Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
File: b5RYfBGZosPfQBl7GfNlDGF94UU.mft (raw, json)
Hash identifier: PhqrCBwYm6hw3mBWgKU2fOdaSazWuOlf0nGkPXosX8A=
Subject key identifier: 47:15:96:4E:51:28:C7:AC:A0:E5:3A:F7:F1:61:33:14:BD:A0:94:2E
Authority key identifier: 6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
Certificate issuer: /CN=6f94587c1199a2c3df40197b19f3650c617de145
Certificate serial: 01967A8DF70071445F12EB25679865018DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
Manifest number: 32
Signing time: Mon 28 Apr 2025 04:00:46 +0000
Manifest this update: Mon 28 Apr 2025 04:00:46 +0000
Manifest next update: Tue 29 Apr 2025 04:00:46 +0000
Files and hashes: 1: b5RYfBGZosPfQBl7GfNlDGF94UU.crl (hash: mn8nvPaLJdRh3TBI2tyc686OMAdAOeG9JgeHg1H/7Qc=)
2: ePKBy3s7DCa8LCYPrDuLad8LQds.roa (hash: IOfYTJhGS5ceI6YMnArvR/xLdlNTNiNsJ5hdFLFW72Q=)
3: xTCv3RXSZS1iTavCUS9l9JR_D5E.roa (hash: A3hLBLSXg8J7g4DoDdWC6smLJPKHGcfSEfHqAmRLjjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:f7:00:71:44:5f:12:eb:25:67:98:65:01:8d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f94587c1199a2c3df40197b19f3650c617de145
Validity
Not Before: Apr 28 04:00:46 2025 GMT
Not After : Apr 29 04:00:46 2025 GMT
Subject: CN=4715964e5128c7aca0e53af7f1613314bda0942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:3c:50:2a:e8:4c:35:ae:26:6f:61:7c:7a:
c6:4a:35:91:90:6b:ae:e7:e8:a3:bd:1b:81:64:94:
12:ae:22:81:fb:74:9d:c7:58:9e:b3:47:5c:86:77:
e7:31:e1:74:b2:fd:df:a0:77:21:fe:e2:a0:da:65:
69:f5:02:14:76:5a:c5:db:41:a8:bd:84:cb:09:90:
42:ea:04:e6:c6:ae:04:a1:15:f3:af:49:80:37:ac:
8b:cd:0d:66:20:94:ab:be:0c:73:ee:38:2c:fb:76:
6c:d5:d7:18:c2:3a:5a:77:b1:90:a1:9a:5e:94:2e:
d7:05:c7:36:dc:e6:3f:87:fa:df:a5:4e:9a:79:97:
e6:dd:45:f1:79:3a:de:25:48:bd:df:84:91:99:db:
c7:ec:94:f1:ea:52:0b:72:57:e1:73:15:4f:d5:51:
a9:05:e1:ae:fc:33:ba:0c:6b:0b:76:b1:e9:02:b8:
c8:d2:04:84:82:53:00:67:d1:16:0f:dd:d0:a9:69:
ce:18:4c:a7:65:1b:cc:ff:6e:e2:16:52:3d:d4:3c:
ef:44:75:09:c7:d7:02:1e:3b:89:07:be:a4:5e:0f:
92:3e:ca:a0:27:80:54:d3:e6:14:23:1d:4f:21:83:
b4:f0:a1:bf:4c:3a:2f:e5:ad:16:fe:48:07:53:a0:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:96:4E:51:28:C7:AC:A0:E5:3A:F7:F1:61:33:14:BD:A0:94:2E
X509v3 Authority Key Identifier:
keyid:6F:94:58:7C:11:99:A2:C3:DF:40:19:7B:19:F3:65:0C:61:7D:E1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5RYfBGZosPfQBl7GfNlDGF94UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0c14db-8620-4996-afae-b9cf40094640/1/b5RYfBGZosPfQBl7GfNlDGF94UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:04:93:b9:a8:b5:7e:da:70:c4:77:43:af:39:47:d1:7a:e1:
97:d9:08:7b:e2:7c:f1:e6:8e:07:03:39:30:bb:4f:08:b0:b0:
e7:8b:5d:fe:c7:85:33:d8:1e:ca:33:0e:fa:a8:35:20:d4:47:
97:b1:3b:43:f3:52:81:c4:7b:9a:0a:2c:a4:0f:64:62:5d:48:
15:ea:ec:c2:5d:bb:2e:13:43:7a:71:eb:65:10:9c:55:80:ef:
67:dd:20:fd:97:85:b8:da:b5:d6:70:25:48:10:10:aa:81:c3:
09:77:fd:5e:54:da:2a:45:91:75:b2:77:28:9f:dd:35:85:27:
82:df:8f:1f:23:a9:01:81:53:23:78:c0:9c:e7:10:9d:c6:b4:
3d:61:a9:80:bb:4d:e5:9e:e8:fd:53:1b:c3:db:01:17:31:e0:
6d:cc:64:b0:2d:a9:9e:6c:1c:0d:07:43:0d:a7:99:80:4b:8c:
32:8f:ca:7d:64:37:76:95:b8:10:79:2f:b9:9c:48:1c:9e:86:
0b:30:6b:e0:7c:43:ac:a7:dc:fd:98:fc:99:91:21:3e:75:49:
93:76:0a:56:db:28:3d:33:c4:e2:1c:1c:5a:da:53:fb:76:99:
bc:5d:e6:92:b4:96:b5:f4:73:ac:c5:c6:15:19:f4:8e:c9:cd:
7b:49:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:32 2025 by rpki-client