Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: A8p4wdiXlOpENqBH/0F5qYO18bT+VRDYDgQgTFEtdZM=
Subject key identifier: 55:87:2A:7D:12:F9:00:EE:00:AA:6E:A2:2D:82:87:8D:58:22:4D:71
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019675D577D8B554821C4C94200B5802A824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 06A5
Signing time: Sun 27 Apr 2025 06:00:46 +0000
Manifest this update: Sun 27 Apr 2025 06:00:46 +0000
Manifest next update: Mon 28 Apr 2025 06:00:46 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: 1BMeeErX+KScew8+M2lrYS5pQTmM9E+fa7Cf+WHuEfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:77:d8:b5:54:82:1c:4c:94:20:0b:58:02:a8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Apr 27 06:00:46 2025 GMT
Not After : Apr 28 06:00:46 2025 GMT
Subject: CN=55872a7d12f900ee00aa6ea22d82878d58224d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:a4:db:86:81:cf:bc:78:65:a2:bf:e6:b0:
7c:2d:2c:32:68:03:a7:81:11:5e:16:fa:96:99:5e:
d8:4b:29:21:95:41:16:da:54:ed:04:98:82:f0:76:
4d:23:28:55:01:0d:06:55:cb:ea:ab:c3:d9:2e:ef:
69:3e:a0:0f:df:db:99:57:30:08:0f:62:a4:14:eb:
74:cd:86:a1:a8:8d:71:ba:27:23:1c:03:8f:2a:85:
9a:61:72:1f:d6:0c:61:d9:e8:5e:7d:6f:57:3f:33:
2b:27:35:9c:74:1b:2d:22:f3:9d:63:cc:fb:23:e0:
cd:9d:c1:54:9b:a6:1b:11:d3:eb:8f:0c:b8:81:a6:
d3:da:2d:e7:28:74:6f:9c:3b:46:f9:0a:7c:c4:1c:
51:27:8a:ea:5c:77:1d:1f:de:d1:06:e8:e9:ce:56:
c8:c7:c6:5f:93:f7:3c:88:5d:e1:19:30:34:f6:40:
4b:23:1a:cd:10:b0:29:b6:35:be:30:a1:1d:c4:11:
88:b4:8b:cf:3c:0e:0a:8b:56:ff:20:69:c8:e6:43:
b2:b4:9e:a3:1e:11:ea:3c:31:cf:92:8a:9f:3a:2e:
a6:c6:6e:36:c0:c0:13:b1:b3:5a:b4:88:23:e8:4c:
c9:14:84:f3:10:fa:ca:a9:2c:a5:ad:85:86:08:24:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:2A:7D:12:F9:00:EE:00:AA:6E:A2:2D:82:87:8D:58:22:4D:71
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:23:85:a7:4b:40:5a:61:06:53:0e:29:8e:c5:97:23:28:59:
6b:dc:ed:da:80:1e:04:bc:8d:4d:49:e6:86:5f:ef:9a:8f:da:
35:e5:9c:4c:5b:3b:5e:92:31:29:48:83:f9:58:b1:da:24:35:
12:a8:ab:b1:5e:a1:87:e7:7f:27:f9:75:ac:4e:88:9a:a0:6f:
ea:f0:19:0a:2b:81:d3:c8:3c:f2:66:67:3e:2c:34:cd:dd:8c:
19:94:e2:18:4a:5c:14:04:5c:f1:d6:7b:15:63:53:27:89:5e:
d3:00:31:37:fb:4f:b8:8b:08:08:de:78:71:20:0d:11:26:ca:
68:59:ba:95:71:64:4b:74:5a:2f:cf:97:da:b3:0f:5d:c9:49:
56:78:28:5c:04:2f:f1:06:e3:a7:e9:9e:20:df:88:8b:ac:48:
3c:b9:a0:a9:f6:52:a4:e3:dc:d3:79:dd:f4:51:27:8d:4d:4b:
a9:34:33:4e:5c:b6:71:d9:54:15:60:0c:69:f3:40:d0:65:6e:
a0:c8:ee:65:a9:63:d4:0b:d3:a0:e4:8b:4a:0f:d4:c3:15:5e:
23:10:e5:42:b5:2e:6a:c4:6f:ce:05:6c:9f:7f:77:19:d8:6d:
fc:a0:87:48:56:e5:38:6d:a0:87:9a:cd:d1:cf:33:46:f9:d9:
17:e1:9c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:47:04 2025 by rpki-client