Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: kLROZ497iTj00CuUMERNcHXJdnXD3F1nLKSvRzGGWzk=
Subject key identifier: 1B:99:52:DF:16:F3:F0:17:31:64:7E:A4:1A:15:3F:56:81:6F:A5:67
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0196BA7FCCDFB1BBEF49ADCD02C9113292DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 1317
Signing time: Sat 10 May 2025 14:00:59 +0000
Manifest this update: Sat 10 May 2025 14:00:59 +0000
Manifest next update: Sun 11 May 2025 14:00:59 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: onVafGemysR7DWm+KNL6MkQ/dp03KDMPsV+biAdmGxA=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:cc:df:b1:bb:ef:49:ad:cd:02:c9:11:32:92:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: May 10 14:00:59 2025 GMT
Not After : May 11 14:00:59 2025 GMT
Subject: CN=1b9952df16f3f01731647ea41a153f56816fa567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:21:c2:96:e4:78:69:48:80:a9:c1:80:9e:aa:
36:0c:cd:6c:f2:4a:d9:03:5c:90:48:ef:c4:dc:b3:
b6:5c:c6:12:00:3b:0c:79:96:11:59:8c:53:88:cc:
a0:a7:d5:d3:d3:8c:f0:c5:a1:17:e1:f5:0e:68:d8:
fc:9e:95:42:11:72:29:99:83:ac:47:cf:ac:60:52:
53:02:dc:26:c9:af:f1:94:f3:9a:e8:44:54:b8:3f:
11:90:e5:a6:43:fa:ba:96:f5:ee:c9:e1:ac:5d:4b:
ae:6a:fd:33:16:69:a7:d7:c8:8a:5b:72:8e:84:57:
a3:1a:6e:89:cf:90:8e:2d:cf:a7:64:59:80:d0:dc:
76:c7:f7:d5:0e:a6:0f:43:5f:8d:40:ab:d7:da:20:
18:b7:74:61:ac:04:68:00:35:a0:1e:11:1c:f0:53:
b4:c3:4a:64:e6:3c:36:58:bf:11:6b:7a:80:67:1c:
16:74:4d:1d:a7:16:66:ec:d9:95:9b:1a:90:2a:5c:
57:71:6b:68:8f:e1:3e:a6:0f:e4:db:70:ad:72:a2:
88:ca:21:1a:0d:bb:2f:fd:d6:cb:40:f2:b7:6b:a4:
e0:35:0b:50:4c:3a:51:2f:3a:2f:b0:9d:40:25:0f:
dc:5d:bf:da:f0:cc:b7:d7:6b:57:ed:57:9b:6a:bc:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:52:DF:16:F3:F0:17:31:64:7E:A4:1A:15:3F:56:81:6F:A5:67
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:25:c6:a9:6b:17:20:be:08:f2:06:6a:b3:d3:25:dd:d2:da:
f8:51:bb:69:a1:9e:e2:c6:d3:46:ff:16:be:00:55:70:d2:ea:
5b:19:52:1d:78:08:24:aa:a6:8c:7f:a5:cb:c0:00:e7:39:9a:
d4:3f:39:4e:24:74:a7:1a:26:4b:8d:62:c0:d6:d5:eb:83:32:
cd:04:aa:e5:aa:1a:54:73:9f:58:79:6c:32:5e:19:9a:a2:66:
c3:cd:81:b1:ab:8c:ce:d7:37:33:6d:8f:75:22:75:68:28:3f:
d7:7c:fc:c3:15:00:72:89:26:10:59:2b:2f:a2:d3:33:77:62:
00:fa:d2:03:42:5d:18:ae:6b:49:ab:4d:24:fe:8b:25:ab:46:
25:c0:62:3a:2c:f4:0d:92:44:15:cb:92:49:df:fd:37:46:1c:
6e:dd:c2:51:42:ad:b0:c0:b0:e7:98:bf:e8:cf:8d:f0:6e:2d:
ad:57:d2:b8:5f:c8:51:01:15:4f:ff:1a:0b:db:16:bf:04:6a:
e9:be:72:be:2e:8e:1e:cc:99:dc:1f:a0:5a:86:41:8e:c5:50:
d2:81:4c:31:c0:b7:a1:97:8e:3c:f4:d7:22:fe:98:e5:53:3d:
77:23:7b:9c:4f:c4:11:01:2b:3e:30:29:cc:f7:48:27:02:fd:
d9:06:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:23:51 2025 by rpki-client