Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: Eq/C3zVZ+RZvInWknVZxuvXYsyeDzkbZt725h6DMoDk=
Subject key identifier: 49:03:C0:62:2A:90:3F:70:55:51:F0:D7:28:09:A7:EA:21:06:5E:12
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 0196A12DAD4ED8077F8C7337DE76B79B7C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 087E
Signing time: Mon 05 May 2025 16:00:47 +0000
Manifest this update: Mon 05 May 2025 16:00:47 +0000
Manifest next update: Tue 06 May 2025 16:00:47 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: I8lAGyPuh5dmpOaqTbJaACsHpmQX0xtaPoJ5i+3wsQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:ad:4e:d8:07:7f:8c:73:37:de:76:b7:9b:7c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: May 5 16:00:47 2025 GMT
Not After : May 6 16:00:47 2025 GMT
Subject: CN=4903c0622a903f705551f0d72809a7ea21065e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:e2:3d:bb:03:37:03:7f:4b:a6:77:d5:d4:
3f:d2:33:f7:15:09:4d:f2:2a:29:07:26:15:92:53:
8c:4d:b8:8e:db:52:d2:fe:ba:97:15:6e:52:1c:b9:
09:8c:82:9a:a7:af:2b:d2:50:d2:62:6a:d4:f5:34:
ec:c6:d0:14:d1:c2:ae:91:9e:9b:e8:5c:64:a7:74:
98:c6:39:71:94:b4:89:73:34:72:7c:15:de:d9:5a:
ee:6e:8a:1f:91:00:b6:0d:14:c4:3d:45:e6:0b:c1:
05:c3:a2:13:65:a6:0a:46:5c:eb:33:c4:68:2e:d4:
1e:97:df:cb:d4:8c:d7:a2:69:54:b1:0b:96:18:1d:
ee:d2:1c:08:96:71:31:48:42:2a:aa:38:c3:d0:04:
1d:26:b6:90:79:65:e8:71:59:ca:56:d8:61:1c:b4:
03:10:27:ee:4f:40:49:2f:21:ba:c5:50:d2:47:94:
22:0c:c9:f9:79:70:68:9a:33:5b:fd:cb:b2:58:e8:
18:6c:df:91:6c:c6:73:fb:e4:fc:28:70:13:91:c3:
1d:5f:44:4b:98:d8:38:bc:d5:5e:6e:30:67:e4:d1:
55:6c:2a:bb:b1:39:b3:0d:f7:67:27:6a:41:39:00:
07:1f:b9:62:92:d6:a7:12:f1:8d:77:24:0f:c0:bc:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:C0:62:2A:90:3F:70:55:51:F0:D7:28:09:A7:EA:21:06:5E:12
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:97:fc:67:22:1f:2c:51:a9:41:0e:85:7a:c6:42:80:b6:b0:
3e:e8:1d:7c:01:8d:bb:d7:58:ae:ce:8f:c8:95:62:94:c7:1a:
07:25:66:22:76:2a:cb:28:88:d8:3d:fb:9b:32:77:1a:7c:c6:
b9:41:76:be:e9:e2:b4:e0:16:f5:60:84:a0:b9:b0:a2:1a:35:
7f:f4:af:50:6f:62:96:de:a6:22:ec:24:d3:dd:bd:96:8b:6e:
5e:7e:58:8e:91:a9:8d:c1:69:78:84:5d:64:4d:32:c7:36:e4:
60:51:a0:80:9e:14:e7:a8:77:08:4a:32:64:61:6d:f9:bb:a6:
ee:6b:97:a9:cc:2e:96:0d:a9:93:76:e8:5b:dc:9e:e0:bb:a5:
a8:5a:1e:41:58:34:80:e3:06:70:99:2d:c9:51:86:d8:d3:4e:
f2:8a:23:c3:09:14:8a:49:6b:e3:79:26:18:4b:74:52:ff:88:
45:a1:1e:2e:02:96:1e:f5:70:e4:0d:6d:59:14:5a:14:9c:d4:
c7:b1:7e:b0:d6:bd:98:93:6a:98:4c:69:c7:b9:55:bb:5b:b1:
3e:56:22:05:6d:fb:79:51:d9:23:54:00:93:a0:5c:cd:d3:c9:
1c:4c:a8:7e:af:6d:7b:9a:74:b1:8e:b7:b6:8e:52:7c:d4:18:
02:06:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:06:22 2025 by rpki-client