Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
File: a7odJOcsQ57HpcvcORNX3YnLhqs.mft (raw, json)
Hash identifier: eMKpgSNo+J945NUioyMg8StGfkun/y5NcrnRw48kWj0=
Subject key identifier: 56:46:6F:A8:C5:0E:60:B9:6A:D3:0D:EF:9C:8F:4D:50:4A:AE:14:EE
Authority key identifier: 6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
Certificate issuer: /CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Certificate serial: 019681347B98BE4ABAC821B82A886EEDA470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
Manifest number: 091B
Signing time: Tue 29 Apr 2025 11:00:22 +0000
Manifest this update: Tue 29 Apr 2025 11:00:22 +0000
Manifest next update: Wed 30 Apr 2025 11:00:22 +0000
Files and hashes: 1: Tf-xMXx1FGSa7W5MTFk1ptTbsJI.roa (hash: rPricXL6DKMNzIm/8wBOd/xDJhVzBjF0FcknH/0CxQI=)
2: a7odJOcsQ57HpcvcORNX3YnLhqs.crl (hash: H80HltwMKc6usZpiv4fQG8TlYQl0sU47uWxYd/GYj6A=)
3: yzmCfwKm_JPG030YXapakt0raKE.roa (hash: FgUsVc5q6Pi83IVxku3Q5cKwPTsj2kNtxaix/96GJI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:7b:98:be:4a:ba:c8:21:b8:2a:88:6e:ed:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba1d24e72c439ec7a5cbdc391357dd89cb86ab
Validity
Not Before: Apr 29 11:00:22 2025 GMT
Not After : Apr 30 11:00:22 2025 GMT
Subject: CN=56466fa8c50e60b96ad30def9c8f4d504aae14ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:9e:bf:3c:5b:b0:d0:96:48:b4:ea:1b:a1:
05:d3:96:70:c1:ac:86:43:a2:c8:e6:ec:da:43:61:
c6:2b:af:cf:38:c8:f0:98:8a:46:f0:24:fc:95:67:
58:53:be:09:99:a1:c8:bd:c4:78:07:f2:28:dc:cf:
fe:94:26:68:47:86:15:a8:ec:e3:55:60:de:57:db:
d2:d8:ce:99:88:64:37:dc:fc:49:b4:63:a6:2f:ef:
bb:75:63:40:5c:dd:30:88:52:34:8e:1b:6a:fe:ee:
1e:57:64:69:bf:f0:83:0a:2b:62:3a:d9:21:6b:27:
be:d0:97:aa:16:3e:c7:80:a9:99:9f:ca:96:74:14:
24:81:97:0a:21:75:06:5d:82:fb:c7:a2:eb:eb:7e:
94:57:1e:f7:3d:e1:ea:51:9c:cc:25:9e:c3:df:93:
bf:dd:e6:25:f8:ac:88:c3:b8:ab:3b:5e:0b:e2:17:
55:7f:eb:9a:ba:91:3b:1a:14:5c:43:b6:49:87:4f:
8a:d6:61:53:fe:eb:15:3d:90:2d:92:e0:f5:96:0b:
a7:ed:d4:9f:03:87:fb:65:1d:b4:7a:26:f4:d3:87:
f8:6f:fc:1c:81:e2:ce:ac:08:2a:ad:7a:37:d5:cd:
52:48:6e:63:6f:e6:46:60:21:e1:eb:7b:f9:e0:42:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:6F:A8:C5:0E:60:B9:6A:D3:0D:EF:9C:8F:4D:50:4A:AE:14:EE
X509v3 Authority Key Identifier:
keyid:6B:BA:1D:24:E7:2C:43:9E:C7:A5:CB:DC:39:13:57:DD:89:CB:86:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7odJOcsQ57HpcvcORNX3YnLhqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a94a4c-a552-46f6-8a81-cef9448124b0/1/a7odJOcsQ57HpcvcORNX3YnLhqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ec:18:28:3b:78:db:35:08:4b:a9:4b:24:ba:fc:9a:01:8a:
61:26:15:ca:69:c5:5e:ee:ce:60:14:39:b8:43:4f:c5:62:07:
8f:31:3d:de:ae:da:0c:8c:10:5b:02:70:3a:4f:0c:d7:e2:a2:
cb:e0:7d:5b:31:03:e5:01:a4:8a:e0:c8:e7:c1:16:16:f2:23:
5c:1d:18:68:d3:04:b1:98:1d:52:e1:74:aa:3c:e1:1b:b2:09:
f0:73:0d:14:d7:10:38:51:f3:c4:42:78:22:f2:d9:4e:06:7c:
97:fa:94:21:d2:ff:42:41:d2:a7:34:e9:47:c4:1a:b4:0a:89:
82:27:64:08:37:00:a1:20:a5:f2:2b:c5:23:e3:ec:d7:5e:ea:
0b:37:66:88:ef:4e:aa:62:2b:47:25:fc:fa:15:f4:71:be:ba:
e7:9f:bf:96:85:5f:22:a8:40:a0:75:c2:81:1c:70:1a:ee:d4:
4d:18:7c:62:43:c8:7a:24:a3:ce:9a:76:6a:20:98:ca:c2:7a:
87:ea:d9:fc:26:41:5a:97:e6:25:e6:82:36:ec:27:f7:36:30:
12:ff:40:d2:52:fe:e9:47:b2:e7:eb:ba:69:be:83:b6:7d:c3:
3f:33:a4:fd:82:48:75:3a:54:bd:2d:9d:9c:1b:61:3f:18:14:
51:e3:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:03:10 2025 by rpki-client