Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: OtbeXVTo/W2OaAgXrEarbLaMhS38MOAPB8WUMDUqkAo=
Subject key identifier: B9:6A:28:64:FD:D4:88:A4:E6:6C:CB:EF:96:B3:BC:5D:38:F1:4B:38
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 01969F082D8E547ED7D700B30DEC841D63F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 0990
Signing time: Mon 05 May 2025 06:00:35 +0000
Manifest this update: Mon 05 May 2025 06:00:35 +0000
Manifest next update: Tue 06 May 2025 06:00:35 +0000
Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: /9p+0lwKnW+aYLwLus+J8tMRAkYwc4q3N3B7VEY+vpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:2d:8e:54:7e:d7:d7:00:b3:0d:ec:84:1d:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: May 5 06:00:35 2025 GMT
Not After : May 6 06:00:35 2025 GMT
Subject: CN=b96a2864fdd488a4e66ccbef96b3bc5d38f14b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:a5:57:94:25:d7:ef:c4:b5:51:d3:a4:93:
93:2c:b2:26:f0:62:81:7d:41:02:c8:99:80:95:0e:
cf:8a:8f:72:72:b7:7b:9a:d2:85:0a:07:96:d5:2d:
2f:09:03:23:43:e6:f0:d1:d5:85:89:d5:f8:79:7d:
14:42:b6:2a:0e:55:62:b5:6e:2f:b5:99:9b:da:d1:
2d:10:5e:3d:5d:95:dd:38:73:4d:be:a5:4e:db:e4:
dc:c2:c2:c3:62:b9:32:10:b5:45:37:90:2a:07:71:
8a:0e:e2:65:55:8f:bd:ea:b0:37:a7:49:79:31:f5:
88:21:5e:f7:53:3a:ab:10:40:1f:55:18:53:e9:d9:
fb:04:c3:46:a2:ca:aa:d8:cf:05:f1:3f:24:25:37:
b5:67:ac:df:c8:cd:75:70:28:0c:d6:0e:1c:9d:97:
75:81:57:99:aa:40:2d:54:4f:eb:e3:08:ab:4a:36:
38:15:0b:30:79:e2:1b:d6:1d:f1:f5:52:a2:33:e8:
21:f9:b9:41:93:4e:2d:92:9b:7d:d7:7d:40:8e:6c:
84:41:4c:99:42:5a:67:85:e4:15:51:9b:ee:da:fd:
8d:6a:90:64:79:f5:a2:d5:8e:ee:27:57:e4:fc:c2:
9d:54:34:b2:90:5b:18:d6:01:81:e0:af:d4:24:53:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:28:64:FD:D4:88:A4:E6:6C:CB:EF:96:B3:BC:5D:38:F1:4B:38
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:c4:89:8c:26:16:5f:7d:3f:95:ce:1d:2d:1a:2d:4e:e8:
51:92:57:12:ca:41:f4:69:d3:c4:5f:0d:f4:98:30:41:8a:bc:
31:9c:d3:d5:43:27:8a:d7:c5:d7:bd:87:9c:7a:e2:d1:ab:87:
7e:dd:5d:c7:6e:fa:d4:8a:e6:a5:4e:38:5e:6c:94:5d:be:c9:
05:00:3c:96:94:a0:cd:45:7d:33:76:b1:99:00:ec:ff:df:0b:
da:a8:e3:a5:53:db:00:7f:2e:87:d7:fa:55:7c:76:a5:e1:5d:
58:6f:bb:9e:a1:5f:5f:69:46:40:21:3d:1f:9f:f3:18:21:d8:
8e:be:98:e9:64:70:b7:22:48:4c:35:52:ad:f7:f6:69:66:47:
ca:84:02:27:fc:30:f9:50:a7:ca:da:72:b6:28:95:34:7d:16:
ca:b7:f7:cb:52:c8:a8:a4:b5:64:ca:0d:1d:61:a7:ed:23:a4:
f7:b0:a1:54:f3:b8:32:c1:5f:ac:e7:1b:c4:e0:48:03:f1:e5:
61:34:e8:a4:df:e3:e7:8b:93:54:e9:61:f1:fb:4d:2e:f4:ef:
f8:85:4b:d6:b7:9f:f0:34:03:83:71:cf:a2:f4:7e:16:d3:66:
b8:bc:5a:3b:7e:d2:67:ff:07:31:db:fa:dd:ca:c8:e9:ca:59:
ea:49:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:17:21 2025 by rpki-client