Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier: sk+gYLREKz7twvIdCBm+GrATvGO1injVKTjnC3Caxs8=
Subject key identifier: 4E:65:F0:A7:AF:63:53:6D:DB:07:7C:1B:BB:EB:8D:8D:96:10:15:A5
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 0196B7B4F46518F15B6BEC77CBA16185A346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 01:00:11 +0000
Manifest this update: Sat 10 May 2025 01:00:11 +0000
Manifest next update: Sun 11 May 2025 01:00:11 +0000
Files and hashes: 1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=)
2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: wE7be+UwHr7uhYcb6porzXcLGrXPlaKlohhohKMlJHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:f4:65:18:f1:5b:6b:ec:77:cb:a1:61:85:a3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: May 10 01:00:11 2025 GMT
Not After : May 11 01:00:11 2025 GMT
Subject: CN=4e65f0a7af63536ddb077c1bbbeb8d8d961015a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:55:cc:71:6f:24:70:5a:86:b2:58:39:1b:
7f:4a:ce:21:87:1e:4b:0d:cc:0a:71:92:34:6f:3e:
33:5a:19:71:04:69:37:e6:f6:05:29:83:a0:76:65:
c6:ff:70:55:42:9d:ce:36:28:0f:d9:d8:25:e9:8d:
cc:6f:69:fc:61:16:82:16:43:1d:b6:da:6d:30:92:
56:fa:43:c9:33:3e:62:e4:5f:41:5f:90:e1:0b:c9:
58:d6:06:8b:9f:b7:be:be:a5:cb:8c:0d:b2:6b:f2:
79:a8:87:ac:44:2a:cb:fd:11:2b:d0:3f:89:26:06:
9b:0f:27:82:de:47:4e:46:30:30:f9:2e:35:ea:52:
fd:fc:6a:92:aa:0a:d7:e6:5f:22:01:a1:2c:6d:48:
cd:2e:5c:9b:26:a5:f9:fd:26:34:75:36:a4:79:5c:
52:ae:27:f6:1e:c4:92:40:7c:1b:da:76:38:92:c3:
74:99:1b:4e:ca:b9:6b:69:c2:ec:2b:42:fa:02:2c:
04:65:82:4c:4d:9c:79:29:6a:4c:50:e0:c4:63:47:
eb:e3:64:31:f8:a2:04:ee:3e:9d:cf:3a:d6:aa:f8:
fe:d7:1c:a4:98:58:85:e0:22:95:73:4a:65:8a:0b:
7b:6d:a1:a2:28:3f:8d:e1:b8:2f:6c:1c:9a:bb:20:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:F0:A7:AF:63:53:6D:DB:07:7C:1B:BB:EB:8D:8D:96:10:15:A5
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cc:96:e7:0d:64:1e:d7:3c:de:f3:dc:18:41:79:55:ed:8d:
6b:70:7c:08:e7:1d:24:da:8c:b5:11:99:df:9a:98:36:bc:79:
48:d6:06:d5:6e:bf:b1:b2:60:f0:ec:c8:b9:c6:12:f9:2a:89:
74:66:af:50:b1:19:9c:a0:9c:2e:f8:ce:21:5f:3a:0e:a7:17:
29:ce:55:77:68:52:ec:81:b1:2a:4b:8d:d0:4d:ee:28:5a:4d:
4a:e7:50:05:74:5d:d8:53:fa:62:fd:b7:31:ba:28:b0:c1:24:
09:b9:12:93:c7:df:54:00:d4:f7:b0:94:cd:d0:fe:5d:5b:24:
fe:5f:df:2d:5c:c2:16:ea:73:50:ea:ac:ee:49:60:71:2a:9d:
31:56:d4:02:30:b8:e7:16:a1:d8:93:51:c5:11:0c:f9:c0:f5:
af:7a:78:30:6c:4e:7e:e9:f1:3d:33:63:ac:f4:1c:e9:ee:af:
ac:56:70:c0:bf:66:8f:54:66:e4:b7:d7:76:c1:d4:7b:f5:0c:
cc:77:0e:f1:da:23:8a:f2:73:0a:e3:d7:e9:d5:30:11:12:26:
9f:26:aa:d6:02:2c:60:bc:06:71:09:9b:5f:cb:ca:90:99:99:
8f:f5:64:5d:c6:43:2d:2c:19:ac:39:59:fd:62:5c:c0:cd:52:
be:85:b2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:18:16 2025 by rpki-client