
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: ElS+cQCzpbJvqQKYpwTNHhJJYE4252t+0NSFb+5CugM=
Subject key identifier: BE:72:6C:EA:F7:17:42:DB:68:3F:15:BA:A0:F1:F4:0C:C5:B3:BF:96
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01967454D88473205D2D04071A6C6242F290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 23:00:39 +0000
Manifest this update: Sat 26 Apr 2025 23:00:39 +0000
Manifest next update: Sun 27 Apr 2025 23:00:39 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: gv6zOA76x6MeOMTMuTxC0IUtDkLKzFYB4b3n8ZQL9VU=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:d8:84:73:20:5d:2d:04:07:1a:6c:62:42:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Apr 26 23:00:39 2025 GMT
Not After : Apr 27 23:00:39 2025 GMT
Subject: CN=be726ceaf71742db683f15baa0f1f40cc5b3bf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:55:e8:53:ac:f2:76:fe:4d:e6:ab:82:86:
52:ca:66:2a:cf:64:2d:86:b5:d7:3e:99:9a:78:85:
5e:7d:a2:84:7f:da:d4:ff:9c:b0:aa:70:78:c3:b5:
cd:c6:0e:c4:8b:c7:8e:1c:00:e8:5a:4e:75:77:43:
ea:e0:0b:ad:b5:6e:a6:d6:1f:79:46:7b:83:b8:86:
3b:09:ad:12:59:86:a5:e7:5c:97:1e:e3:40:f8:00:
19:0c:53:ec:7e:4c:3a:f3:cc:55:08:3b:45:28:25:
c0:26:62:26:af:ce:db:0f:29:2d:78:b4:a4:45:36:
28:77:c8:2d:d6:71:ec:8c:b6:23:02:6e:ba:ae:68:
69:7f:42:d3:fb:cc:ff:3f:de:c8:45:91:76:b4:12:
07:02:08:7a:77:9c:29:3b:49:3b:d2:b8:ba:7e:81:
27:56:3c:01:e7:80:95:34:05:3c:64:52:c2:40:e2:
c6:4e:c4:de:f0:c5:11:b5:3b:f9:7c:0a:ba:cc:73:
7e:52:0a:ad:d3:63:ff:1a:8a:6f:63:27:43:3b:36:
2e:6c:bb:9c:7c:90:09:89:8d:cc:5a:9b:98:eb:46:
c1:6a:9c:6e:71:2c:df:42:bc:57:29:79:6e:43:d0:
7b:de:24:e4:f9:99:26:56:de:36:45:8c:1f:82:d6:
de:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:6C:EA:F7:17:42:DB:68:3F:15:BA:A0:F1:F4:0C:C5:B3:BF:96
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:73:a2:a6:a5:9e:63:bf:ba:b8:ed:8d:c0:46:8b:ba:ba:63:
1f:1d:f3:d6:4a:7e:21:c4:58:bc:7c:b8:49:e2:18:5a:74:30:
24:94:f9:c5:6c:a1:3d:d6:ee:49:74:d7:52:9c:d2:39:8b:e1:
cd:11:1d:02:a4:d4:20:2d:2e:69:32:60:dd:d2:56:82:13:71:
c2:71:4a:23:df:83:8f:bf:16:c5:99:ec:60:59:73:fe:d2:31:
da:77:33:6d:19:32:3a:3a:4d:d2:bb:dd:e7:74:19:16:24:27:
45:00:e7:e6:df:a4:e9:bd:48:1a:f0:bb:44:8b:0b:ad:1e:1d:
10:78:88:3e:6f:92:b2:6f:c0:a6:f8:d6:9c:54:b1:8c:27:78:
03:2e:3d:7c:22:f2:1f:46:47:36:ac:03:51:66:e7:1c:1b:14:
ac:a3:15:40:18:f7:e0:fc:5c:e0:34:84:f9:eb:23:36:48:a2:
3d:42:ee:b7:5e:86:77:10:a3:6f:d5:58:03:e6:ea:7a:55:9b:
48:95:bc:ad:ff:ee:3b:72:54:06:1b:96:3b:94:33:1d:af:f8:
5a:69:a7:f3:4c:45:68:62:4a:48:92:9c:44:ac:20:f7:0e:b9:
67:b0:2b:18:6f:73:01:e7:0d:3f:39:ab:89:c5:0d:53:2b:13:
78:e6:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:35:21 2025 by rpki-client