Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: /h2x4MuqlIQwFMKxLKok26o8uEBsTtO0OJ/djwDlLP0=
Subject key identifier: AF:C0:76:9A:0D:52:60:1E:10:D0:F9:67:F9:54:0A:9E:F1:44:35:9F
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 0196BB23E90E3ED10E90A21AE6BD02BC9629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 1435
Signing time: Sat 10 May 2025 17:00:14 +0000
Manifest this update: Sat 10 May 2025 17:00:14 +0000
Manifest next update: Sun 11 May 2025 17:00:14 +0000
Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: LL7GvFs8HphtDEkwfW7TB1p6qF3wvGC1zoi5zYt472M=)
2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:e9:0e:3e:d1:0e:90:a2:1a:e6:bd:02:bc:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: May 10 17:00:14 2025 GMT
Not After : May 11 17:00:14 2025 GMT
Subject: CN=afc0769a0d52601e10d0f967f9540a9ef144359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:70:aa:a5:1f:00:c1:8e:be:f3:d4:ca:17:e4:
e3:6f:75:7f:9d:d6:7c:2f:66:1d:fc:01:00:32:0c:
db:65:03:0f:fb:27:5b:d3:6a:30:b3:56:df:b2:3e:
06:f3:c9:c1:4b:16:42:15:5c:d3:e1:dc:13:7d:6a:
6c:46:46:1d:81:2c:ce:4c:52:8f:e8:73:60:08:9d:
91:d4:44:39:48:60:e1:62:59:90:23:83:6b:a6:cc:
66:31:a4:8a:2e:21:54:3c:05:5f:f3:29:d7:e0:8d:
76:77:a4:4e:d9:e4:4b:31:64:30:53:67:a5:68:ba:
96:ac:32:1a:31:25:40:c1:3a:65:15:34:a7:aa:c7:
2b:d6:be:d1:7a:7e:53:f2:aa:4c:07:9a:10:48:38:
d9:25:81:23:af:ca:ef:90:e0:dc:9a:a8:48:7a:18:
e3:89:51:82:cb:96:69:34:ee:43:3e:0e:1f:1d:4c:
5b:67:81:b9:1c:4b:17:4c:61:e7:d8:f8:11:c3:02:
17:52:fe:60:fd:79:37:09:6a:dc:83:22:d9:1f:ab:
38:22:2f:1b:8a:a8:82:c5:b6:90:02:28:98:27:06:
f0:fd:94:e5:fc:72:f7:f7:e9:3c:f2:6b:1d:49:82:
ed:56:df:69:61:fe:b5:55:58:fd:ad:03:80:c1:8e:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:76:9A:0D:52:60:1E:10:D0:F9:67:F9:54:0A:9E:F1:44:35:9F
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:ac:d8:28:fa:d8:68:b4:31:a7:a7:b3:71:89:95:b4:bc:
3c:d9:9a:db:ab:a6:2d:d8:0d:75:ae:a0:98:d7:92:5c:78:f5:
c3:41:55:4a:78:49:f6:09:56:41:cc:c5:b5:be:a8:30:cc:02:
41:9e:46:44:9a:7f:7f:7f:fd:f1:f7:ce:f5:e7:44:c0:ab:35:
ac:e6:7c:57:46:c2:41:07:fb:a1:fa:de:e5:fd:5d:0e:5f:df:
e8:75:78:1d:08:dd:7f:b7:ac:c3:09:4e:8d:bb:01:49:6b:54:
32:40:3e:97:d4:f0:6c:2b:89:63:bb:80:e4:0c:e1:02:67:10:
6a:fa:ac:9e:ed:9d:b5:cc:c4:02:7e:33:22:06:1f:eb:e2:b7:
13:47:b9:a2:01:99:30:57:81:99:00:6e:6d:bb:6e:a5:9d:9f:
78:76:8d:c9:2a:9b:0c:01:2e:ca:3b:74:16:14:13:0d:15:5a:
47:a7:75:64:d3:6b:12:f7:fc:94:ac:65:f4:a6:ad:c3:25:76:
d2:4c:93:75:f0:7b:a2:44:6a:18:73:ad:5f:4f:33:73:7d:c5:
5c:01:2f:40:75:45:7c:f8:0d:39:9a:f3:2e:2f:8f:c8:02:32:
fb:45:79:68:dd:2f:ba:e6:62:69:f1:e4:5b:9b:aa:25:59:1f:
67:fa:b3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:41:54 2025 by rpki-client