:ad:23:51:b5:4c:
e0:c2:1d:5e:fd:bb:bc:91:83:cb:c8:36:21:f0:82:93:f1:05:
63:4b:5f:99:7a:8e:ed:21:85:49:c7:18:b0:0c:66:12:7a:c2:
d5:0b:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:19 2025 by rpki-client