Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: B9fjx4jafOM1e0Nn7V1Tj2NayD+kP+ozAQYFGid55xU=
Subject key identifier: 15:BA:09:CD:19:28:3C:B3:8B:A9:E5:28:94:2D:F1:C6:27:B9:D8:D6
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019683C7F5BDC014D2AAE752959439AABD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1075
Signing time: Tue 29 Apr 2025 23:00:41 +0000
Manifest this update: Tue 29 Apr 2025 23:00:41 +0000
Manifest next update: Wed 30 Apr 2025 23:00:41 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: r6lu4Z8MQFvfe+WOeFASpoTbOkhDYGfuf17VJ7bQryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:f5:bd:c0:14:d2:aa:e7:52:95:94:39:aa:bd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Apr 29 23:00:41 2025 GMT
Not After : Apr 30 23:00:41 2025 GMT
Subject: CN=15ba09cd19283cb38ba9e528942df1c627b9d8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:fc:14:53:34:c5:bc:04:3e:16:e4:af:7f:
86:b6:8f:13:66:c8:7f:20:54:b6:22:14:8d:2b:ac:
bf:f2:f2:36:d0:e6:fe:35:62:71:a4:34:ea:8a:61:
51:dc:be:69:98:2f:9f:a0:fe:0b:39:ec:a5:3d:aa:
9a:c1:e5:e4:0e:ea:15:39:ba:be:0d:59:32:70:c4:
49:d8:d5:7c:a0:42:a7:e6:b2:6f:3a:11:c1:0f:4c:
db:d7:cf:c6:aa:43:45:8f:60:80:81:a2:86:d1:08:
ec:69:13:25:7b:95:1b:91:f8:58:c4:f0:9c:28:dd:
d6:3b:d9:4e:af:c1:98:ae:27:ac:3e:b4:b1:b8:48:
9c:e0:b5:42:28:ed:3e:50:33:e0:b8:a0:84:31:9b:
f3:bd:fd:f0:40:e2:58:31:d9:da:32:85:54:b6:c4:
83:e1:cf:a4:8d:6a:eb:a3:be:4a:80:2e:94:bd:d0:
6b:52:c6:bd:42:7a:9e:d4:d2:cc:55:69:1b:22:ce:
4e:9e:36:cf:94:fb:16:cc:83:16:08:60:84:78:cd:
21:11:19:3c:de:e4:43:24:7f:2a:1c:3e:09:3f:d5:
6f:06:07:e5:bf:dd:00:c0:c5:41:c6:2e:a3:53:e2:
b9:cf:54:d7:56:3a:f3:4c:ce:ac:79:32:bf:f1:e7:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:09:CD:19:28:3C:B3:8B:A9:E5:28:94:2D:F1:C6:27:B9:D8:D6
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:04:81:ae:c5:94:9e:9f:7a:ae:47:59:33:c3:62:c7:79:
0d:fe:e0:3d:fa:f7:78:00:a2:a9:c2:b0:ce:84:b8:62:09:fd:
00:d6:8d:76:97:15:22:9d:c7:12:51:22:78:ae:46:34:7a:4b:
5a:10:ea:a7:cc:f2:83:ee:a0:bb:29:9e:89:3e:d1:ba:08:1c:
20:6c:c8:08:c8:23:d6:82:9a:67:ce:48:4e:aa:3e:98:b8:e2:
48:8e:41:42:43:4e:a3:2d:0b:ad:d7:f4:ed:c9:82:60:01:de:
d6:ad:2a:1f:a4:bf:18:df:20:6a:3c:53:66:79:8a:60:40:f3:
6f:de:e8:d6:5a:20:ea:a8:6b:b2:73:79:e0:b4:7c:22:21:84:
15:fb:39:6d:70:c0:bc:50:ba:29:35:28:26:03:71:94:6c:ed:
42:74:70:14:89:63:27:e6:70:66:96:aa:92:2f:19:db:68:66:
2b:d4:eb:e0:53:14:6c:8a:cb:53:91:49:b0:12:f1:8c:86:4e:
55:c5:55:81:e2:f8:c3:1c:78:dd:8b:ef:f1:48:6e:7e:88:ac:
ac:fd:14:28:3f:3a:f9:f2:5a:8a:32:03:7d:7d:6c:c6:04:62:
33:dd:93:76:c4:79:89:a7:e8:3c:b9:be:91:26:da:31:d8:93:
f2:df:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:24:38 2025 by rpki-client