Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: YbpxALtG5pklbA4yzPbdpBZRWOzvOSmbo9wQNFwD7rk=
Subject key identifier: 2B:3F:1B:01:D9:F7:BD:6A:0E:F1:CB:76:54:42:99:74:7C:E6:43:95
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 0196A954AA905CAE4193B7DFBB1CC082CB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0684
Signing time: Wed 07 May 2025 06:00:20 +0000
Manifest this update: Wed 07 May 2025 06:00:20 +0000
Manifest next update: Thu 08 May 2025 06:00:20 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: X8bk4xLlpqMIGWQJeOexVldSn0nGAmgCPV0RkDgFYgc=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:aa:90:5c:ae:41:93:b7:df:bb:1c:c0:82:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: May 7 06:00:20 2025 GMT
Not After : May 8 06:00:20 2025 GMT
Subject: CN=2b3f1b01d9f7bd6a0ef1cb76544299747ce64395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:98:3e:88:a6:34:80:98:08:59:53:c9:e4:
5a:29:71:e5:77:09:62:a0:3e:7c:5e:cd:d3:0a:af:
66:ad:d7:ab:bb:0c:e1:61:90:6a:8e:e1:00:7a:60:
fb:7c:68:69:4e:30:78:5d:a8:f8:c4:93:42:7f:9b:
15:65:51:da:73:c6:fb:c2:38:a8:26:50:f5:69:3e:
3d:08:ed:2e:eb:7c:8c:56:35:63:c4:19:12:e5:ba:
f3:93:5d:2c:45:ec:79:e7:73:8f:69:f8:41:4e:05:
d3:46:9b:c0:4b:5b:cc:bc:83:a2:46:24:37:93:1e:
02:61:3a:0f:f9:ee:81:d2:32:c8:e7:dc:c3:64:0d:
ac:a3:f7:6a:7f:e1:92:b8:6f:1b:34:45:18:ae:f1:
03:1a:ad:52:8c:52:ec:1f:d2:7e:23:1b:f9:38:44:
46:96:c5:be:3a:58:79:8e:2e:d2:a4:c4:c5:37:eb:
b7:03:83:d5:e9:2b:8a:85:f3:01:4b:3f:86:1d:03:
f0:16:c7:2b:86:57:54:37:4c:0e:63:38:61:21:52:
b0:94:3a:be:60:1a:db:2f:d0:67:4a:84:d5:f3:1d:
5b:1e:5b:96:ac:90:9f:50:93:d5:b8:69:35:55:a7:
de:c8:91:b9:e7:e9:43:6c:18:f0:f2:65:3d:89:92:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:1B:01:D9:F7:BD:6A:0E:F1:CB:76:54:42:99:74:7C:E6:43:95
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:81:92:8f:41:d3:76:44:5f:b6:88:80:cc:80:aa:f9:33:1d:
98:53:c8:d1:fb:fc:d3:2e:5d:ba:41:72:cb:0f:e8:aa:8d:87:
1d:71:e8:65:12:7b:cf:41:b0:15:ff:9f:99:c8:e0:0e:8e:d8:
3a:04:49:86:00:b9:c2:b6:2e:fc:8d:28:ae:95:35:cf:20:3f:
fa:d5:d1:a6:8d:71:18:15:e8:d2:54:88:7a:3e:ac:4a:c1:9a:
e1:5f:d5:f9:17:bd:08:67:71:a0:f2:3e:27:8a:8e:a3:cd:7d:
8d:d1:2a:5a:d7:af:05:7b:b0:93:26:ef:e8:a5:94:59:e4:0b:
17:6d:c6:48:a0:72:a5:2b:5e:42:a9:56:af:32:f5:05:a4:6d:
e8:4b:65:39:8a:2e:13:64:83:17:80:d7:57:56:7a:ba:de:7b:
5a:3f:5e:a3:d1:66:b0:70:b1:3b:b4:d9:44:57:8b:99:52:09:
bf:30:83:2d:fc:00:c0:fa:07:f0:2f:d8:bd:d6:34:5c:27:53:
2a:bf:e4:d1:63:48:ad:47:a0:bf:67:37:08:83:b5:89:0d:0b:
d7:a0:c4:5b:2d:eb:32:3f:4d:20:36:6b:c5:5b:af:cf:77:65:
f0:22:a8:6a:9b:ea:6b:4d:ef:de:89:02:f7:e0:83:21:dd:44:
2e:47:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:18:41 2025 by rpki-client