Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: NKgqQZN17kyvQjvKRbIb0C1zziLkQH6fPebMFB4FwlM=
Subject key identifier: 4F:00:EA:D3:DE:A5:79:4F:A4:18:21:43:D0:49:4E:1F:5B:FC:93:F1
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 01967A1FF717025CAAC488E071D5813D2859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 02:00:37 +0000
Manifest this update: Mon 28 Apr 2025 02:00:37 +0000
Manifest next update: Tue 29 Apr 2025 02:00:37 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: H3DkH8powtD9VOxxWSMIjNAoTUAwcK0PKhyMgc9+xCM=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:f7:17:02:5c:aa:c4:88:e0:71:d5:81:3d:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Apr 28 02:00:37 2025 GMT
Not After : Apr 29 02:00:37 2025 GMT
Subject: CN=4f00ead3dea5794fa4182143d0494e1f5bfc93f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:0c:2f:0c:57:9d:ab:5a:fe:f0:53:e6:1d:
a4:d2:11:79:40:54:05:3e:63:b8:f3:0c:55:d8:c5:
60:b2:c9:b7:d6:63:59:0d:f7:2d:31:92:6b:d7:75:
37:56:39:d9:a6:84:9b:98:9d:e6:6a:7b:2f:7f:1f:
6d:09:4e:0d:60:54:99:93:d0:1c:bb:80:87:ef:c8:
0f:ba:0f:9c:44:c8:8b:5b:84:09:a0:5b:12:69:46:
14:59:24:95:fc:37:05:86:14:34:7c:89:0a:20:44:
f2:49:f5:36:9e:2b:26:92:0d:f3:f1:2f:33:b7:a2:
79:92:d5:35:14:f7:52:1f:88:a2:11:68:74:de:5a:
41:c9:34:8a:46:f9:c6:6b:a0:ea:b4:48:70:0d:42:
fa:07:36:68:af:49:08:a0:35:c5:a8:99:50:eb:45:
6a:00:2b:54:c2:ad:5e:fa:93:16:ae:80:5c:5f:9f:
41:09:49:64:2f:ae:58:4c:be:f2:ca:74:da:1e:c4:
cf:fb:b1:dd:5a:65:aa:6d:f8:5f:f0:f2:08:08:19:
cc:b0:a6:f7:f7:5f:a3:de:89:27:0c:fa:6a:c6:8c:
b6:7a:7d:5c:3e:43:01:9e:b8:3f:dc:c8:aa:ff:dd:
9e:90:2a:27:d3:f3:86:c6:cc:17:84:31:3c:5e:15:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:EA:D3:DE:A5:79:4F:A4:18:21:43:D0:49:4E:1F:5B:FC:93:F1
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:91:38:df:c2:37:c4:c9:21:8d:ff:8e:6e:c1:d3:43:3e:5e:
d9:b7:2c:e0:05:06:9e:84:9f:d5:7e:64:d6:7d:1a:72:99:89:
14:9c:25:32:9e:07:b8:14:41:81:ba:77:3f:60:f4:2a:79:5b:
af:63:63:e7:6a:23:d9:96:41:e7:9d:d8:e5:c7:b1:37:52:65:
40:29:24:b0:a1:31:9a:31:7d:90:f1:2f:e2:c1:e1:e9:69:b6:
88:aa:ae:fe:65:88:83:07:87:71:2b:aa:75:69:07:17:5d:6b:
67:82:ed:d5:bd:01:3e:24:e4:e2:a2:f9:93:99:ef:31:10:29:
51:58:c5:ca:01:46:8a:64:36:a0:d6:a8:f5:f9:1a:6f:71:73:
1a:5c:67:c9:60:de:08:25:66:fc:d9:a0:9a:22:c7:6a:fc:c1:
59:63:47:da:bc:05:13:15:d4:1b:44:4b:fd:13:60:b2:9e:89:
d0:40:0a:6c:51:b3:01:9d:fc:7a:5a:16:f7:9f:39:4e:81:f4:
bb:9b:6d:e3:1f:ae:93:7c:49:9d:53:9b:82:e1:0b:76:e7:ca:
d5:2f:d3:5a:f9:17:8d:cd:3f:fc:8f:99:0e:aa:71:ad:2e:7e:
bb:01:d0:2e:9e:53:dc:1f:57:7b:b7:65:11:4b:14:c2:d0:a4:
b2:c6:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:30 2025 by rpki-client