Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File: B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier: 0BfCSh1DXim5VlDkArtwsM725p8l6Hp6tK4yfgqqRv0=
Subject key identifier: 0E:02:78:8E:6C:98:74:D0:97:D5:BA:54:E3:8B:BD:05:39:9F:1D:58
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 0196BDB77EA6741466E5BB6515C8C0A2BFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 05:00:41 +0000
Manifest this update: Sun 11 May 2025 05:00:41 +0000
Manifest next update: Mon 12 May 2025 05:00:41 +0000
Files and hashes: 1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: A1QTyo3dK5adBUzlhbCBxT4b3Xi32Ach6S3hYb6Ct38=)
3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:7e:a6:74:14:66:e5:bb:65:15:c8:c0:a2:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: May 11 05:00:41 2025 GMT
Not After : May 12 05:00:41 2025 GMT
Subject: CN=0e02788e6c9874d097d5ba54e38bbd05399f1d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:97:4a:e0:59:15:ce:77:58:5b:f3:60:00:
64:c2:c3:a1:f3:e1:90:e2:99:f1:a7:be:2a:a0:d6:
19:57:3d:49:05:74:ea:24:a7:54:c0:75:38:1b:91:
e0:0e:f5:89:3c:98:80:bb:e2:f4:b1:05:ff:db:ce:
fc:d8:36:43:7c:1a:1f:b5:f5:e1:93:56:b0:28:83:
e2:1e:3b:4a:38:4e:e9:dc:ad:40:d3:97:7c:78:79:
bc:44:55:3b:e3:06:af:b8:72:bd:a9:2a:8f:2e:a2:
99:a8:bf:57:39:69:65:38:e9:92:e8:37:0d:4d:ff:
ea:04:3d:97:70:0a:86:79:7d:d0:4f:4d:8e:1d:ae:
c4:73:b3:0c:b4:14:75:18:35:bb:96:c6:6a:6d:eb:
4e:69:48:15:ab:70:83:1d:fb:0d:04:61:1c:64:d4:
aa:a3:bb:98:59:e1:b8:75:d5:cb:80:d2:03:ed:e9:
95:cf:8c:66:01:88:2d:34:98:6b:9a:61:d2:40:3d:
57:44:62:44:41:6f:b3:59:23:e5:e5:76:5d:e8:96:
85:68:24:2e:b7:5f:a6:0a:34:a0:d5:ca:1f:06:19:
c1:6d:f1:39:e9:f9:2a:21:0c:a9:00:b6:2f:b6:bb:
60:23:7c:85:70:03:84:38:ab:29:9b:0c:6f:8c:e4:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:78:8E:6C:98:74:D0:97:D5:BA:54:E3:8B:BD:05:39:9F:1D:58
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:32:38:65:78:b6:0d:11:6c:b3:72:88:55:55:0a:24:07:6c:
8f:96:ba:1a:5d:28:23:b1:72:1f:4e:98:93:ea:2e:96:d5:e0:
68:fe:38:9b:d8:62:bc:85:6f:b4:cc:32:7a:06:28:6e:dc:20:
76:57:12:92:0d:65:49:f6:f2:24:75:56:3a:41:00:eb:9a:e2:
e6:04:ce:94:a6:2f:dd:09:3a:c0:cb:2b:bf:ae:c0:8b:a9:13:
7a:fe:68:ea:db:1a:4f:df:78:c0:a8:12:e6:25:0a:4d:42:06:
66:0f:de:38:96:53:60:ee:7e:4c:77:07:56:5c:dd:03:6a:1d:
90:dd:dd:bd:73:1a:d6:ed:03:70:ed:dd:32:ac:6f:00:42:35:
c7:12:0c:96:54:10:ef:ad:d5:52:2f:b5:82:ff:5c:bb:b8:0d:
08:41:e0:be:60:0f:60:60:11:b2:a4:a0:b2:ed:fb:4d:16:85:
cf:fc:37:83:44:09:9c:09:c8:15:28:84:86:90:80:b7:ac:c1:
81:52:15:a9:69:4c:8c:d2:b5:b7:4a:ef:e2:6b:68:4c:80:43:
11:c9:68:25:ff:9d:85:ce:bd:17:50:ad:81:5e:72:e4:7f:06:
a9:6b:1d:8d:c5:9b:39:8a:ec:d0:80:d4:32:ae:69:42:2e:4c:
9d:49:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:03:39 2025 by rpki-client