Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: g1s+8ddIgTi6EkuMwxfVIdjI+f228lyeWhcjTehHe0Y=
Subject key identifier: 28:15:B9:FB:B2:C8:2D:5F:F4:58:D7:80:70:6F:20:89:87:E0:F9:0E
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 01969785BBE3C5C033909E2F32A3E8A979E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1520
Signing time: Sat 03 May 2025 19:00:46 +0000
Manifest this update: Sat 03 May 2025 19:00:46 +0000
Manifest next update: Sun 04 May 2025 19:00:46 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: gGDUIJviFAe/faldZ+MGOmL23MxVm3O5yqhme7a0+5U=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:85:bb:e3:c5:c0:33:90:9e:2f:32:a3:e8:a9:79:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: May 3 19:00:46 2025 GMT
Not After : May 4 19:00:46 2025 GMT
Subject: CN=2815b9fbb2c82d5ff458d780706f208987e0f90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:af:dd:f5:1e:f7:43:63:62:c8:d2:41:f6:
8b:e0:0e:63:46:bd:d3:9b:6c:63:b1:91:53:37:60:
89:fd:fe:96:d8:75:78:44:f1:72:bb:24:8c:9f:1d:
2e:ef:f4:b2:39:b2:eb:0c:ae:ff:04:67:b2:91:6b:
bb:98:ef:99:0b:1f:81:b6:3d:1c:c2:3f:5a:64:12:
0e:de:f6:77:14:66:2c:67:e0:d9:8f:7d:0b:d1:0b:
37:18:bd:b6:0a:4b:14:7e:e8:b2:9a:47:93:b7:43:
ce:3c:46:ce:36:e0:d5:3b:6a:68:66:ac:d9:7c:8a:
35:4f:fc:cc:ff:77:2e:39:a1:57:84:cb:81:c0:70:
6b:f1:4e:31:3e:55:36:fa:33:36:54:a2:e8:bb:b0:
1a:c3:6b:bc:2e:d2:6b:15:ac:63:13:ae:26:2c:d1:
c9:9e:9d:be:26:b6:3a:f9:3c:09:a9:8d:ec:73:01:
7d:e5:4b:fe:d1:ab:df:3d:88:57:c6:b6:f9:60:70:
7d:9a:2e:1a:22:5f:87:15:66:f5:d4:2c:0e:d5:2d:
48:ac:c8:15:74:e5:88:4a:4b:db:dd:96:40:e6:7a:
60:4f:9d:8b:cc:6c:99:c0:d6:cb:46:e8:73:b2:32:
04:14:f0:62:f2:63:64:ea:2f:49:da:1b:52:7b:81:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:B9:FB:B2:C8:2D:5F:F4:58:D7:80:70:6F:20:89:87:E0:F9:0E
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:95:dc:20:ba:0b:07:8d:d1:96:58:92:91:48:66:62:c4:14:
70:7e:74:54:92:9d:b4:6f:10:72:76:15:79:f0:a9:d3:81:1d:
67:06:e5:d6:bc:7f:9a:cd:f6:27:d2:de:d4:b5:40:f5:92:2d:
08:78:5b:f2:29:6e:1e:c7:02:cd:63:49:6f:c4:34:06:ac:91:
f7:fb:f8:07:08:1b:6c:b8:57:3a:96:8a:f6:5e:9b:85:86:7d:
1a:1f:98:c7:22:6a:b9:1d:8b:1c:c0:e9:a6:83:f3:fc:f1:79:
33:59:f0:2a:e3:c3:49:e1:c8:13:64:d7:ed:00:b7:5e:ea:f6:
c4:aa:d6:18:67:11:ed:64:ce:74:01:71:06:02:21:16:22:3e:
5b:bd:8d:7b:fc:2f:b8:0c:be:32:d8:de:5e:c2:d6:a3:d4:fa:
df:b1:7d:68:9d:17:0d:7c:1d:cb:85:33:79:e4:a0:fd:e4:8c:
1b:fb:72:e9:ba:07:8f:0c:16:d0:08:fb:6c:f9:7e:ad:02:00:
c5:2b:af:1b:fb:d6:c6:53:9c:67:51:3f:3e:5e:23:8c:c3:27:
00:d6:ce:46:f3:1b:3a:8d:4c:af:11:e4:b0:c3:ee:94:3f:94:
79:e1:a3:66:b3:d3:7d:1d:e4:43:49:99:ee:3d:7d:1e:30:5a:
3f:5d:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 01:56:14 2025 by rpki-client