Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: GBWwHptXJSsvCr9yWjGLV69FAp/Lkk7sOpL7cf262pM=
Subject key identifier: 7F:B8:FC:02:D8:DB:F8:17:71:1A:DD:13:00:22:D1:5B:5A:41:F9:42
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 0196BBC91F0FEB8C3E0FBA0BA2629B1FFC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 20:00:42 +0000
Manifest this update: Sat 10 May 2025 20:00:42 +0000
Manifest next update: Sun 11 May 2025 20:00:42 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: WllV4iTrpVsyBbPYY3izj8YLqIaNvRIT46seQU2jxy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:1f:0f:eb:8c:3e:0f:ba:0b:a2:62:9b:1f:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: May 10 20:00:42 2025 GMT
Not After : May 11 20:00:42 2025 GMT
Subject: CN=7fb8fc02d8dbf817711add130022d15b5a41f942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:ff:d0:95:e4:8c:99:be:72:9c:65:61:3b:
66:c3:b3:75:e4:59:8d:ac:a0:04:73:f8:03:e7:6c:
ab:9a:19:12:9f:d5:e9:2a:59:e1:37:5f:e9:b9:1f:
8c:39:88:aa:67:c5:9c:09:27:29:d4:fe:cb:53:cc:
25:f5:67:a0:2c:a1:77:0b:20:73:7e:3a:ee:d7:80:
84:1c:0d:c9:39:bd:c7:b2:9c:c0:2d:bb:3c:2a:ee:
74:81:58:0e:71:9c:b8:0a:db:66:e9:08:46:1e:25:
07:eb:99:ec:64:f6:55:f6:b4:73:b1:43:83:2b:17:
7f:64:87:91:a3:5a:56:37:c5:10:52:4e:20:8e:c8:
87:5d:45:4f:32:66:13:e5:87:82:57:e0:4d:68:f6:
7f:43:b6:c3:30:19:3c:66:c8:4d:80:2c:5c:57:29:
b8:72:41:39:9c:4c:3f:74:58:ab:4c:f7:f7:1f:fd:
1c:93:da:16:87:df:d1:9d:ba:84:84:fa:0a:97:75:
43:69:19:bc:0c:68:4b:f0:82:da:a2:d7:94:f7:ff:
d7:38:37:bf:d1:7f:eb:eb:3d:97:0e:7d:34:62:27:
8f:55:cb:5e:97:e3:54:6c:ed:c3:89:31:eb:15:7e:
67:31:38:ca:2f:6c:f1:0a:d0:db:66:d8:83:a5:e4:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B8:FC:02:D8:DB:F8:17:71:1A:DD:13:00:22:D1:5B:5A:41:F9:42
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:13:57:cf:a2:22:c7:96:42:2a:5a:5c:f5:b0:ad:64:fa:32:
d1:a6:a4:55:e2:61:61:6a:f2:24:fe:a9:88:7b:ee:97:b7:0f:
9b:1b:2b:ca:b1:57:af:4e:3f:a2:8b:5a:82:f2:c9:b8:14:42:
91:5f:34:1f:33:65:b5:6b:c6:45:86:31:04:db:a4:e2:70:97:
29:18:b9:cf:82:1f:92:0b:c3:29:b6:f3:d3:80:57:b7:e5:4c:
21:21:5f:02:cd:69:12:d7:ce:25:ed:40:1a:42:19:d4:9d:da:
93:b3:04:66:d4:8d:f2:f7:9d:de:af:de:78:b9:0e:08:5f:c4:
ce:e9:c4:a8:a5:bf:36:88:d8:9e:f7:fb:f8:e3:07:3b:2f:8c:
42:9d:84:eb:a8:db:cc:ea:13:27:a5:ea:a0:84:cf:3a:26:54:
37:38:ed:03:61:f6:b2:95:6d:0c:9c:58:f1:ac:20:12:37:ce:
a3:e5:20:a9:a6:7e:9e:2b:81:12:8d:f4:f7:dc:9b:eb:2a:91:
6d:29:7d:e5:47:e7:3f:ed:ac:04:e3:a7:f7:d7:7b:ae:e5:3e:
ed:d5:65:73:2f:bd:d4:4e:0e:a2:34:b5:90:47:53:fa:6e:c5:
3c:d6:59:96:e4:3d:91:74:2e:05:84:9c:eb:72:c1:08:f4:b2:
02:e9:a1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:05:43 2025 by rpki-client