Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File: bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier: q3bsGhfUaem4KjybH2rlFa+bCWVdhiBZcXdH5Ci24f4=
Subject key identifier: 1B:D6:E3:92:F7:51:90:3A:91:7F:A1:18:13:05:E8:DA:15:38:BC:4A
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 019680FE0F74B547A96FE49C4413F401660B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number: 0D29
Signing time: Tue 29 Apr 2025 10:00:55 +0000
Manifest this update: Tue 29 Apr 2025 10:00:55 +0000
Manifest next update: Wed 30 Apr 2025 10:00:55 +0000
Files and hashes: 1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: AgWT+k8uxnT67d7vcQbfaAQoCsbCCSp2QH2T9foJBJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:0f:74:b5:47:a9:6f:e4:9c:44:13:f4:01:66:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Apr 29 10:00:55 2025 GMT
Not After : Apr 30 10:00:55 2025 GMT
Subject: CN=1bd6e392f751903a917fa1181305e8da1538bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:bc:4d:04:1a:a9:70:f3:57:36:51:85:5f:
8d:0f:e3:a5:08:31:00:d0:3f:54:21:50:cc:0c:da:
09:f6:2d:2f:99:22:ef:0b:f4:3b:59:d1:15:b0:fb:
c2:75:f9:b0:39:d7:0d:de:52:c9:5c:0f:2d:1d:11:
27:fb:91:f3:61:46:49:15:7c:35:fa:33:d1:53:70:
c6:a7:60:33:5c:9c:23:75:13:8b:ae:97:0a:a2:02:
88:b3:39:71:c9:9a:8a:d6:91:85:78:78:85:87:23:
6b:8f:c5:84:3a:cf:5c:d2:bf:9d:e9:4a:57:7c:7b:
89:4b:e5:37:e8:cf:8a:87:55:43:9e:d3:2b:43:61:
51:3f:31:11:b2:2a:d5:0f:c8:d5:16:22:0c:8c:51:
42:3e:6b:45:35:27:1d:6b:1c:3d:d2:a6:55:99:d1:
75:94:73:36:b3:cb:eb:ba:35:75:84:7a:43:1e:e5:
b4:97:85:b0:db:df:eb:60:45:dd:40:d6:d6:6f:bb:
8e:e1:07:e7:c2:85:67:f0:7c:a8:f9:f7:f7:3c:1f:
bd:a7:1e:8a:bb:26:56:22:d0:48:f0:43:ef:2c:54:
af:89:24:f4:ae:31:e2:04:73:e1:6d:39:6c:6c:9e:
33:57:c6:f1:9e:2d:ff:68:36:e9:d7:29:94:0d:e0:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D6:E3:92:F7:51:90:3A:91:7F:A1:18:13:05:E8:DA:15:38:BC:4A
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:26:57:5e:0d:77:6f:0f:38:93:da:e1:95:f1:cf:30:4b:33:
50:d2:5e:f7:92:6d:a5:50:31:f3:f9:bb:9b:9d:a7:8b:f5:40:
fe:6f:ff:69:c6:77:28:10:39:20:d9:9b:ba:a7:a4:90:9c:63:
5b:f8:da:74:f0:bd:32:aa:85:99:33:d7:cf:a3:32:b9:c9:79:
f4:2c:0b:36:d3:5d:32:a7:2c:dd:5a:bb:ef:fd:45:c6:53:b8:
a4:3d:29:d1:13:93:db:a7:2e:56:61:ce:ae:d8:8a:28:49:a6:
a5:19:91:43:51:ab:f8:6d:0f:bb:41:50:f4:b4:e5:cf:6c:35:
41:f5:d2:b9:16:11:05:75:b9:a4:56:78:58:3a:19:3b:79:c0:
8e:f9:0b:69:0f:3a:95:67:71:a8:60:61:02:e7:30:fb:2e:bf:
8d:0a:12:be:30:01:be:e6:91:51:b1:ed:4c:91:d5:37:f8:4b:
bf:35:6a:2b:30:be:6e:a4:58:0d:c4:ca:37:cd:e8:9f:29:0a:
cc:8b:b1:02:84:c3:ae:0e:60:4a:b5:2b:d6:29:3a:e1:e3:72:
41:7d:48:6f:41:53:81:f5:c5:58:44:3f:b4:da:e6:ca:7c:5f:
cb:40:87:47:1c:20:c2:08:f2:02:ee:66:ee:2c:07:ff:97:77:
ad:01:59:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:55:02 2025 by rpki-client