Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: L2eWDqdi00GdfObKGlxhAuzBslAbNpdf77t/pWkphPc=
Subject key identifier: E3:46:7B:A2:56:AE:C0:3F:79:39:CD:DD:10:FF:DA:DF:28:99:88:F6
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0196759E84AEA2F09BA1C9082E3BC1BF43BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0CC3
Signing time: Sun 27 Apr 2025 05:00:44 +0000
Manifest this update: Sun 27 Apr 2025 05:00:44 +0000
Manifest next update: Mon 28 Apr 2025 05:00:44 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: WWY/wsTjtVHPSI6UPrMUV8uW1ZqaYGVDc4EPhDeY0tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:84:ae:a2:f0:9b:a1:c9:08:2e:3b:c1:bf:43:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Apr 27 05:00:44 2025 GMT
Not After : Apr 28 05:00:44 2025 GMT
Subject: CN=e3467ba256aec03f7939cddd10ffdadf289988f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:e5:4a:3d:d9:11:09:ab:30:82:ff:a1:50:
f6:34:26:68:03:de:0c:25:d1:64:0c:1d:f6:7b:45:
be:f8:d4:84:70:e0:27:ae:51:09:cc:b4:b2:95:cb:
a3:c5:fd:d3:56:8f:3b:c5:2a:f7:b2:b0:c0:4a:de:
23:cf:fa:8f:46:67:52:f5:92:e7:dd:48:39:b9:11:
9e:8d:53:10:e9:16:9a:c0:53:31:bf:a2:e5:ca:0e:
fa:c6:ba:7d:bc:2f:b4:3e:82:99:14:24:8c:ab:a6:
99:e9:e5:a8:08:9c:89:e8:80:85:bb:cd:7e:57:0b:
e5:e4:17:5b:be:de:a5:f8:a3:9b:0b:2b:52:d0:86:
7c:ff:4c:ac:f7:bf:d4:cc:93:16:8e:d0:fe:d6:a7:
b8:18:b5:79:79:39:99:0b:78:cf:5c:27:c5:25:25:
84:74:58:ea:f1:64:63:ed:50:4e:92:ff:ad:d3:05:
e1:2d:36:2f:ad:58:c9:99:e5:0f:27:ac:66:1a:5d:
8d:b0:e1:f6:11:69:a5:d9:88:eb:df:df:7a:87:34:
a4:6f:27:64:07:4c:7e:1b:b1:31:27:e3:56:da:0e:
b1:85:37:dc:db:57:f3:d9:68:49:b5:d0:43:ce:ca:
69:13:8b:d7:2f:55:cd:cc:8d:47:19:f4:5a:61:48:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:7B:A2:56:AE:C0:3F:79:39:CD:DD:10:FF:DA:DF:28:99:88:F6
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:7b:a7:e5:2c:37:42:09:fc:3d:81:15:cd:ad:e9:1a:ac:
1c:be:7d:06:d5:fe:9a:a5:e2:33:47:86:dc:5b:d1:10:a3:5d:
8c:97:f0:2b:c2:1a:2b:6d:03:35:11:e3:df:18:64:2d:f2:12:
2d:6d:0e:eb:64:dc:94:5c:da:8e:46:4d:84:7e:f9:7b:13:3a:
c0:9f:10:a0:85:33:9c:36:a2:8a:06:69:e4:ae:cf:7b:9c:5b:
30:ca:55:80:0c:62:8c:aa:2c:7d:84:38:8d:60:81:ed:0f:c7:
41:7d:7d:85:18:64:0f:6f:73:9f:24:ac:a0:94:07:32:e5:83:
ec:47:7d:d3:a5:a8:b6:51:b5:b5:3d:b6:ca:7a:aa:d3:40:58:
30:46:ee:8f:41:fb:fe:c4:26:d6:13:61:0f:c7:19:dd:95:c9:
85:b2:32:d9:7d:70:a2:d1:2d:7a:b9:62:10:a5:8c:a0:8c:d4:
07:9d:d6:67:0d:78:81:f8:fc:e1:56:8a:89:a5:a3:e8:58:92:
ff:fe:86:dc:c8:f1:ff:ba:b9:67:1b:b1:eb:64:26:a1:2c:69:
92:ff:3c:89:20:16:e2:8b:42:45:ea:1a:65:6b:86:eb:21:e2:
b0:06:47:67:2c:c3:2b:5f:45:d4:72:fb:2a:67:53:53:67:b5:
83:1f:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:47 2025 by rpki-client