Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: vqpSWyr0E4ULbb1HBZu0vqcJoIwy+dZVB7R3lziZljY=
Subject key identifier: 0B:A9:16:B1:22:B3:D3:8A:3F:9D:CF:EB:E1:78:68:DE:C3:C7:ED:03
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 01967E33ACD3E4097CCBD9A5173C09D5B9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 1518
Signing time: Mon 28 Apr 2025 21:00:37 +0000
Manifest this update: Mon 28 Apr 2025 21:00:37 +0000
Manifest next update: Tue 29 Apr 2025 21:00:37 +0000
Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=)
2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: MtFes4r0riKPNBHTyvjh8oRCtWXRNVYS7wC95hlG6tA=)
3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=)
4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:ac:d3:e4:09:7c:cb:d9:a5:17:3c:09:d5:b9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Apr 28 21:00:37 2025 GMT
Not After : Apr 29 21:00:37 2025 GMT
Subject: CN=0ba916b122b3d38a3f9dcfebe17868dec3c7ed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:a1:bf:34:e9:9a:32:96:76:80:5b:c3:25:
80:46:35:d6:d5:a1:3d:9d:10:4c:64:5c:a8:b2:bd:
e0:17:24:d4:53:7f:89:3f:09:24:bc:ef:46:a6:71:
23:af:ae:90:cb:fb:53:c5:e4:4d:15:0f:3c:29:13:
3f:95:83:b9:0a:85:a6:7a:ac:37:e7:3b:ab:d9:e7:
65:c1:55:ed:fa:fe:97:fe:62:de:d0:d3:43:23:0f:
75:52:a5:3e:62:65:10:fa:3b:c1:e1:e7:c3:27:80:
63:fb:b5:fd:8f:5b:e9:5e:0b:21:b3:e4:1c:39:8a:
ac:71:72:45:bc:1a:e7:43:3d:59:b6:d3:bc:13:e4:
59:4c:12:b7:e4:75:18:1c:37:6e:71:a4:02:d3:8f:
a2:65:d3:c3:58:17:71:fb:b5:e7:e9:e5:d4:6e:26:
d1:7e:df:62:5d:c5:74:3e:3d:a9:31:ac:0f:46:7f:
4d:d6:11:fc:4d:8b:69:dc:b2:11:12:32:0a:20:bf:
bf:bf:03:22:1b:1e:91:18:26:38:a9:e9:3f:ad:68:
91:32:1c:90:a6:d3:1d:ed:eb:d3:fd:90:bd:a4:e8:
1e:4f:ba:92:e4:17:69:35:77:5c:57:51:97:39:92:
4d:2f:82:8e:16:6c:1a:9a:21:f8:6f:f4:9e:00:01:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A9:16:B1:22:B3:D3:8A:3F:9D:CF:EB:E1:78:68:DE:C3:C7:ED:03
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6a:f6:69:42:c6:d2:08:16:85:34:6d:fc:2f:54:a1:b9:dd:
55:88:d0:3b:49:c7:58:4b:13:16:11:ae:62:7f:8f:cc:df:74:
84:01:77:6c:28:7b:59:7d:2d:6c:b7:db:34:06:fd:2e:28:bd:
02:e3:61:8f:83:d8:dc:8d:68:ac:31:1b:fd:0c:1a:14:0a:1b:
79:9a:62:b0:1b:ea:0c:ed:57:5a:93:2f:96:15:8c:31:95:6a:
20:56:ba:d9:bf:5a:d5:15:64:bc:d9:b3:e9:3e:76:92:63:a6:
be:0c:8c:37:65:70:71:24:8f:d5:2c:aa:74:30:98:87:7c:24:
6a:2d:43:fd:6f:04:5b:54:07:9b:8d:0d:e0:5d:34:18:c7:17:
11:3c:e9:6c:f9:4f:c8:eb:71:db:b3:5f:4d:d3:d8:aa:3c:cc:
48:b2:20:b7:93:27:5a:af:3a:b1:f5:e6:86:90:eb:c4:8c:c2:
08:0d:d5:d5:c6:38:00:1e:4b:18:71:7a:74:db:2f:a3:23:03:
cf:6f:8a:8d:0f:fa:94:99:13:a7:82:f4:bc:67:ec:0a:05:a5:
9a:40:5c:b2:b5:d4:fa:0a:0a:45:aa:61:88:67:bb:81:15:b0:
13:75:b8:22:2d:3f:d8:6a:71:09:52:51:df:9c:e3:f6:d8:ce:
c0:34:32:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:38:24 2025 by rpki-client