Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
File: v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft (raw, json)
Hash identifier: FYINuf4tR6lsRFzqIGs72PUTXYG/j4C24UIcpbD9Z9A=
Subject key identifier: 02:DF:DD:A4:98:19:D1:D1:C5:6F:21:ED:9C:1F:78:5E:DF:48:B9:57
Authority key identifier: BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
Certificate issuer: /CN=bfabf5a474afe7212331670e831e119da38f284f
Certificate serial: 019684DAB03ADFEFD77121C75CCD392E8A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 04:00:46 +0000
Manifest this update: Wed 30 Apr 2025 04:00:46 +0000
Manifest next update: Thu 01 May 2025 04:00:46 +0000
Files and hashes: 1: GhyJElhSMkb21ni84p3HgeSkxTQ.roa (hash: KwUCFvaWxHo9sPEoV9+enTpSMnw5D6fXp7AzPwgg1sY=)
2: v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl (hash: HlVH5Bcfzk9Kagv6TKP39UNYs4VN+6KMvIivw0IkJu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:b0:3a:df:ef:d7:71:21:c7:5c:cd:39:2e:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfabf5a474afe7212331670e831e119da38f284f
Validity
Not Before: Apr 30 04:00:46 2025 GMT
Not After : May 1 04:00:46 2025 GMT
Subject: CN=02dfdda49819d1d1c56f21ed9c1f785edf48b957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:30:a9:ae:2b:0b:3b:27:1a:b6:e9:5a:da:
9a:b1:7f:00:38:d1:b9:68:b7:89:32:e4:b4:0c:17:
e9:dc:8f:3f:04:a7:ad:37:c9:cf:21:ad:a7:70:9a:
b1:55:dd:50:c1:56:2c:cd:73:ac:78:21:f2:5c:59:
98:f5:01:82:b2:78:4e:2a:23:12:48:46:37:b0:d1:
95:34:2b:d2:40:03:c2:2a:ed:6a:38:00:99:12:1c:
23:3b:f4:8a:41:74:93:8e:32:b8:b0:96:5a:b6:9e:
d0:24:55:a8:76:bb:15:b8:2a:fd:2c:f2:3d:53:0e:
a3:71:ae:32:aa:ab:b3:f5:dc:b7:90:36:6e:fb:05:
2f:b8:4b:84:4d:93:0f:3b:96:d7:ca:ae:e8:bc:57:
b7:ce:d1:92:59:22:8b:c4:54:1a:22:f1:8c:f7:6d:
52:8d:3a:8a:6b:16:31:69:30:65:66:99:2d:a1:8d:
5c:fb:bf:f8:c4:5d:69:4f:86:e8:27:90:92:b8:c4:
61:ed:37:5f:dd:27:c3:cd:d7:3c:a6:78:3e:a7:3a:
d5:df:04:65:a3:ad:ed:7a:33:1e:9e:89:b1:aa:c2:
8e:88:33:f9:8d:3d:a7:94:ee:b4:a1:b4:75:cd:4f:
64:23:d2:37:1c:c6:46:90:21:65:98:5a:a4:12:b9:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:DD:A4:98:19:D1:D1:C5:6F:21:ED:9C:1F:78:5E:DF:48:B9:57
X509v3 Authority Key Identifier:
keyid:BF:AB:F5:A4:74:AF:E7:21:23:31:67:0E:83:1E:11:9D:A3:8F:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6v1pHSv5yEjMWcOgx4RnaOPKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0188da-3655-482d-881b-febbc4a3b45b/1/v6v1pHSv5yEjMWcOgx4RnaOPKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:73:13:43:bc:3a:fd:b4:00:0a:d8:84:b0:3f:92:7a:f8:92:
a6:c6:4d:1f:6d:08:89:07:e5:3b:f7:e8:8e:4c:15:fa:77:9b:
c5:40:20:c0:de:92:0a:4f:6e:7e:5d:43:51:8f:11:81:6b:e6:
9c:7b:13:3e:31:85:ee:22:4a:16:1e:fb:50:76:b8:8e:69:bd:
0b:4e:e8:d0:fc:08:9e:a5:85:79:bc:23:2b:d7:b1:8f:bb:e6:
94:b1:2c:42:5b:7f:0f:27:5e:45:bf:cf:79:7f:36:15:4a:f7:
ba:cb:26:05:0a:ed:14:5d:91:87:39:90:eb:74:74:f4:64:b2:
40:51:65:fe:53:32:39:34:22:d2:76:39:1d:cd:25:03:44:6d:
cc:9c:d1:57:08:8e:16:e4:2a:a0:b6:2b:58:25:28:f3:9a:3a:
f1:1b:ac:c3:08:89:fc:60:16:d6:75:5f:f9:74:90:90:ef:eb:
8d:d1:e8:c1:52:5d:4f:5f:70:28:1f:40:a5:ff:79:ca:39:96:
22:99:1c:ef:64:75:63:08:96:fb:40:6a:c0:7a:30:75:dc:6d:
2f:a1:90:b5:7c:cb:78:51:d9:0c:c2:22:82:a6:f8:8d:d5:da:
05:85:65:d6:ca:65:f0:da:8e:a3:e1:4a:b4:88:05:76:d2:e5:
4a:d8:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:23:47 2025 by rpki-client