Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: ge1XiWxDGsoo/6pO5g7SAUVyz8MhT8gnFfh+Rsg1tBs=
Subject key identifier: BA:B8:62:F6:1D:84:E6:E6:A5:AB:C1:C5:1E:B3:E9:9E:DB:1B:92:C2
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01968F5DEF47BDEC0B02F4D60CE5FE094E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 1519
Signing time: Fri 02 May 2025 05:00:20 +0000
Manifest this update: Fri 02 May 2025 05:00:20 +0000
Manifest next update: Sat 03 May 2025 05:00:20 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: HoDB+KWRhnHSRrtsMdMhQf5oQK4zaqKy0E8jnERlo8A=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5d:ef:47:bd:ec:0b:02:f4:d6:0c:e5:fe:09:4e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: May 2 05:00:20 2025 GMT
Not After : May 3 05:00:20 2025 GMT
Subject: CN=bab862f61d84e6e6a5abc1c51eb3e99edb1b92c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:73:7d:7f:fb:c5:12:93:f4:94:f9:97:2f:
bc:6f:3e:89:2e:c9:38:1b:d1:c9:49:60:d6:36:b8:
17:c1:8a:1d:59:10:12:04:eb:34:68:e5:9e:90:79:
2f:1f:5c:58:78:e9:e1:f0:fc:46:31:f4:c9:e4:ae:
f5:6b:8e:9f:62:26:eb:7a:3f:6a:b9:1c:a9:ad:33:
40:94:a0:6a:96:27:62:8b:4b:b4:e0:b0:d7:cb:54:
65:32:5b:c3:17:bc:2a:a7:6a:0f:c9:20:0d:db:eb:
cb:1a:5f:24:94:79:bd:4d:8d:70:56:f1:48:1d:36:
80:8f:19:cd:a6:72:db:f2:55:77:ea:97:ee:98:1b:
f1:93:bc:f7:b4:77:b9:61:a6:f2:b9:80:e8:bb:d2:
46:36:8a:ab:8c:ed:73:8f:68:8a:0c:6a:e2:9d:1a:
6c:fd:bf:e5:f6:cf:e0:94:0c:4e:8c:10:07:49:76:
a0:27:2c:d6:1d:7e:af:0f:fb:2c:9f:62:9f:5a:82:
c0:3b:8c:05:53:06:73:d4:f4:da:3a:da:39:cc:48:
54:07:b4:02:d6:08:76:a6:29:e4:0a:63:57:cd:d3:
a8:7c:3c:05:29:de:33:8c:b2:26:68:fe:f0:42:e7:
44:b2:80:25:bb:67:c0:03:9c:84:bf:6b:f7:84:e6:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:62:F6:1D:84:E6:E6:A5:AB:C1:C5:1E:B3:E9:9E:DB:1B:92:C2
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:39:e4:3c:97:e4:55:76:b0:46:e5:d6:fc:7e:cd:fb:29:c2:
7a:3a:c3:71:c1:3c:da:97:43:45:c3:6d:16:bf:c9:14:e8:89:
d2:12:83:cc:b3:d5:67:87:aa:95:c0:e4:69:38:a4:38:da:fa:
28:7c:f2:bb:e6:c1:e2:8d:55:a0:47:c9:af:16:0f:3a:bd:77:
d9:3b:b2:e2:e4:a6:79:67:b4:6f:c4:2c:b7:d3:79:0f:af:42:
af:51:6c:c8:a8:18:66:26:c2:d6:3f:96:5e:f6:b9:0b:52:b8:
54:7b:52:3b:06:c4:5d:24:cb:21:4d:ba:cc:df:c4:dd:73:20:
83:47:47:2f:6a:eb:b7:c0:7a:63:b0:71:47:d1:d4:d4:79:f9:
83:67:36:d8:c6:f0:7d:22:2c:9d:15:47:31:e2:05:2d:fb:b2:
78:31:8e:89:b7:10:5c:ff:81:91:5a:e3:99:61:94:8c:12:77:
3b:b6:99:d7:1b:54:70:85:18:de:1a:82:1a:e8:26:e4:2c:6d:
89:c6:e6:54:37:59:f9:21:f8:ba:1f:8f:98:3e:f0:e3:71:2d:
35:3a:59:9a:38:21:91:8b:09:ea:ff:8a:07:86:dd:87:a9:12:
d3:d2:e9:1a:30:36:e6:63:47:06:0c:54:fd:e7:44:29:9f:08:
65:c3:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:27:48 2025 by rpki-client