Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: awu3UJbHen36TSfA56cUYny7ZyHQscAYqp70Cf7fhaE=
Subject key identifier: F5:44:3E:2F:F4:BD:84:3B:27:67:AC:C5:47:CE:22:3C:25:99:C0:D0
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 0196ACFB005BF1C10180054DC0DA36FCD327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0CA0
Signing time: Wed 07 May 2025 23:00:52 +0000
Manifest this update: Wed 07 May 2025 23:00:52 +0000
Manifest next update: Thu 08 May 2025 23:00:52 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: NpUfgyfsuY0Dt5KA8JJYLlkhZTt8cXTS8WAgfyFfb9w=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fb:00:5b:f1:c1:01:80:05:4d:c0:da:36:fc:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: May 7 23:00:52 2025 GMT
Not After : May 8 23:00:52 2025 GMT
Subject: CN=f5443e2ff4bd843b2767acc547ce223c2599c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:e8:0b:07:29:9e:e6:9c:42:0e:a1:be:47:
99:5c:3e:18:2e:df:dc:12:5c:7a:b7:1e:ba:d4:33:
99:53:1e:11:0f:cf:e3:9b:7d:07:f5:f3:84:39:d6:
6a:99:67:23:db:c6:5b:6f:2f:c9:cd:07:5a:50:f0:
06:5a:93:ff:0a:bd:9e:3c:a2:ec:87:f9:4f:a5:5a:
1b:f6:f5:51:74:8d:ec:cd:b9:53:69:f0:e8:1e:1a:
71:33:fd:88:da:2e:2d:87:7c:1b:e1:f4:c0:e6:70:
2d:5d:8a:7f:2c:97:7f:a8:9d:39:76:51:60:4f:9f:
7a:36:24:b1:05:04:15:62:e7:c5:fb:df:d3:8d:6d:
3d:34:7a:c8:97:f2:df:00:f4:49:bc:70:ed:e9:ca:
48:c6:31:e6:e0:83:1d:1b:12:92:23:c5:fb:01:58:
45:a3:af:29:ee:b8:f2:b2:65:40:de:5f:95:2c:0f:
01:ab:35:ba:44:f2:aa:0f:7a:63:73:bb:a1:3b:6d:
c6:e7:f5:91:a6:10:1d:8b:3b:c9:1c:34:aa:77:f5:
de:1a:4f:05:2a:1d:0f:23:7b:02:e1:37:c2:ac:63:
9a:ad:8d:de:4b:dd:a4:92:99:65:ba:6b:28:c4:d2:
e5:5e:0c:fd:40:3f:62:31:55:61:31:42:f4:6c:e7:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:3E:2F:F4:BD:84:3B:27:67:AC:C5:47:CE:22:3C:25:99:C0:D0
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:71:cd:69:88:88:78:0b:fd:d2:11:ab:ab:cc:9c:5a:fa:
13:97:22:ee:35:f2:bd:b2:62:c7:29:fd:65:8a:64:bc:f2:00:
e0:41:94:ba:95:12:44:29:2d:9f:46:fb:e4:ee:25:28:a6:c6:
83:3f:57:4b:16:0a:5d:93:34:66:29:3e:50:3e:08:04:6d:67:
0f:f5:5f:f6:66:45:78:d4:be:c2:3e:7b:7c:c7:46:4b:48:23:
0f:41:f0:2e:fd:c4:3e:31:8c:d4:99:ce:25:0f:cf:ea:83:81:
07:04:5d:f3:1c:e5:a2:39:08:62:6b:4e:b4:94:86:46:e1:5a:
28:3a:f3:c0:4d:af:01:18:16:10:8c:79:c3:c1:68:0a:38:a7:
3d:e4:7f:6e:d9:6e:3d:6d:fa:01:47:a5:3f:8e:64:5d:22:1d:
db:7e:1b:75:c5:e6:1e:e2:c4:61:ac:67:45:48:b6:cf:9f:3f:
5a:c2:c7:18:c7:b6:09:a6:ef:3b:3b:f8:c1:68:ed:b2:a2:99:
9c:23:97:f8:47:2d:cd:96:ef:a1:57:42:ca:7b:3e:62:78:0a:
62:8c:05:6a:7e:e3:e8:31:9b:71:54:ec:f6:6c:0a:4c:55:98:
bc:5c:fd:df:2f:ea:00:55:ef:c1:e7:9d:40:c2:de:1d:01:b3:
8e:dd:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:07:37 2025 by rpki-client