Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: EE2pY9/QcRvIeODIRDWrYWPpljz9CAa4uXK3mINY2xw=
Subject key identifier: 98:5E:CF:9A:81:92:C3:0D:36:F8:EC:A3:F9:34:84:90:57:03:4B:49
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019684DA689788554890C3C51FFF89E70F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1210
Signing time: Wed 30 Apr 2025 04:00:28 +0000
Manifest this update: Wed 30 Apr 2025 04:00:28 +0000
Manifest next update: Thu 01 May 2025 04:00:28 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: 61c8kei2ydFoiXx4DGfmx9RaS/gjz86AVZCGs+fdtG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:68:97:88:55:48:90:c3:c5:1f:ff:89:e7:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Apr 30 04:00:28 2025 GMT
Not After : May 1 04:00:28 2025 GMT
Subject: CN=985ecf9a8192c30d36f8eca3f934849057034b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:01:66:68:f9:9b:c0:85:63:08:28:9f:da:
da:78:4a:d1:2f:78:d4:1a:39:22:d7:b0:46:2e:7a:
62:46:14:a5:10:35:54:4f:94:2c:2f:39:82:8d:53:
e0:86:7d:15:0e:2d:67:42:52:51:ff:db:29:3d:d5:
2c:9e:c9:ef:9c:29:a5:b2:68:29:28:c9:c5:ea:53:
3c:b0:64:07:0e:69:97:e0:59:f2:ba:1c:ba:1c:49:
8c:66:65:ae:b9:6f:4b:0f:c5:37:11:e9:51:2d:eb:
99:8d:a9:52:77:ff:f7:ba:b5:8f:61:cb:5a:e1:ef:
a1:e2:7d:74:38:96:66:02:42:df:cb:37:97:0f:22:
7e:c1:9a:3b:29:13:c7:c8:d0:7b:1f:56:16:bf:33:
39:f0:99:57:4d:5e:c4:6f:70:14:01:e8:ae:1d:2d:
c9:c2:f0:84:a2:f1:db:1a:85:a5:4f:06:be:15:0b:
2a:85:29:05:53:5a:41:a6:e5:20:84:e8:a4:03:93:
b9:0e:e8:ee:83:ef:f6:04:77:67:c8:29:ac:c5:28:
c7:f3:a0:52:4e:81:ae:ca:aa:b2:d9:02:3c:68:e4:
f3:df:11:b6:91:2a:f9:0c:ff:9b:74:df:41:3a:1b:
8d:18:98:8b:d1:4e:08:a2:f8:84:52:cb:50:55:46:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5E:CF:9A:81:92:C3:0D:36:F8:EC:A3:F9:34:84:90:57:03:4B:49
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:72:85:cd:60:8d:34:4b:43:4b:e0:56:75:3e:a9:af:72:
71:52:56:b7:24:b2:be:f8:c2:5b:c9:1f:7c:40:f5:57:1a:8a:
26:7c:02:b9:c4:30:fc:97:7b:7e:41:2e:16:49:fe:b8:c6:fc:
67:9e:ee:e9:4a:df:44:d4:6e:ca:1c:32:7c:57:15:b6:c4:1c:
8d:97:e4:cf:bb:d6:45:74:27:1e:7d:07:52:3c:65:9c:35:a3:
36:94:2f:a3:ed:64:ec:33:2c:be:84:78:e3:11:44:d4:9c:8f:
ee:5e:f7:16:aa:89:52:21:36:2f:b3:62:9d:9f:7d:00:70:59:
b8:d4:e5:93:ea:7b:40:94:cd:ce:9c:8c:69:5d:26:7a:ac:31:
35:f7:a3:ab:50:40:a0:3b:85:04:92:bf:d4:d4:f9:f3:1c:53:
17:ca:6c:72:a1:70:0c:6d:ad:5e:8a:a6:b9:cc:54:3f:55:99:
a6:d0:2f:cb:ce:a9:70:c8:18:ff:65:67:13:2a:44:87:3a:3c:
a4:2a:fd:56:29:d1:0c:b8:09:6e:d4:0d:d7:2d:8d:1f:94:6a:
59:58:13:09:7a:73:47:04:e4:b7:ca:a3:3f:b5:b3:ec:43:e9:
34:3a:f1:76:0f:3e:e3:fe:3c:5d:33:32:78:4d:9d:73:97:de:
2c:77:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:33:09 2025 by rpki-client