Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: MiPfR6Djh0RXFBy7HuCAyHgsRBI1RyK8rdammoQeZk8=
Subject key identifier: 3C:DC:CB:60:2C:84:C5:57:A5:66:A5:89:4E:80:CE:79:51:AA:E3:0F
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 0196789F4D3B25E4F0E73559A048FB3851DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 05A6
Signing time: Sun 27 Apr 2025 19:00:27 +0000
Manifest this update: Sun 27 Apr 2025 19:00:27 +0000
Manifest next update: Mon 28 Apr 2025 19:00:27 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: +MN1+WKQ7quyNHY9MmZQBcrbO7nKocuJsk7XrNUzq0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:4d:3b:25:e4:f0:e7:35:59:a0:48:fb:38:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Apr 27 19:00:27 2025 GMT
Not After : Apr 28 19:00:27 2025 GMT
Subject: CN=3cdccb602c84c557a566a5894e80ce7951aae30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:a1:ad:b6:bc:dc:86:9d:1a:77:5f:da:90:
cb:24:5e:42:23:c5:54:7e:8d:d6:f2:5c:af:31:f9:
1e:b6:e9:df:ed:93:e3:42:cf:81:57:e4:ee:28:b1:
33:c7:6b:ca:7e:d0:5d:6c:70:0e:05:1a:e9:7d:61:
54:f2:4b:ab:d7:45:b9:9e:64:29:71:fb:4c:63:15:
80:2c:d2:fe:94:36:f0:2a:2d:9c:da:23:5a:94:31:
59:6a:d2:5c:ea:9b:fe:55:6a:47:93:b9:97:d5:b9:
69:1d:90:2e:57:84:a2:77:30:eb:68:92:ad:4a:58:
5e:8b:96:99:0a:82:bd:3d:0d:74:31:cf:fb:31:59:
91:a1:3d:7f:68:d6:04:57:50:37:17:3f:b6:3f:de:
c9:cb:a6:23:10:43:d9:58:3f:59:70:46:c1:82:24:
c2:81:e3:e5:41:b7:0e:da:35:ad:6d:b8:07:60:05:
35:48:c4:16:9e:7c:b7:aa:44:24:15:e2:5e:ec:8c:
b1:40:1e:aa:52:9f:e6:8c:7b:d2:bc:33:6f:4e:ec:
e3:9e:a8:98:49:34:c4:11:e4:f7:31:ca:0c:09:33:
f4:0b:4b:92:c7:9a:e3:95:37:cc:d5:00:cf:c0:43:
aa:b6:86:98:12:fc:52:69:8a:f5:27:a8:8b:fa:e4:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:CB:60:2C:84:C5:57:A5:66:A5:89:4E:80:CE:79:51:AA:E3:0F
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e7:23:4b:78:81:2e:c9:4d:b9:b7:f5:15:19:7b:a3:f6:7e:
f1:67:1d:62:4e:ee:3c:30:a6:9f:df:9b:fa:40:02:92:4e:2c:
11:e8:7a:a2:cc:a5:08:4b:fc:d4:86:b1:ed:8b:a7:34:18:0f:
41:e6:f0:ef:63:ee:df:63:f2:1f:09:ec:f3:5c:cd:43:42:73:
c6:9a:0d:47:02:fe:cb:f9:22:6b:9a:b7:62:65:f5:05:71:1e:
45:f3:c2:a4:a4:47:bd:9f:57:78:de:62:ae:3c:94:d5:ab:8e:
a7:d8:32:0b:4d:a7:37:02:64:0a:27:8e:0d:2d:a3:30:2a:9e:
69:2e:86:34:93:db:0d:1b:66:34:5f:e3:98:99:02:85:ff:49:
77:5f:05:9c:09:f9:d9:e2:3c:36:0b:5e:45:3d:0d:a1:a0:29:
e2:17:f0:92:a0:f1:b2:64:a0:7a:eb:47:24:90:b8:c6:25:ea:
03:d9:ec:6d:4e:8f:e5:e4:3c:4e:66:23:7b:2d:7e:28:98:27:
d5:ca:d0:54:34:4e:aa:02:5e:8a:15:46:e2:71:ef:0d:b3:36:
d5:74:f3:98:70:a1:31:b8:a4:b7:68:3a:dc:20:36:de:ba:5d:
d1:ae:54:d7:6d:a0:6f:58:01:2a:f9:94:80:2d:e9:03:87:31:
65:fd:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:33:33 2025 by rpki-client