Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: opSsWHEnjFd7IQvhTVL7lER9ZOILQHZuxcppLpeJQg0=
Subject key identifier: 71:19:50:E6:A7:2D:B8:B2:F2:23:EF:99:36:A2:04:64:AE:AA:25:B1
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01968E82488BB299F2183DD668A744A0BD6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0C00
Signing time: Fri 02 May 2025 01:00:24 +0000
Manifest this update: Fri 02 May 2025 01:00:24 +0000
Manifest next update: Sat 03 May 2025 01:00:24 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: UseHqXhMQpVNhDKwu3Q+kL/HSrOCvpOnItJmZzMDO9g=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:48:8b:b2:99:f2:18:3d:d6:68:a7:44:a0:bd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: May 2 01:00:24 2025 GMT
Not After : May 3 01:00:24 2025 GMT
Subject: CN=711950e6a72db8b2f223ef9936a20464aeaa25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:b2:76:71:13:0a:81:89:7e:49:1d:fa:86:
c9:ac:0a:45:d9:c0:5d:3c:f6:8d:db:75:fe:34:99:
20:f9:00:81:5c:71:4f:2a:63:09:7b:67:d6:0e:84:
bf:36:38:b3:1d:b3:1a:21:4a:cd:65:76:86:ba:ae:
48:90:8d:07:fb:ea:ba:38:ef:58:63:91:d4:4a:77:
16:64:ea:06:29:88:01:0c:c2:5c:45:3d:ab:3e:54:
47:89:20:e6:d0:04:a8:ac:96:e2:dc:86:99:39:c9:
f0:03:b3:e7:7b:e8:28:12:2b:e0:70:d1:f1:3d:fa:
f0:18:85:79:ad:99:d1:9c:e2:7e:fc:66:46:25:d9:
3a:e5:64:d1:1a:16:62:6c:bd:89:ae:1e:6f:4d:54:
12:5d:89:1e:24:15:64:05:bd:48:3d:50:26:53:98:
1a:bc:c6:84:56:c8:01:d3:b5:b2:0c:aa:94:ce:73:
1b:96:da:12:39:19:9a:5d:3d:ce:5c:9c:9e:c0:6b:
ec:1b:af:d1:52:15:85:55:c4:65:d9:7a:94:19:f1:
ca:90:3e:3e:5e:d7:c1:44:ad:2d:cb:b5:f8:d0:ac:
0b:54:50:eb:c6:40:71:24:20:c9:88:59:f3:7b:8d:
15:01:f2:bd:b0:be:e5:88:1f:9e:65:b6:c2:4f:a5:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:19:50:E6:A7:2D:B8:B2:F2:23:EF:99:36:A2:04:64:AE:AA:25:B1
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:74:03:93:e7:73:1d:fb:e1:53:03:ab:2c:77:fa:2b:75:
f9:45:81:84:a8:b1:f4:9f:71:09:66:ed:07:83:c4:e8:a0:10:
49:86:e9:c0:c6:21:1e:fd:35:8b:2e:93:61:be:1c:49:de:ef:
5e:77:21:40:cb:ba:a3:c6:9d:f6:2d:4f:0f:70:a4:f2:73:49:
77:19:2c:66:c5:5a:28:ba:b0:36:3f:24:d0:32:41:99:79:4c:
d8:8a:49:a4:fb:af:ba:28:7d:39:07:69:e5:ad:75:38:99:b6:
51:cb:ab:a0:41:b6:d1:83:89:de:53:41:60:b3:19:5a:d0:d0:
a5:b7:b6:34:a4:e3:fa:a1:60:19:86:d3:d2:b4:11:83:6a:aa:
ed:35:9e:41:21:8d:6a:8c:d9:00:4c:7d:5c:43:e6:9a:d5:17:
fe:14:e8:e4:83:3d:b6:ec:08:be:4b:a6:2b:ac:b4:0f:08:dd:
fb:25:16:6b:81:d0:c4:1f:59:0c:1b:03:7f:b3:75:6e:e5:3a:
51:b0:d4:9f:01:a3:c5:db:66:55:d4:77:26:43:34:fd:d8:20:
ad:97:58:aa:1d:15:5b:e8:cf:77:a3:d2:d1:f2:8d:17:63:f6:
59:f0:61:89:8c:49:7e:38:60:8b:0c:90:6b:1f:76:ad:4c:57:
aa:0a:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:57:11 2025 by rpki-client