Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: a2Ub9Tvb/S944XvpJ2N6sZWO8XQjnhZzWrDw70DS1H8=
Subject key identifier: 52:A8:6E:FF:86:7C:C7:53:C5:91:83:33:69:F5:6D:BC:58:02:85:49
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 0196808FCE02554F551CCB1F71B080DF84F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 08:00:30 +0000
Manifest this update: Tue 29 Apr 2025 08:00:30 +0000
Manifest next update: Wed 30 Apr 2025 08:00:30 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: Ihz/0LPL7ne/Wry/P0SRLUUITM2w/v5zZoBdf7Yfw4Q=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:ce:02:55:4f:55:1c:cb:1f:71:b0:80:df:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Apr 29 08:00:30 2025 GMT
Not After : Apr 30 08:00:30 2025 GMT
Subject: CN=52a86eff867cc753c591833369f56dbc58028549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:f3:6a:3e:e5:7a:36:9f:6d:6a:f2:1d:fa:
de:f1:db:d5:d6:03:c4:ad:95:13:c1:49:67:b6:fc:
5c:d8:3c:e7:da:a6:85:e6:cb:58:f9:35:e7:82:3f:
96:83:1a:83:e9:3f:69:47:41:49:4c:80:0b:04:38:
f7:72:1a:8b:9f:39:e9:7b:0f:1d:84:48:a4:28:a0:
3e:34:f3:c4:69:b1:25:ae:e9:60:45:16:00:7e:c3:
40:b3:ba:ec:d5:bf:6b:ec:50:be:41:3f:79:35:3a:
22:a8:e9:52:47:7f:53:c4:e3:cc:19:3b:ca:13:d8:
b8:a4:d5:e7:8f:95:92:e9:55:81:c8:8d:79:41:6b:
23:08:cb:dd:05:e2:bf:09:b6:65:ec:e7:6a:d4:c2:
54:0c:0f:74:4c:05:59:83:56:9f:01:cf:de:91:21:
0d:76:72:95:11:42:11:27:9e:ae:2b:d2:d3:f2:14:
f9:cc:e9:85:66:05:58:31:c9:06:8f:cc:c7:d0:19:
6a:3e:eb:44:a4:67:92:15:d1:99:18:45:13:5d:5b:
cf:b0:9c:47:2e:8a:a2:e3:0e:ad:26:84:41:e8:84:
94:71:15:0a:df:d5:7d:9f:04:15:83:a3:96:5c:02:
de:02:07:e4:3d:0c:78:82:db:2a:47:ab:12:dd:73:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:6E:FF:86:7C:C7:53:C5:91:83:33:69:F5:6D:BC:58:02:85:49
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:2d:23:29:22:14:20:54:e8:3b:f2:e4:6f:e1:9c:b4:9d:
8a:fc:55:b1:52:0c:21:fd:13:d3:f8:93:59:fa:89:5c:f8:57:
c7:b3:60:8b:d6:64:b6:f7:15:98:d1:e6:7d:ab:bb:9c:63:98:
b3:ab:0c:0b:79:42:bc:ff:42:f5:e7:53:16:44:37:fc:d7:15:
08:2a:50:0c:db:a8:69:8a:fa:36:d7:28:bf:f9:d9:2e:fc:5b:
70:a2:97:b8:64:01:7a:fa:45:ef:29:60:21:8c:ed:6d:07:65:
6e:70:0e:29:b0:f5:fa:35:74:88:12:eb:41:74:08:52:79:c1:
f2:5b:72:58:e2:13:36:32:2f:b7:53:9a:07:a8:3d:9e:77:12:
33:43:3c:39:33:fa:23:99:65:62:18:4d:5a:fc:5b:cd:0f:c7:
72:27:b4:4d:86:c0:e1:db:70:3d:85:22:d5:12:12:e8:32:81:
3e:29:e9:84:13:6a:2b:08:d3:af:ac:bc:aa:79:20:5e:94:17:
a1:f0:bb:de:53:53:08:bb:65:14:2f:76:17:4f:0d:66:89:07:
10:17:5c:69:b2:02:aa:96:6d:6c:ac:47:fa:a8:97:3a:ae:f6:
2a:19:02:8c:b3:9b:de:1b:10:07:1e:f4:c6:e3:69:cf:0c:c3:
34:ce:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:27:13 2025 by rpki-client