Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier: DR2zryqLsbLmni6yndOq7UNJ4SWVkeniFKLwogM5ptA=
Subject key identifier: 22:72:A2:C8:01:1F:BF:EB:2A:33:53:D8:54:29:6B:B8:51:7A:24:97
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer: /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial: 01968F5DE141EDD99C25539491DA1CC69CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number: 0B0C
Signing time: Fri 02 May 2025 05:00:16 +0000
Manifest this update: Fri 02 May 2025 05:00:16 +0000
Manifest next update: Sat 03 May 2025 05:00:16 +0000
Files and hashes: 1: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (hash: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=)
2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: 8V5OpkZNhuCh0m3fPul/8Etsavr0ciZt0+PXOqCBkRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5d:e1:41:ed:d9:9c:25:53:94:91:da:1c:c6:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Validity
Not Before: May 2 05:00:16 2025 GMT
Not After : May 3 05:00:16 2025 GMT
Subject: CN=2272a2c8011fbfeb2a3353d854296bb8517a2497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:42:83:fa:c0:e7:e0:0c:f5:b6:a3:a9:b5:
f2:0e:e8:67:4c:9b:55:57:3e:37:dc:56:05:0d:4a:
94:c4:41:c1:5b:e3:73:3e:ff:ab:43:5d:1c:14:87:
ef:ed:2e:c8:f0:4f:57:4c:ed:da:8e:3e:c4:90:18:
00:de:14:e6:43:d7:fe:04:f0:77:9b:25:41:73:b2:
b4:db:8d:b4:24:ef:1d:5a:d2:dc:71:4a:2c:78:85:
19:04:5c:27:b1:dd:76:42:5e:a1:f9:e2:bf:b0:1a:
e7:0d:79:92:63:f5:ed:e4:27:37:59:ed:86:52:7d:
34:14:39:94:fe:3d:98:b3:2f:9c:a7:47:be:7c:3d:
bb:96:ae:42:c4:aa:8b:3b:70:54:b9:eb:48:41:db:
40:17:fe:02:aa:48:b2:df:e0:53:5d:4e:e4:9f:c0:
a9:33:79:40:90:e5:06:06:d0:53:8b:f2:7b:61:0d:
f6:0c:55:b9:87:83:1f:64:43:16:93:04:53:ca:a8:
26:2b:5a:c7:85:4d:94:36:7e:78:3f:d1:09:de:d9:
fb:a1:fd:74:75:de:3b:16:54:54:86:49:44:ec:53:
f7:02:68:a8:70:51:61:a5:6d:40:63:63:bc:d9:56:
11:c2:f8:c2:55:90:f5:99:31:82:f5:b5:84:22:2c:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:A2:C8:01:1F:BF:EB:2A:33:53:D8:54:29:6B:B8:51:7A:24:97
X509v3 Authority Key Identifier:
keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f5:29:ef:ef:5f:b7:98:32:97:b2:3e:83:3d:e9:ab:21:39:
21:7d:17:05:66:ac:f8:4d:e6:6f:1e:e2:42:16:27:2b:ad:f7:
95:eb:dd:9c:96:8f:fc:46:c3:a8:d5:22:07:43:fa:af:4a:34:
9f:58:f4:a9:7f:4e:dd:2e:c9:eb:1c:a7:04:21:c1:4f:39:b5:
19:ea:10:40:27:31:6d:8d:0a:b0:a2:3e:65:dc:51:b5:86:a0:
b5:77:98:97:d0:3e:20:49:52:2a:83:48:1a:c9:8a:a7:3c:69:
62:70:9f:12:fc:dc:41:fe:c6:5c:77:3e:11:43:4f:01:0b:0b:
06:e6:17:41:39:b4:a9:0a:fe:ea:2f:07:13:9b:2b:ef:41:c5:
52:f5:ed:6d:2c:8c:de:0f:9f:1f:f7:25:f8:bb:b6:8a:2a:8f:
07:17:6c:eb:5a:78:58:00:03:9f:9d:07:cd:9f:e3:96:8b:3f:
aa:f5:03:5c:21:0d:ba:3c:22:03:0a:b5:f7:9e:77:56:61:a2:
98:3c:4c:1d:7a:63:07:5c:94:a1:94:59:fb:5e:ce:b3:d1:1e:
07:30:f7:6b:ec:25:54:d7:ed:e5:a0:59:c7:d2:61:5d:62:18:
3e:7f:71:9e:80:85:fd:6a:48:47:61:4a:6d:bd:ff:41:69:a8:
bb:01:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:30:25 2025 by rpki-client