Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: 02wmHFJ77c6efxg/xv8wvRUB3kNg2SXvO1ro76t7qv4=
Subject key identifier: 9E:45:C4:FC:F0:0B:B5:4D:F4:55:66:7D:39:E2:1C:74:DA:4E:08:CC
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 01967679F2937A79F137EB8CB57863CC90B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 0540
Signing time: Sun 27 Apr 2025 09:00:25 +0000
Manifest this update: Sun 27 Apr 2025 09:00:25 +0000
Manifest next update: Mon 28 Apr 2025 09:00:25 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: Qv8OmwKMEoHhf5/89yNzn5Tk81Hu+yorFqpejZGcTWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:f2:93:7a:79:f1:37:eb:8c:b5:78:63:cc:90:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Apr 27 09:00:25 2025 GMT
Not After : Apr 28 09:00:25 2025 GMT
Subject: CN=9e45c4fcf00bb54df455667d39e21c74da4e08cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:49:1b:33:3e:67:33:70:7b:a4:87:17:3e:
31:d6:88:ae:9a:7e:3c:a4:c1:2b:3d:42:1f:eb:4b:
ec:23:e6:c9:62:9f:33:c7:ee:f3:f9:19:7f:67:33:
9e:2e:74:f3:3b:a5:8d:68:9b:c9:4d:d6:5c:f1:b9:
cf:c1:5f:88:af:2f:c6:46:dd:12:20:54:bb:a1:59:
7c:12:e4:c1:85:13:8f:1b:af:c5:5f:d0:65:48:71:
c1:22:3a:2f:0c:8e:6b:eb:65:99:57:25:60:22:7b:
5c:44:3b:a0:b5:f7:3e:8c:38:30:df:d1:4d:94:4f:
e9:f3:18:d4:79:82:35:c9:fc:07:ea:3c:1c:16:7a:
33:86:a1:00:6d:51:04:92:2d:51:eb:c2:42:9f:4d:
b7:81:99:b9:62:3a:6a:c1:7d:22:50:9a:46:ee:97:
b6:8f:f8:02:85:ba:16:fc:56:a5:75:7f:87:0d:3a:
df:66:86:81:ee:f4:f2:40:21:26:84:4b:d8:2d:1e:
2f:c8:60:36:58:8b:9c:e2:12:8c:86:ec:57:12:83:
d5:33:c3:25:81:e2:1c:c1:bc:05:38:12:dc:57:6c:
99:f5:f8:e9:d1:ea:54:b0:3e:bb:13:73:a4:87:57:
25:12:47:c1:2e:cd:e8:a4:ed:a3:49:d1:ef:a3:1d:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:C4:FC:F0:0B:B5:4D:F4:55:66:7D:39:E2:1C:74:DA:4E:08:CC
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:6d:11:1c:0b:46:d8:d1:18:1d:c8:df:b0:f6:b8:51:f4:
1a:f7:95:8f:cf:ff:7e:2c:53:9e:4a:b5:e3:69:f8:73:02:59:
ef:e5:87:ad:7a:eb:d3:f6:c9:fe:08:28:48:6d:d0:79:a4:97:
87:21:3b:93:a5:3f:87:14:43:de:0d:45:f8:cf:b0:b9:d7:00:
8c:56:bc:27:b2:a5:3d:98:d6:57:1e:af:64:42:b1:70:3c:b5:
ad:f7:62:bc:78:8e:f6:1e:82:ce:3e:30:b6:09:b2:d8:f7:2e:
17:b3:fe:11:a2:6b:7a:c1:c7:2e:9b:dd:b8:73:8b:1c:c6:ba:
5d:36:96:97:7f:32:8b:e6:00:68:08:cc:23:9f:15:74:a6:70:
ce:44:0b:95:f6:e5:ce:0f:f4:b0:56:1c:5f:6d:86:8d:f0:54:
03:29:9e:2f:36:e0:68:9f:86:89:ea:33:bc:1b:f3:05:d6:c8:
dc:2a:4f:73:4d:39:e0:63:c0:a4:5c:e1:00:70:10:4c:98:f1:
52:6c:67:dd:6f:2b:06:b9:b8:7a:ef:2c:af:44:ce:18:a3:67:
cf:11:19:ae:96:40:8c:57:14:5b:3d:2a:b6:db:1e:05:c0:48:
45:6c:cd:df:30:b5:78:96:fc:b1:e2:fe:15:f5:28:70:36:f7:
bc:3b:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:24 2025 by rpki-client