Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: cvUHdgTW4BR2IPTqCiEYJYur70ij/SQ4B0yQGiRjQkg=
Subject key identifier: 8B:D0:21:C5:6B:74:E4:B5:D4:48:3A:9B:AD:60:EC:69:68:72:D5:77
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019685484D3EDB0A3F97E09891213AD10869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0684
Signing time: Wed 30 Apr 2025 06:00:30 +0000
Manifest this update: Wed 30 Apr 2025 06:00:30 +0000
Manifest next update: Thu 01 May 2025 06:00:30 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: WRWcw4Tatkn1A6u4oivxNfUR77CTynBfEKjWhxtdrs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:4d:3e:db:0a:3f:97:e0:98:91:21:3a:d1:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Apr 30 06:00:30 2025 GMT
Not After : May 1 06:00:30 2025 GMT
Subject: CN=8bd021c56b74e4b5d4483a9bad60ec696872d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:b9:54:ac:e3:ba:ff:1b:1b:11:96:ac:3f:
7f:d8:ca:92:99:b1:14:22:a6:c4:5d:64:34:1a:78:
43:c0:22:8d:ad:a1:61:a5:0f:bd:ff:40:bd:61:77:
d8:b8:b6:93:8a:1e:3c:96:5a:33:52:9e:4d:4d:62:
c0:87:5e:0c:4b:64:94:04:7b:3e:7e:a2:a2:8c:da:
a7:7e:8b:16:3a:38:2d:e3:5c:63:3b:2b:54:83:58:
2d:f6:8d:6a:74:a9:74:65:df:9a:23:42:f2:5c:8c:
15:4e:ee:8e:e5:aa:c7:e2:ff:a1:63:24:05:9e:13:
51:3d:f2:6e:b4:fd:33:02:02:aa:67:6c:c0:4f:a4:
1f:36:ab:a7:4c:3c:ac:29:e7:3d:58:7d:1e:87:ab:
ab:6f:3f:d3:22:8b:45:b8:dd:c6:a2:6f:6d:92:ac:
61:0e:6f:c0:71:9f:55:8c:e0:c6:d1:6a:96:1a:ba:
59:32:fe:96:6a:f2:0d:2e:c7:08:11:18:ba:04:cc:
e0:be:14:08:e3:ed:fd:ce:4d:32:0f:d3:c3:fb:54:
66:63:06:7e:26:da:7f:46:33:3f:53:6a:ff:5e:58:
84:e8:6b:73:4e:06:99:db:76:e4:a9:f3:05:7e:42:
6c:0e:8b:8e:eb:17:f9:b9:ef:a0:8f:d5:6f:fa:35:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:21:C5:6B:74:E4:B5:D4:48:3A:9B:AD:60:EC:69:68:72:D5:77
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:08:1b:71:7a:a4:bb:fe:c9:d7:2c:c2:8d:51:9b:d8:87:8f:
ba:53:4d:d3:33:2b:88:05:03:7e:33:d8:92:b6:39:c5:e4:96:
e9:bf:05:e8:d8:ea:56:77:fe:6f:bd:db:31:d3:10:09:8a:0f:
68:cd:a4:4b:6a:d5:3e:57:a9:9d:01:ef:1c:a3:31:74:ec:3c:
ca:03:e9:fb:6b:12:ae:61:36:6f:3a:8d:43:3b:9c:c7:6d:88:
c2:dc:87:cf:55:73:62:f9:5b:cf:ea:7a:0a:12:c2:1b:fd:63:
d4:83:30:67:45:ea:77:7f:b4:f9:f6:4d:47:4e:97:3f:b3:d9:
1f:05:8c:1a:e4:fc:40:86:4a:d9:0b:32:1a:79:d7:53:0f:80:
97:21:7e:5b:3c:6d:cb:d0:5b:cd:f3:c6:fe:37:e5:0e:6c:05:
6b:0b:58:c0:0d:7c:43:09:e1:c0:67:64:4c:09:16:be:2e:33:
19:b3:20:4e:ef:56:a7:f8:64:26:17:28:31:55:76:73:aa:e1:
51:bd:61:70:a7:e7:48:b4:e9:95:68:98:7b:06:60:1d:93:4d:
6c:c0:bd:ec:e6:a7:64:5e:7f:10:32:d5:5e:b7:a8:18:6d:c9:
05:51:6f:82:a1:d0:64:90:d9:cd:7d:e0:a6:ec:0c:49:f5:a6:
19:17:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:04 2025 by rpki-client