Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File: R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier: nsbg5oKkhUainb+GSr0h9d99/rS/Qni9bLGNB7LZav4=
Subject key identifier: B0:BB:C5:19:5E:28:20:E3:5F:B6:E2:AD:60:60:0E:25:12:78:FB:B9
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer: /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial: 01967A1FDD5436DEC10D49537E109B4A258D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 02:00:30 +0000
Manifest this update: Mon 28 Apr 2025 02:00:30 +0000
Manifest next update: Tue 29 Apr 2025 02:00:30 +0000
Files and hashes: 1: QXSM-tWrPmeWBheSqnXnaDNQmDc.roa (hash: x9yXB+eo0EInUWHjOj6vjP2I3KVEdKt4v4+AdmEQgDw=)
2: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: igr8jvOJdP0GxOHdKQpRokp03fw9PlOVYC3mrNTqmTs=)
3: XKLo22yCHGXk836_NiS1tUu23bU.roa (hash: YIucgsHMKAv9VlAABTFpvd0lAGyjSYl01+heYFoudqg=)
4: uw2WshwMtLO2FcZuN7xWhCinB_8.roa (hash: nkzSgxMXHvVYjALA+QY3vWMG5LDK/rRtbKYXv80gFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:dd:54:36:de:c1:0d:49:53:7e:10:9b:4a:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
Validity
Not Before: Apr 28 02:00:30 2025 GMT
Not After : Apr 29 02:00:30 2025 GMT
Subject: CN=b0bbc5195e2820e35fb6e2ad60600e251278fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:f8:a7:62:37:49:c2:4a:17:ad:c8:80:5a:
65:47:47:2e:e0:da:61:5d:f6:bb:4c:77:eb:24:ae:
b8:85:63:d1:46:60:30:09:16:18:56:96:c7:ff:20:
c7:f3:eb:eb:29:f9:5f:66:74:82:be:b2:99:d6:e6:
64:0b:0d:d8:67:a3:4f:ce:00:98:4d:b3:24:01:46:
98:26:58:dc:94:59:02:ed:e0:24:2d:fb:3d:ea:35:
57:3b:0c:7e:d9:b5:2a:3b:ce:b5:b8:46:74:51:6e:
f4:0f:cf:33:e9:04:0b:70:df:18:f5:29:d2:2e:db:
16:d8:69:2b:93:2b:e7:48:2a:8c:48:22:fc:f7:8e:
63:23:ee:e1:ea:f7:25:d4:0a:26:13:e0:74:b7:1d:
07:18:81:d4:5c:d2:8c:c8:ed:73:19:73:2c:e4:59:
58:ba:ff:40:a4:7d:06:ac:67:93:09:94:72:68:03:
c0:dd:1e:9c:09:5d:40:95:e2:c0:9e:b5:22:f2:4a:
3b:14:51:fe:98:47:04:fa:59:f0:b8:f7:44:d8:24:
bf:2b:f8:a3:5c:56:da:9b:cd:3c:57:99:a6:68:4c:
e9:8a:5c:15:fd:0a:7c:0c:7d:40:8a:76:2d:50:71:
55:20:72:c6:08:69:1a:c7:0c:ae:b1:83:d8:67:25:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BB:C5:19:5E:28:20:E3:5F:B6:E2:AD:60:60:0E:25:12:78:FB:B9
X509v3 Authority Key Identifier:
keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b9:da:28:30:0a:3c:4f:c3:bc:b7:8e:d2:c0:aa:2d:15:16:
50:5c:63:3d:ed:19:61:5a:10:5c:eb:29:73:84:20:41:56:61:
20:21:9b:16:a8:e5:50:2a:46:36:f8:61:19:88:93:fd:4b:96:
a4:89:59:38:d9:af:e7:7a:2d:99:c4:11:1f:db:83:84:e1:2d:
a1:d9:ba:25:94:8a:e8:e4:97:1a:bf:d1:e7:04:30:ae:c3:b6:
a0:57:cb:6b:52:52:77:ea:04:20:ce:60:e4:b2:61:44:32:02:
7d:1c:e1:e3:ec:e5:3a:65:4e:33:3a:1d:0d:9e:f8:71:4c:d0:
79:36:f2:7d:a8:2a:e8:db:1a:79:58:79:56:08:80:21:24:90:
8c:73:4a:e4:64:cc:70:c1:ac:4b:61:84:a4:d3:58:a4:cb:1b:
57:e9:00:dd:08:58:c6:65:1b:bb:70:b9:53:d7:df:fa:ab:38:
28:35:3b:8e:36:f4:38:a6:a2:7f:2d:cf:94:43:fe:2e:44:72:
60:30:ce:dd:12:d3:0a:86:67:99:de:26:c9:6b:df:9b:f9:20:
ea:bf:d0:9b:9b:42:39:48:70:13:94:3b:20:73:58:f6:5b:83:
36:d3:9a:29:8a:d4:19:a6:e3:a9:5c:11:e1:e7:d6:c8:c7:64:
87:33:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:51 2025 by rpki-client