Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: P0/5FmdokQjVKfqipClHOTfYFNRVUt0CyR6IcG7oVfE=
Subject key identifier: 8A:1E:D1:BE:CF:AB:B8:8F:33:DF:3F:E6:F0:68:E3:F8:A8:8C:05:9F
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0196B74758EF67A42F651A167732D5A3B32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1539
Signing time: Fri 09 May 2025 23:00:28 +0000
Manifest this update: Fri 09 May 2025 23:00:28 +0000
Manifest next update: Sat 10 May 2025 23:00:28 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: jd4BQZf2loN4gSLgtZJ5JNiFO/2vMbjcGPeZ0U1wj/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:58:ef:67:a4:2f:65:1a:16:77:32:d5:a3:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: May 9 23:00:28 2025 GMT
Not After : May 10 23:00:28 2025 GMT
Subject: CN=8a1ed1becfabb88f33df3fe6f068e3f8a88c059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:27:2f:1e:a9:8e:a1:e0:4d:08:cf:71:53:
d0:d6:56:22:9e:6c:2a:4b:17:2d:fa:1b:ef:73:9a:
c2:51:9f:93:b6:0f:6a:52:21:fa:ac:b4:75:7c:ba:
15:c8:5f:4c:07:d0:38:78:c6:90:68:a3:4a:f6:2d:
2a:90:77:c8:f0:57:67:34:6a:8a:4a:08:4f:fe:76:
39:e2:7b:2c:cb:53:81:db:fb:b9:a4:77:cc:ba:31:
c9:c3:4d:5a:97:cf:c4:c2:ef:ef:74:2e:3c:0e:da:
a5:a4:c4:95:2b:20:87:54:18:99:25:dd:0b:ef:f6:
79:0a:76:ec:b2:cf:61:00:d4:e5:0a:3c:45:14:52:
e5:de:61:0e:89:e7:3a:c1:9c:76:e2:2b:2d:8f:9b:
d7:4e:1f:98:da:21:16:d7:65:dc:66:8c:20:c4:34:
38:99:b0:a2:d1:01:f0:4c:43:1b:26:93:e0:e0:0e:
48:91:38:97:15:24:17:a0:f4:1d:73:d7:f4:e9:fa:
95:86:b8:8f:93:28:cd:47:ea:32:8c:b4:2d:98:31:
11:65:43:ef:0c:b1:66:a5:13:d3:24:c2:0c:0b:77:
38:47:8f:e9:59:f5:b6:df:b5:c9:b5:39:2f:91:44:
a2:29:81:8f:c7:ff:79:ba:4a:f8:dd:db:29:1b:f4:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:D1:BE:CF:AB:B8:8F:33:DF:3F:E6:F0:68:E3:F8:A8:8C:05:9F
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:18:08:e6:e9:ee:9a:b6:da:43:ed:21:3e:72:34:ab:a8:21:
9e:1a:72:24:2d:c4:43:e7:7f:6a:95:ac:31:fd:39:01:8e:63:
c1:33:0f:af:58:71:ee:47:9e:63:78:f4:0e:d3:bd:b3:dc:6f:
50:d5:2b:36:99:3a:e8:1b:be:40:7e:61:04:17:27:5a:23:bb:
d2:ab:48:d8:ab:9e:88:cb:a6:97:73:99:55:e7:cc:aa:42:64:
e3:2e:85:a9:32:85:a4:5f:23:20:11:56:c1:56:90:e0:9a:42:
94:3e:34:14:f5:5f:eb:47:a8:f9:41:0e:0f:c5:b9:0f:ce:16:
1a:9c:4a:1a:d7:5c:4f:55:98:5f:64:43:f2:e5:67:6b:dc:ff:
89:38:aa:78:6b:4c:bb:41:1d:8d:d8:e0:1c:6e:5d:3d:5b:87:
00:e9:b7:06:35:aa:42:a6:68:96:18:5b:a7:dc:40:c8:41:87:
19:a0:2e:c8:76:69:71:29:da:f3:1a:c0:62:e6:ee:28:cd:22:
4c:a8:f4:6b:94:a7:39:88:fd:f1:aa:31:7b:05:dd:8e:67:41:
1a:a3:2e:77:9f:28:94:ff:c9:90:b7:36:20:76:6a:18:ce:da:
fb:14:a2:eb:0a:25:e4:ec:f0:d3:b3:ae:7b:90:82:51:20:0c:
23:97:e4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:40:05 2025 by rpki-client