Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: gmP2B4iKYL60oBhZgqE1reDhKjWGAie45jrvAWzlZfA=
Subject key identifier: 74:EA:22:B5:B3:25:2B:C5:BD:8E:15:69:5F:E1:CD:22:BA:39:34:47
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 0196BFA5BBF918AAACE6B95FEA06C22E913F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: DB
Signing time: Sun 11 May 2025 14:00:31 +0000
Manifest this update: Sun 11 May 2025 14:00:31 +0000
Manifest next update: Mon 12 May 2025 14:00:31 +0000
Files and hashes: 1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: SysTSIpKi4g0oEu73y+ax7we0u8ayUFI0jNaf+8pq+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:bb:f9:18:aa:ac:e6:b9:5f:ea:06:c2:2e:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: May 11 14:00:31 2025 GMT
Not After : May 12 14:00:31 2025 GMT
Subject: CN=74ea22b5b3252bc5bd8e15695fe1cd22ba393447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:da:98:3d:5a:9d:91:81:ca:09:13:ca:20:
be:3b:58:5d:00:3b:d0:b6:97:f5:f5:8d:a0:44:59:
c9:52:31:8e:44:4f:5e:6a:fa:fd:9d:93:ec:05:c6:
ef:0a:76:0e:e0:58:7e:8a:ad:71:55:b2:9b:37:d8:
75:fc:51:d2:c4:33:b4:d2:77:a5:7e:1a:94:6a:9b:
7d:65:75:bb:ac:11:9d:56:71:52:7e:b0:e2:f0:af:
d4:3f:53:10:1d:71:03:b4:2c:54:b2:4f:75:20:00:
d3:95:73:56:21:f6:a3:d2:21:7e:8e:82:3d:88:9d:
08:08:a6:fd:d7:33:13:61:d0:cc:11:5d:d5:a4:73:
19:b7:7a:05:4c:91:d2:c8:b1:c7:fc:b4:7a:ae:05:
f2:d1:26:df:17:8f:e1:aa:d0:c3:64:86:df:2b:9d:
49:95:2b:4b:d0:c5:65:61:8f:62:00:32:43:7a:a8:
13:0a:ee:b9:8a:fd:d6:8f:3c:c1:e7:23:27:bc:54:
67:3e:dc:25:22:a1:a0:5e:f8:30:f2:72:e7:27:7e:
44:a0:67:c2:1c:dd:19:35:6b:3f:42:b5:12:46:92:
c6:54:d1:df:e2:28:8a:02:22:2f:cd:0d:36:36:e2:
d5:f1:78:0f:59:2f:d0:a8:d5:97:8f:38:94:b5:a9:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EA:22:B5:B3:25:2B:C5:BD:8E:15:69:5F:E1:CD:22:BA:39:34:47
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f9:e7:7a:e0:25:71:20:5a:db:b5:60:26:c4:8d:97:0c:3b:
fd:12:ff:a8:dc:f4:32:42:28:8a:ac:4f:03:b8:0e:6a:fa:ea:
3c:ba:4a:86:f9:06:05:3d:51:a3:8f:62:6b:f8:0e:83:f8:48:
42:43:94:ed:5d:38:da:40:69:91:44:81:ec:63:ef:76:43:c4:
10:d6:c5:4f:28:5b:22:3a:e9:5f:ad:83:02:57:d0:84:37:a5:
e3:07:29:d9:73:12:40:8a:73:6d:9d:f7:c5:22:2f:89:83:01:
36:a2:79:b3:1f:e0:17:26:ba:c8:2d:20:ae:82:6d:fd:49:56:
05:35:d5:74:63:ae:11:ca:6e:50:12:b3:84:88:aa:0a:44:e6:
82:70:7f:d2:ca:89:2c:fd:fd:b1:b3:34:3b:fd:8c:93:8e:10:
69:4a:cd:28:54:c3:f3:8a:86:f9:29:db:4e:c1:5f:32:cb:6b:
d4:ac:dd:fc:4f:10:7b:08:a4:8f:2f:06:35:5e:53:21:e3:03:
aa:eb:27:2a:08:d9:a9:ed:8f:bc:59:62:31:a2:f5:7c:a6:9b:
4d:fc:9c:37:f0:0b:08:ea:55:79:6e:fb:73:89:dc:04:60:22:
58:2c:d6:af:9e:7c:4e:e5:45:b2:47:ea:ca:be:f9:15:f4:e6:
e1:07:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:42:08 2025 by rpki-client