Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: kJ8q5cv3gS7+l9R+wqh4Ig6P/U3uGIKUy7xUAJZ70DA=
Subject key identifier: 89:1C:CD:F9:90:AC:56:15:BD:69:91:3C:F5:0E:6C:43:1D:BB:0A:4B
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 0196C26FB24177128BABFD40EB3A5E23F942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 146D
Signing time: Mon 12 May 2025 03:00:22 +0000
Manifest this update: Mon 12 May 2025 03:00:22 +0000
Manifest next update: Tue 13 May 2025 03:00:22 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: KNg/kXf5bbsu8mkRaB8hQ5l8jejf6gJjD8iFIk2AD5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:b2:41:77:12:8b:ab:fd:40:eb:3a:5e:23:f9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: May 12 03:00:22 2025 GMT
Not After : May 13 03:00:22 2025 GMT
Subject: CN=891ccdf990ac5615bd69913cf50e6c431dbb0a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:65:03:51:73:cd:82:fe:b4:3a:46:fd:78:
d4:10:2d:40:6d:32:6e:a0:4e:89:d8:25:45:d0:15:
1a:54:6a:de:f5:de:2a:59:4e:58:44:2e:98:75:17:
18:9b:57:8f:1a:84:6f:2d:ee:51:20:7b:29:0a:24:
28:28:c0:95:c1:97:6a:36:81:14:01:bd:94:cf:84:
b2:b9:54:50:27:3f:f0:68:eb:da:41:2d:6a:b6:fc:
e6:85:14:38:74:a9:9c:51:68:95:7f:d9:a0:ed:99:
aa:ae:ee:11:9a:91:db:21:fa:60:9e:79:35:60:c1:
11:15:97:bf:2b:01:cf:e8:be:4e:e7:5a:cd:86:10:
2b:91:dd:7a:2c:35:d4:70:bf:3f:3a:df:c8:66:26:
3f:08:89:b4:3f:1e:12:47:0f:ec:bf:bb:29:06:61:
98:08:c9:27:72:b4:56:c7:7e:32:f7:4d:2b:4a:25:
f5:99:7d:7c:7e:80:22:1d:ee:3c:94:df:2d:52:b8:
68:94:c7:4e:1b:92:61:04:2e:42:c2:c9:f6:5d:d3:
6b:ed:af:33:04:5a:6d:31:ef:1d:1f:bb:b5:9e:1a:
64:28:82:bf:f8:69:6c:72:3d:2c:fb:8d:19:bc:6d:
98:37:f4:cf:da:ea:fe:be:49:34:3c:b7:04:9b:61:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1C:CD:F9:90:AC:56:15:BD:69:91:3C:F5:0E:6C:43:1D:BB:0A:4B
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d8:e5:92:a1:12:c2:19:4a:35:f4:12:98:31:c9:68:ca:3a:
fb:0c:fd:4a:71:0a:e1:e9:61:c1:e3:9b:e3:ff:05:c7:02:b1:
ad:43:b2:d9:d9:ff:b0:37:14:aa:03:8c:4c:21:7c:1f:bf:56:
e7:a6:73:30:06:06:9b:00:85:46:59:f6:5d:2d:aa:28:99:18:
44:2b:b2:39:f6:c9:af:9e:12:f2:a9:36:5f:a5:1c:8e:d7:e2:
8e:86:16:8a:67:41:80:0b:08:41:18:90:d6:32:71:1c:ec:b8:
e4:b9:cf:70:8d:9d:d4:b7:f7:e6:b7:45:35:ec:5f:3c:3d:a3:
2b:fc:0c:7c:4e:6b:39:d3:73:0b:18:d1:66:25:77:f5:ec:2f:
fe:a7:ea:2b:5d:dd:86:9a:a6:bb:22:42:25:95:6e:8c:6b:f7:
db:f5:75:41:42:93:d7:d4:d8:bb:fd:70:c6:c6:ce:6a:e7:82:
7c:ec:04:fe:92:29:c9:0e:a1:25:6a:81:b3:75:12:00:12:93:
8b:cf:47:ea:10:9f:5d:71:2a:ef:e5:1b:9c:5d:28:7a:d3:68:
29:7a:e7:00:e9:15:66:a2:4a:db:e8:f0:bb:99:f3:dd:83:49:
21:df:6b:11:a7:9f:d3:25:37:8e:f5:bc:02:5f:ca:58:40:67:
86:03:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:50:18 2025 by rpki-client