Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: DUG8rA3ryMI+8GaCOFOmYDd+H/MQaxWBz9zRUYv71Ys=
Subject key identifier: CC:C3:6C:D6:57:0A:98:29:9D:61:29:6C:EB:93:71:7D:08:36:BF:5E
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 01968DDD807DCD9005909BB0BE90943B19EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 04DD
Signing time: Thu 01 May 2025 22:00:25 +0000
Manifest this update: Thu 01 May 2025 22:00:25 +0000
Manifest next update: Fri 02 May 2025 22:00:25 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: M/UrPVrtAkGx64+xYi6t0xu59fkznaFZ0ArqlagdRTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:80:7d:cd:90:05:90:9b:b0:be:90:94:3b:19:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: May 1 22:00:25 2025 GMT
Not After : May 2 22:00:25 2025 GMT
Subject: CN=ccc36cd6570a98299d61296ceb93717d0836bf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:6e:3d:f0:49:10:7d:79:eb:87:30:21:b0:
68:2e:96:c6:88:6f:a2:35:89:3b:e4:4b:84:6a:e4:
f7:e2:4e:f8:fc:07:d2:eb:81:43:f5:db:de:72:d3:
4e:31:fb:5c:38:78:dd:28:03:83:28:61:da:1f:13:
4c:32:2c:22:25:38:28:b4:49:c3:ab:54:82:4c:1b:
68:f9:d0:d6:7a:9b:2a:4a:0c:91:8b:ae:cc:e4:1f:
2f:1f:6b:2b:fa:ac:86:a1:9e:19:b5:6a:75:02:ff:
ae:6b:00:ae:fd:6d:95:48:02:67:26:1f:b7:d6:90:
00:4a:be:fe:6c:ed:56:48:ea:06:fd:52:b5:0f:3a:
2a:d4:e8:36:68:7e:31:ff:d7:1c:40:a5:21:4e:21:
84:60:a3:34:55:00:18:ce:33:0a:85:75:07:06:c7:
cd:4b:52:1f:fe:e0:bb:55:aa:11:db:11:d9:fb:de:
62:05:3b:60:5c:0a:c5:3f:80:0b:88:6b:e7:a6:ec:
d5:e6:e5:70:ba:f9:51:fc:f9:a5:eb:af:28:69:de:
fa:29:e4:b7:41:c2:28:a1:3b:63:24:82:43:2b:a8:
04:a9:55:cf:12:44:d4:49:29:a1:6a:25:0d:d8:cb:
25:b7:ae:82:31:0b:4b:0f:c0:0c:4a:12:71:b2:8c:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:6C:D6:57:0A:98:29:9D:61:29:6C:EB:93:71:7D:08:36:BF:5E
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c4:cf:d7:c8:02:94:cb:d9:4b:46:95:f8:a9:d9:3d:ca:59:
1d:ba:6d:57:47:e5:53:2e:5e:3e:bf:0c:9c:1f:cb:3a:95:2c:
05:0a:94:c6:1a:d7:01:f5:d5:10:d2:da:52:51:30:73:b7:7a:
04:1f:eb:2b:5c:3f:ff:03:86:a7:ba:8b:07:99:bb:8b:1f:bf:
eb:11:49:91:31:12:b5:95:63:ce:1c:8d:78:10:ad:28:fb:cd:
02:6b:8d:e8:0b:9a:4d:b7:bc:fb:b3:ca:54:0b:2a:02:1d:c7:
46:d2:74:ec:a9:49:e6:73:6e:3f:96:ca:de:7b:8f:41:e8:42:
58:46:ec:9d:3e:45:5e:a8:ba:66:41:09:9a:d3:e5:1a:f1:d6:
a9:db:28:3a:15:be:52:f2:78:52:f0:9c:53:11:d9:63:8b:a3:
9f:aa:e2:db:32:8c:e2:c2:f4:21:9f:bf:5f:b8:84:6c:54:10:
9b:5b:99:47:93:83:ff:7b:f9:d2:3d:60:08:a8:cf:dc:17:e9:
fb:0d:da:9f:dd:e0:43:54:b2:0d:30:28:27:16:c4:09:b0:ee:
57:56:be:6d:e1:98:b0:65:c2:dd:c2:f1:65:de:7c:b8:12:c0:
de:33:c8:92:eb:9a:c1:17:2b:69:8d:e6:93:50:28:69:50:1b:
b2:c4:5c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:48:52 2025 by rpki-client