Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: 11oPJceAO1kXRGCyTrUpLu8s9607Vuq+2oKeqOeK1OE=
Subject key identifier: BB:1D:C6:73:45:29:E2:A0:12:45:64:A0:F7:D2:C1:4D:FA:DB:74:09
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0196771EFE1FEEBB362FE443D8A2679E754D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 12:00:41 +0000
Manifest this update: Sun 27 Apr 2025 12:00:41 +0000
Manifest next update: Mon 28 Apr 2025 12:00:41 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: PU0OrCU97dC07MUwJuEfN6CdSS22S1MPFMCH+lkq30s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:fe:1f:ee:bb:36:2f:e4:43:d8:a2:67:9e:75:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Apr 27 12:00:41 2025 GMT
Not After : Apr 28 12:00:41 2025 GMT
Subject: CN=bb1dc6734529e2a0124564a0f7d2c14dfadb7409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:bf:df:74:31:8d:2d:e5:f7:12:dc:14:6b:
fa:92:a8:6d:b2:49:20:ab:50:d8:44:ad:8a:60:80:
02:cf:b6:aa:ec:0c:46:8b:44:0f:d3:61:ea:72:6c:
25:62:1a:ce:8d:2c:93:a9:3e:95:df:35:e4:f0:f3:
d6:eb:9b:0f:68:a4:4f:cf:26:c3:2d:7a:32:a8:77:
db:cd:b6:7b:4a:65:ef:ed:4b:5e:c9:9d:8c:0f:d5:
6c:3a:db:e0:7e:2f:42:1d:ba:9e:f2:09:71:06:25:
41:02:e9:96:7a:90:b4:6a:da:85:4c:e2:fb:a7:86:
15:ed:84:e1:1d:da:ee:91:56:31:4b:bb:8f:ce:da:
c9:ad:db:c3:82:7b:d4:3f:38:61:8b:6f:e8:d8:c3:
2b:7c:c1:8a:5c:f7:5d:a6:cd:3f:6d:2f:d9:4b:96:
bd:6f:7d:4e:66:f0:57:73:50:5e:4f:28:49:4d:a0:
c4:01:c2:da:29:b4:3f:ba:cb:b5:c2:8d:24:54:95:
ef:32:bb:02:37:27:7c:a6:91:aa:34:4f:bf:ef:08:
10:b7:34:9b:42:15:c9:13:8e:09:e1:dd:69:3f:bd:
cd:6a:8a:c5:0e:83:72:06:33:0d:19:f5:b9:30:e2:
3b:6e:cb:6d:34:00:51:b5:2d:a6:10:69:31:ed:69:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:C6:73:45:29:E2:A0:12:45:64:A0:F7:D2:C1:4D:FA:DB:74:09
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:af:83:64:a9:c0:07:e2:4e:70:20:0b:cc:8e:41:da:c4:52:
c7:95:92:41:1c:06:f1:99:30:6a:45:48:72:5d:f2:97:35:71:
2b:89:ad:c1:ef:26:d8:ce:21:aa:a2:25:d7:72:c3:58:f7:ff:
61:41:79:fc:04:cd:1d:1f:d4:6d:98:0c:c3:0e:4c:e2:59:fd:
4e:69:d8:3a:05:e3:2e:4c:78:63:ad:8c:8e:13:eb:3d:90:d1:
8a:94:82:9d:45:17:d7:a8:3b:43:02:cf:01:05:ba:6e:24:86:
43:bd:55:8b:75:09:f5:72:a8:69:a1:ad:fe:a5:44:c3:3b:f6:
fd:e4:4f:ff:12:32:5d:2d:1e:18:59:48:54:28:26:4d:97:91:
91:e8:ac:b0:6c:bc:9f:c6:58:f0:93:3d:ae:1c:2b:e8:a7:24:
3b:11:6a:2f:8f:a4:52:cf:b5:49:bc:66:fe:95:2d:0b:25:f7:
fb:e3:23:bf:f1:fe:bc:36:b9:d9:b3:9b:e4:d2:3e:fc:a2:19:
61:5f:ea:bd:d2:f0:23:ad:7f:57:73:b8:19:ed:09:cf:b1:1d:
fe:62:7d:7e:e5:83:7b:72:b6:e2:35:bc:6f:38:06:9c:0e:80:
8c:95:38:67:71:33:06:ff:0f:04:5d:1f:c6:bd:30:16:6b:e8:
6b:55:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:21 2025 by rpki-client