Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: wmcuRqQw5hPMi1VLNpjnwFEf0qQ8puCicggxX91QxH4=
Subject key identifier: A8:71:EE:4C:AE:CD:E1:45:1D:BC:67:D8:FF:C8:03:C3:B4:7A:76:46
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019686C8DA40A267BBA7CCC3D990138B41AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 14A9
Signing time: Wed 30 Apr 2025 13:00:32 +0000
Manifest this update: Wed 30 Apr 2025 13:00:32 +0000
Manifest next update: Thu 01 May 2025 13:00:32 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: tXGK01lxdGYUDyoB8apcMsBYHMCIsUHXl/Rql1VjbAI=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:da:40:a2:67:bb:a7:cc:c3:d9:90:13:8b:41:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Apr 30 13:00:32 2025 GMT
Not After : May 1 13:00:32 2025 GMT
Subject: CN=a871ee4caecde1451dbc67d8ffc803c3b47a7646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:75:b3:05:db:4e:db:a2:b9:50:85:e9:af:
95:30:05:a2:81:3e:ab:ba:37:9a:3c:e7:15:84:d6:
f2:ed:e4:ba:a7:8d:05:00:bb:12:bf:f7:35:d3:b1:
a6:a6:94:f8:2b:a5:1c:b1:bd:30:12:0a:82:d8:0c:
da:ba:61:e9:34:ee:6a:33:e8:ca:67:4d:c7:86:5b:
66:fa:37:63:6c:07:73:78:e5:f9:a3:2b:fe:ce:5b:
9e:f9:71:2e:c5:2e:8f:01:7a:27:a7:78:f2:76:f8:
97:f0:ab:30:21:cb:52:6b:55:23:54:40:86:56:9b:
4b:66:8b:84:0c:84:d6:06:43:f8:25:35:83:01:2a:
38:1b:37:a1:33:5f:c8:29:f5:a5:53:2e:02:ed:24:
53:e0:6e:2a:9d:f0:fd:99:53:43:c8:30:0f:f0:7a:
02:20:76:7e:98:26:0b:ce:87:ee:1d:95:dd:fe:7e:
74:61:67:68:5d:6d:1e:93:74:70:56:6f:a4:7b:18:
21:b8:f2:33:e5:5f:3b:b2:79:f2:09:7e:f8:a6:30:
06:11:e7:21:57:04:61:7e:59:9e:7b:1d:2b:f3:26:
2f:02:a7:ad:4c:9b:87:b1:92:70:e9:bb:fb:c1:e1:
ab:11:55:82:ae:3c:0d:c4:70:19:7f:66:39:7d:58:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:EE:4C:AE:CD:E1:45:1D:BC:67:D8:FF:C8:03:C3:B4:7A:76:46
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ef:f6:d5:1a:a8:9a:ac:4a:0f:2f:0a:fa:31:2d:0e:11:b0:
3c:7c:61:54:95:d2:4c:d5:2e:7e:33:a8:da:22:3c:be:09:cc:
18:5c:a3:03:7a:cc:39:9a:dd:23:02:e3:a4:ba:51:ff:eb:52:
25:05:dd:32:54:1c:e8:b9:e1:a5:d0:c8:6e:a6:60:06:af:ee:
3a:4f:1d:9c:f3:ae:0a:5d:0b:ea:47:1a:cd:ca:1d:6c:f7:8f:
12:54:13:c1:9c:07:35:b0:f3:ff:35:5b:99:b6:5e:df:a6:bf:
61:5a:d9:1c:45:71:f6:61:c2:6a:47:9f:b9:66:a3:5a:70:09:
4b:00:10:13:f4:5c:52:c1:89:bd:e2:8a:67:81:fc:fc:40:9d:
7a:bb:c1:1c:a3:38:f5:da:dc:ca:a1:e8:d7:5f:58:e5:2b:9b:
7b:5d:9d:ac:2e:80:35:8b:67:01:f3:04:f3:52:c5:a4:70:b9:
e2:bb:2b:f9:89:1f:8e:b7:0a:93:24:bd:89:ee:9e:06:dd:29:
50:40:19:b8:1d:1c:b6:19:0f:86:84:98:5d:dd:b7:bd:c7:7c:
1c:c7:ab:8a:83:d6:f3:e9:cc:c0:0c:ff:f8:34:fd:9e:01:06:
df:c6:bf:5f:c7:d5:17:8e:a4:bf:62:ba:05:2f:14:a1:25:17:
6a:e9:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:03:48 2025 by rpki-client