Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: QE9RnHoOSveZcf5XAkvMQ24oS6Ndvui/1+btlwn+6Nk=
Subject key identifier: FC:8F:8E:FD:99:01:38:F7:AA:D5:94:1A:D7:E6:AA:AE:3C:A1:E2:9D
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 01967755880F5FC2E1894371AC786F530640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:16 +0000
Manifest this update: Sun 27 Apr 2025 13:00:16 +0000
Manifest next update: Mon 28 Apr 2025 13:00:16 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: ziBT/egsjBRU+5P+0tgpDbPtTDTeRcWA3QEO39n6o0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:88:0f:5f:c2:e1:89:43:71:ac:78:6f:53:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Apr 27 13:00:16 2025 GMT
Not After : Apr 28 13:00:16 2025 GMT
Subject: CN=fc8f8efd990138f7aad5941ad7e6aaae3ca1e29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:ac:cc:23:e4:13:af:28:6a:99:30:a8:bc:
d0:fb:6b:56:b3:c9:f5:11:84:72:67:41:4f:af:f9:
9c:fd:14:61:db:83:df:88:ee:51:c5:d5:12:69:8b:
91:f2:0a:6c:c9:4b:3d:3a:5d:30:18:1e:ea:c0:d3:
d0:9f:12:cd:68:c5:9c:8a:02:a9:42:bf:c9:2b:89:
f6:91:cc:d9:d3:3f:53:1d:dd:d9:e1:d7:34:6e:79:
09:86:6b:37:72:1a:e3:ab:44:a9:90:01:22:b0:06:
0c:90:b6:37:8e:b3:81:64:98:f3:65:43:a4:31:e2:
79:79:fd:8e:ae:34:e5:d2:8e:b4:9c:f6:e2:92:23:
04:aa:f0:1e:5f:f0:e2:d3:5e:8e:50:ec:af:d9:54:
4f:24:5e:23:98:5a:d9:da:77:90:06:32:38:9d:29:
67:84:cd:e5:43:c7:54:88:d6:d6:2f:e6:24:63:4e:
37:dd:ed:1e:62:5b:64:52:ae:aa:6a:c7:08:43:7f:
af:ea:28:41:4d:35:f2:29:2b:45:8d:e4:e3:ab:7e:
2b:d5:03:d9:7a:67:20:3e:e2:6f:83:a1:b0:d6:6f:
39:13:b5:71:87:0e:1d:d1:77:cf:64:9e:93:3b:04:
77:e2:14:76:d3:dd:a6:93:b1:13:e0:e5:c3:37:9b:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8F:8E:FD:99:01:38:F7:AA:D5:94:1A:D7:E6:AA:AE:3C:A1:E2:9D
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:67:d7:b4:2b:bb:9d:62:dc:8a:67:d5:3a:be:0e:ce:e8:
18:d2:58:44:fa:29:5d:94:ed:26:43:25:5d:75:11:8e:3a:91:
5f:b5:4a:63:2b:51:44:8f:60:42:f3:f2:0d:82:ba:75:21:3f:
43:8b:70:c2:e1:f2:1b:a2:db:1d:f6:8b:cd:ee:c9:c0:a4:70:
44:23:28:29:e5:dc:60:e4:5f:e9:f3:8a:2f:ed:b1:2d:ef:fe:
ab:e0:b5:b7:28:50:f1:30:1e:39:36:bd:59:61:cb:1e:36:cd:
44:f4:21:84:1d:1f:ea:d3:20:a3:d2:84:21:03:11:c2:96:8b:
ff:9d:76:77:35:1b:12:d5:a8:56:2b:13:06:38:2e:17:33:3f:
68:42:10:d0:2b:29:01:d4:a9:ae:8c:72:08:a0:3d:5e:1d:ed:
fc:fd:6e:0c:6a:78:88:1c:fc:d6:87:04:b7:64:bd:1c:b5:bf:
93:c5:b6:fc:ce:7a:99:6a:24:9e:a6:76:1b:94:f6:5c:dd:18:
f8:38:b9:fe:dd:42:68:0f:83:87:96:8b:c8:98:fc:3d:38:58:
ec:ee:b7:23:4a:54:19:5a:39:75:e1:15:49:27:3a:0e:04:18:
ed:42:95:94:f7:48:c8:07:62:05:cd:67:8a:9a:44:82:60:b3:
60:3e:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:04 2025 by rpki-client