Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: u4rxCfNNQ1KRcI1AjqhHZDG7kMg4fjJBwTiN4vZ9FSs=
Subject key identifier: 22:AF:9A:8B:8C:B4:54:52:52:EF:35:83:2B:18:B6:78:4D:FC:8A:C4
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 01969484610078EB6673D3A541547BCCF436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 0E2E
Signing time: Sat 03 May 2025 05:00:25 +0000
Manifest this update: Sat 03 May 2025 05:00:25 +0000
Manifest next update: Sun 04 May 2025 05:00:25 +0000
Files and hashes: 1: PBeiTxVVl13KulRPara1RXYVicA.roa (hash: RXsTBTBPcZfgBdF/8hAfnipircCVtF7KKV+ZAN7eFr0=)
2: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: dzML8wVFTS1WjyHESz0rMtgJsFuMi+4X4jgBMIcH6H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:61:00:78:eb:66:73:d3:a5:41:54:7b:cc:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: May 3 05:00:25 2025 GMT
Not After : May 4 05:00:25 2025 GMT
Subject: CN=22af9a8b8cb4545252ef35832b18b6784dfc8ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:01:40:7a:24:ea:b7:05:74:22:18:c1:cd:
d0:8d:4a:65:5e:0e:e2:7f:2e:a3:44:65:e7:6b:13:
22:b0:12:b4:3a:f5:12:e0:fd:27:70:64:92:8d:23:
7e:fc:c7:b9:83:ef:9f:64:b2:f6:81:d3:c7:7a:60:
36:3f:3a:59:95:0c:4f:58:b9:8f:3a:a2:15:f4:b6:
b4:47:6f:42:df:23:7b:8d:c8:b9:52:cf:39:e8:2f:
53:8c:1d:51:92:c1:c7:66:87:b1:e1:bb:07:a5:72:
0b:f4:17:1e:f9:7a:94:7a:9e:51:62:5f:c9:d9:54:
24:19:87:92:39:7a:b0:97:cf:79:12:68:80:a6:7f:
57:0e:e5:d2:94:2f:b1:bb:3a:8d:2d:a6:0b:cf:99:
1b:68:bd:62:43:de:1f:2f:ab:3e:d6:f1:57:03:9d:
a5:60:6e:6b:37:58:74:c8:00:f2:1e:3c:23:df:25:
5a:3b:7f:84:3c:3b:c1:69:8f:a5:4c:1d:42:5f:12:
66:54:e9:24:72:c5:48:e2:c5:c1:b5:55:13:35:d2:
4d:aa:f3:e7:f9:22:01:22:29:56:da:d9:6e:9c:24:
87:0d:52:56:fa:cd:69:13:08:62:90:26:8f:e9:d5:
98:38:70:90:a7:d7:39:8f:aa:66:70:dd:c4:16:b7:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:9A:8B:8C:B4:54:52:52:EF:35:83:2B:18:B6:78:4D:FC:8A:C4
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:33:bb:05:ab:ad:ee:b9:d3:be:06:b0:69:48:2f:44:bb:e5:
f9:95:75:53:d5:9b:9d:1a:35:ac:8d:4a:9d:62:ba:8c:0f:b0:
d3:40:a1:13:44:bd:fd:4f:4c:fb:0b:30:23:2c:ee:2d:6c:42:
f5:46:b5:be:47:2c:2b:bd:40:04:f8:52:27:46:1e:1d:73:51:
f7:17:1b:a0:4a:18:9f:87:74:01:0e:0d:c6:0c:7c:64:ab:e9:
fb:29:a2:24:ab:e8:d6:d2:96:10:2a:9c:d7:ab:00:38:cd:24:
66:1f:84:fa:06:b9:d7:d5:bb:c7:f4:a6:dc:18:e7:e2:bc:a3:
c9:23:41:68:14:e0:db:ee:e2:95:d2:97:3d:43:a9:56:d3:1e:
5a:79:35:9a:6b:0b:37:6f:3e:78:50:9e:34:2d:f7:6f:d5:3b:
cc:6d:14:12:4e:5a:66:80:33:cf:94:32:40:3c:8d:b8:d9:0d:
d1:e6:5d:1a:ef:70:14:61:63:dd:e8:48:5b:74:52:a8:d7:02:
0a:5b:28:cc:0b:a0:a7:36:7f:b3:a3:f2:aa:69:1f:a6:8b:c6:
76:91:d9:e0:73:b0:5d:f1:4c:c2:64:5c:45:e6:74:d8:53:08:
b5:c9:84:dc:09:96:b1:20:76:2b:2b:a6:03:b0:a4:04:a2:03:
57:77:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:47:51 2025 by rpki-client