Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: Bg+3lLi2UwsNzkPj47ehoqU7NkUNO3r41t+YigWr7js=
Subject key identifier: 17:F5:75:06:5D:F6:CC:21:6F:9B:10:19:5D:7F:C9:38:44:4D:AA:FF
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0196B3D9245DD90DB004AA8B0EE2CF6B59E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0B37
Signing time: Fri 09 May 2025 07:01:14 +0000
Manifest this update: Fri 09 May 2025 07:01:14 +0000
Manifest next update: Sat 10 May 2025 07:01:14 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: uHVQBGwnCGuXSn+KoJcxqAPFDVH81uMhxzxx+dB9Meg=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:24:5d:d9:0d:b0:04:aa:8b:0e:e2:cf:6b:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: May 9 07:01:14 2025 GMT
Not After : May 10 07:01:14 2025 GMT
Subject: CN=17f575065df6cc216f9b10195d7fc938444daaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:12:ab:87:e8:46:4b:01:d9:d9:48:13:25:
33:e3:fe:35:76:45:92:5d:5a:68:00:d7:20:0d:ca:
1d:4f:4b:8e:0a:5d:f6:5f:a4:3c:47:2f:cd:25:79:
6d:62:42:a0:9f:f2:21:3b:66:c7:8d:1a:01:f5:65:
bc:b7:c4:62:9b:11:b8:df:3c:56:f4:8e:d6:00:70:
3e:e3:5a:39:bd:81:4a:95:e6:53:fe:02:65:f6:87:
84:68:8d:1a:0b:4c:48:a9:90:fc:70:ad:83:41:2e:
d8:96:3c:e9:f4:6b:86:53:5b:51:1d:95:e0:e7:bd:
f1:ee:de:d2:6c:33:3a:cc:c4:69:69:17:02:7b:1f:
4f:26:f6:10:c1:f9:3e:bc:27:11:30:2d:82:8a:7e:
ad:52:6d:dd:06:94:6b:c1:a6:e7:4f:50:6a:d2:ff:
6f:b1:92:0c:10:e2:1b:3a:4a:5d:9f:68:10:a4:62:
21:3a:7a:06:33:b0:2b:08:98:11:6f:91:a3:a0:32:
f7:3d:db:86:2f:42:54:43:23:d8:38:54:02:7d:7d:
22:b8:dd:0d:67:66:8b:8c:77:34:e3:49:dd:ad:a0:
8e:a9:31:7d:eb:8b:54:57:dc:88:bd:cc:a4:32:98:
e1:3f:be:1d:d2:03:55:aa:30:04:9c:8c:84:7e:c1:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:75:06:5D:F6:CC:21:6F:9B:10:19:5D:7F:C9:38:44:4D:AA:FF
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:aa:87:24:1b:08:e2:1a:4e:e9:5e:12:71:3f:ba:cf:fd:
9c:3b:a3:bd:8a:b1:97:6e:e1:ac:48:cc:32:a4:0b:73:ed:5a:
06:ea:3c:54:75:4d:78:43:90:8f:97:ef:c5:88:1e:d0:7a:87:
ef:4a:b3:b1:f4:b2:73:bb:b0:1b:d3:3f:03:6c:ec:b4:c0:b8:
1b:aa:d6:67:a2:27:f3:8c:d6:54:7f:ea:dc:77:d8:4c:3a:7e:
bc:3e:0d:40:a0:4d:0a:9b:9d:7e:82:9a:c6:35:eb:96:95:40:
bc:59:17:9c:2c:4e:16:46:3d:b4:19:10:e0:f5:1a:72:f5:55:
85:5c:1f:6d:09:2e:07:6f:ad:69:14:a6:14:40:69:c5:e2:52:
f1:6e:68:a5:3f:56:24:b4:06:3f:48:24:20:07:b2:be:54:8c:
ce:28:97:a7:b0:12:bf:43:b3:52:fb:cc:6d:c2:4f:9a:dc:09:
f2:4e:72:e4:1b:10:3f:07:2b:a4:10:15:19:34:98:24:db:b2:
9a:f0:65:ac:d8:ff:ac:56:58:1a:c4:dd:71:76:a6:ae:56:b7:
1a:be:12:fe:2d:de:84:4e:e4:7c:a5:37:fc:01:77:3a:ad:47:
15:95:8a:dd:07:2b:d8:4c:62:16:ff:b5:b9:ff:d8:b4:5e:34:
0b:2c:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 09:48:08 2025 by rpki-client