Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: ojo/it5GnzZYBUbYgdSLIlkbUi40R9rulGV8eqzIToU=
Subject key identifier: FC:25:6E:63:43:50:12:07:EA:ED:A0:9B:D2:01:13:53:46:03:C4:64
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 01969DBEBFD425291E992F7EA501466194EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 068C
Signing time: Mon 05 May 2025 00:00:45 +0000
Manifest this update: Mon 05 May 2025 00:00:45 +0000
Manifest next update: Tue 06 May 2025 00:00:45 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: t/W4HJWSw6dLqk8KzCE9nCXn/j/fgqrViQ3k1IIKlrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:bf:d4:25:29:1e:99:2f:7e:a5:01:46:61:94:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: May 5 00:00:45 2025 GMT
Not After : May 6 00:00:45 2025 GMT
Subject: CN=fc256e6343501207eaeda09bd20113534603c464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:d2:28:59:eb:05:52:2b:b4:dc:c3:4b:ca:
fe:4c:5f:65:f7:a1:60:f2:e2:27:93:1f:9a:e0:31:
59:7c:d3:7b:a9:04:7b:0e:2e:89:0c:cb:db:65:3f:
29:96:de:8d:fb:8d:34:1e:a3:06:18:de:46:84:6e:
61:23:db:bf:99:77:a0:d1:ce:58:83:97:67:ae:30:
bb:5d:d2:5b:70:ef:2b:66:97:dc:39:d9:ba:22:68:
d8:46:f4:09:fa:6d:14:4f:de:f1:9e:8f:4b:82:45:
2f:69:53:d1:17:aa:a7:d0:98:a7:e9:84:95:73:3f:
29:99:4d:ed:0b:f9:83:1f:c3:83:e6:10:c0:2f:a5:
af:f9:c7:76:90:9a:73:72:bd:81:06:ed:5a:ed:24:
b3:f2:89:6d:93:08:75:3a:33:54:66:cc:26:3f:fd:
09:22:b2:73:ae:10:a8:4d:0a:c6:dc:e3:5c:c2:ca:
20:cb:db:7a:a5:a5:0d:7f:c8:a3:f1:71:c1:dd:1b:
74:bd:e5:8a:88:61:5b:ce:95:09:8a:9f:64:d0:02:
71:de:55:a5:34:60:9e:af:aa:f9:6f:ae:de:c3:a3:
ed:60:1e:c2:dd:2c:da:fb:f3:7d:35:6b:5b:70:1f:
d2:f7:66:a6:b4:92:2d:e0:08:5a:bd:2e:b8:b5:de:
6e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:6E:63:43:50:12:07:EA:ED:A0:9B:D2:01:13:53:46:03:C4:64
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bf:38:5d:0e:4f:3b:81:64:04:1f:fd:4c:4c:6e:2d:99:45:
a5:2f:0d:e2:c7:ff:52:c5:b8:d6:cd:ee:41:7f:5a:1d:12:a9:
66:c3:b4:d6:30:55:83:62:02:1b:ed:fc:bf:99:c9:ac:13:b1:
27:bc:38:9c:db:cd:f6:f2:ac:77:d7:e4:75:2a:f8:59:19:cc:
61:09:50:b4:54:0b:bb:54:de:62:87:e4:4c:11:f5:92:3c:29:
08:5e:52:7e:ad:73:a5:f9:67:c9:00:18:fe:31:36:ef:27:b6:
9c:d1:4a:9c:70:7e:05:fb:e4:56:e3:4b:5d:2c:ec:04:6e:84:
2c:28:ee:fd:ad:d3:d6:a8:37:ee:cf:e2:e6:9f:1d:ee:76:45:
9d:3f:12:fd:19:6b:35:15:a8:95:72:88:70:b8:5c:2d:7e:5c:
2c:96:cd:f5:26:37:0f:dd:6d:51:66:0a:51:f0:53:4c:39:2a:
0d:f8:f6:45:5d:7e:98:bd:d6:ca:dc:4e:f9:86:dc:16:da:51:
20:f7:30:11:70:8e:d6:1f:26:9e:8f:a5:e3:86:15:10:4a:df:
f6:8a:d6:30:b1:f4:43:9c:8e:df:10:74:27:4f:c8:24:e0:17:
bf:40:71:e9:92:ba:ae:ee:60:e2:b0:55:4e:88:c1:f7:4a:f5:
51:32:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:27 2025 by rpki-client