Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: V9lmJyJkQlxqoSNYX+oI7hCUU7oDORREHfmhZ4BxuDk=
Subject key identifier: 8D:EB:56:F1:2B:72:D8:A7:A5:5E:CC:5B:26:70:7E:60:4C:37:43:2A
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 0196A3526E2CE2ECE4A026CB019E0BFD72B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0BE1
Signing time: Tue 06 May 2025 02:00:10 +0000
Manifest this update: Tue 06 May 2025 02:00:10 +0000
Manifest next update: Wed 07 May 2025 02:00:10 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: ZqeSDzripjYT6ArHjjhLuRA8unR5yV9Bf1JyWEB+2zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:6e:2c:e2:ec:e4:a0:26:cb:01:9e:0b:fd:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: May 6 02:00:10 2025 GMT
Not After : May 7 02:00:10 2025 GMT
Subject: CN=8deb56f12b72d8a7a55ecc5b26707e604c37432a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:0f:74:bd:f3:ee:7c:2b:79:c2:a0:a6:60:
18:e2:95:9c:51:f0:e0:5b:b0:8f:04:ed:a1:1e:24:
15:1e:3e:0f:cd:18:f7:3e:f3:f9:d6:44:89:1b:75:
ca:af:06:10:96:68:a4:1a:e8:88:93:fb:5b:d9:9e:
e2:6c:a5:dc:1d:38:bb:b6:6b:f9:7d:fd:fe:6b:3f:
a0:2d:1e:b3:b1:fc:c8:1a:24:83:dc:99:a5:23:ae:
0a:6f:ae:1b:ce:c8:29:f9:1d:fc:c2:08:cf:47:da:
2a:e5:ab:f6:9d:d1:5d:7e:e0:fd:3e:03:17:39:b0:
1c:0c:06:ec:69:29:80:d5:db:d7:7e:0f:b2:fe:ee:
c0:9d:38:5c:b2:25:1b:f2:2d:65:1b:e3:52:ae:fd:
63:e0:67:b0:1c:de:fc:de:b3:f6:59:e9:8b:40:f0:
4d:f6:3c:ea:1c:1a:30:d0:c3:1e:70:b0:88:f0:51:
f6:3f:f6:d0:c6:0e:47:9c:0b:9d:21:56:2d:0e:5c:
0e:f5:d7:40:2f:d4:85:1b:9a:aa:67:cd:b8:e7:b0:
4b:c5:b9:9d:9f:a4:d6:83:d5:53:fc:3d:34:ac:3f:
bf:d3:f6:cc:48:6a:8e:96:5c:9c:ef:cd:43:dd:69:
59:7b:26:3d:e9:e4:4b:51:4a:fa:5c:ec:84:2b:62:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EB:56:F1:2B:72:D8:A7:A5:5E:CC:5B:26:70:7E:60:4C:37:43:2A
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:57:68:34:35:98:29:e2:58:ca:30:27:5c:25:1b:a8:6a:81:
c6:8b:f7:3b:d6:a5:1f:14:d4:d9:e1:38:09:6f:0f:ce:14:ff:
de:95:29:17:b2:11:e2:44:a5:ea:d9:91:c0:c5:5e:f7:e1:49:
4f:2b:4b:86:60:c5:a9:0f:3f:89:91:bf:75:a9:14:7c:91:9a:
04:0c:69:c6:8b:95:1d:69:fb:e2:8f:64:7e:cc:44:7a:d0:0d:
6e:a0:44:67:e1:36:05:69:6e:d9:66:2a:e8:e2:9d:3b:b8:e9:
10:5d:09:8f:b9:54:f8:e2:a9:cb:12:55:07:45:7c:a8:53:65:
51:f8:9d:ca:de:54:b1:f2:1b:5f:82:7b:ab:d4:b5:cb:66:37:
e1:76:05:4f:0a:ee:82:62:58:83:08:8e:3e:12:74:e8:f7:88:
f0:7d:7e:d1:d4:6b:3f:fe:74:c0:bb:ae:1f:ba:b4:fa:a4:4a:
7c:5b:94:e5:a8:83:99:c4:59:7a:0c:6c:b8:8a:c6:15:78:1b:
61:02:63:ad:4e:80:c5:b3:47:4b:8e:31:34:ba:77:ac:3e:88:
d9:e7:b3:c8:2f:82:d2:c9:82:14:45:e1:78:74:f1:77:77:09:
83:f8:66:9a:0b:7a:aa:94:47:6f:f5:79:cd:59:aa:6a:ef:0e:
c5:2d:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:51:11 2025 by rpki-client