Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: ugPZq7HV38aiUHvBiW6sM2yXtCwUTCvmHHfaZj3gtnY=
Subject key identifier: 85:A2:24:CF:B6:11:CF:97:8B:78:54:DC:51:5C:EF:CF:AC:3D:B1:B7
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0196B8C7BFA12E818C68CE8B6A57CDD58828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 12D8
Signing time: Sat 10 May 2025 06:00:20 +0000
Manifest this update: Sat 10 May 2025 06:00:20 +0000
Manifest next update: Sun 11 May 2025 06:00:20 +0000
Files and hashes: 1: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (hash: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=)
2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: XhjQ7HZD3+g6ANeWc9j8fRj/P4a73gSJwCbqOEwUxNc=)
3: eFaXAXJtU1k2p2wxUd4r6QNwVqc.roa (hash: RkwbFEsvbm5cD3j9VERr9RV6cFSAdbYRW8TdBaZFLJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:bf:a1:2e:81:8c:68:ce:8b:6a:57:cd:d5:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: May 10 06:00:20 2025 GMT
Not After : May 11 06:00:20 2025 GMT
Subject: CN=85a224cfb611cf978b7854dc515cefcfac3db1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:6b:2e:a3:46:c6:ac:dc:10:5b:3d:ce:40:
6b:9d:5a:22:fb:f4:90:99:66:da:01:75:8d:d3:da:
4e:74:54:17:4e:a8:23:39:31:30:2f:fd:3f:4e:27:
1a:69:b9:0c:6b:4e:b3:33:4a:44:70:e3:eb:a8:36:
2b:5c:f9:c3:ee:4e:c9:f5:ba:7b:01:83:dc:c7:01:
6b:5f:b9:39:a4:77:51:d5:42:d7:1a:6a:16:20:d5:
d0:42:18:62:d9:04:09:6c:3c:48:28:da:4e:4a:53:
e4:a2:17:6e:e0:13:f3:d3:ea:49:9a:f2:ea:13:6f:
81:16:09:66:41:00:c3:cd:1c:29:a7:73:ea:ab:7f:
9b:dc:d0:ba:ea:33:56:5a:88:2f:a2:7f:f2:db:f1:
f7:4f:12:04:c3:ab:25:78:69:2d:52:dc:0d:30:c5:
de:d4:45:71:cb:d9:9d:2e:c1:44:89:1b:99:8c:10:
2e:49:16:83:62:f1:1f:69:3b:4d:b1:67:22:33:8b:
d5:ed:30:42:d9:e8:54:dc:a8:1a:35:fe:35:8f:10:
1b:d2:c2:1e:a1:5b:7b:f9:0a:68:f1:99:f0:6d:87:
10:d6:85:e7:63:ce:9b:66:c9:d9:8e:3f:05:9f:04:
a6:0a:8c:1e:d4:3c:e3:15:0b:c0:e7:1b:99:16:20:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:24:CF:B6:11:CF:97:8B:78:54:DC:51:5C:EF:CF:AC:3D:B1:B7
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2f:ed:e8:cf:f1:ae:ff:6b:19:c4:54:9f:ac:c5:f6:ac:cb:
42:04:f5:92:ea:b3:80:9e:cc:f9:80:d4:cf:fd:54:d2:52:f6:
b1:67:8d:31:eb:20:49:98:19:f3:03:9e:0b:9f:c3:b8:06:31:
e4:6a:72:5a:b0:e1:36:c5:4c:35:b0:15:bc:46:81:bd:67:43:
49:ed:94:5b:e9:8c:b9:cd:da:a6:9a:e8:18:2a:64:4c:7e:cc:
d1:11:75:dc:20:d1:83:4d:a3:42:5b:de:fd:37:29:82:b8:d3:
e3:04:7b:cc:5c:11:7d:48:0b:47:0f:36:e8:b0:82:ea:80:bc:
b2:35:93:fe:39:81:47:09:31:07:57:59:93:88:5e:03:d8:e1:
78:c0:16:91:0c:86:34:d8:7d:0a:dd:56:5b:fa:11:d3:0a:17:
81:53:b8:58:4b:74:e7:e7:28:2e:0e:ae:20:58:0a:fb:3d:42:
bc:a9:07:71:f8:8a:58:d9:5b:f7:94:ff:65:ae:82:ba:f5:34:
c5:ad:ff:ef:19:de:fb:75:0f:2c:38:d3:39:18:ad:a3:d4:7a:
f9:0a:69:b3:a1:49:a0:d2:9a:0e:2b:13:01:29:56:3a:c8:86:
dc:6d:9d:e5:d4:b5:a1:1c:12:a4:fa:fb:a5:33:26:43:73:1a:
58:72:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:45:36 2025 by rpki-client