Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File: btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier: Pf7nTIQAdsV3ciB42PsedKtMA3H3LSK2rtjWcM44XxE=
Subject key identifier: 3C:03:BE:1F:F3:E0:8F:00:EC:90:48:95:F5:0B:66:06:64:BD:0E:FE
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer: /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial: 0196A20911590B83EFE81F8AADC263E354C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number: 01F9
Signing time: Mon 05 May 2025 20:00:25 +0000
Manifest this update: Mon 05 May 2025 20:00:25 +0000
Manifest next update: Tue 06 May 2025 20:00:25 +0000
Files and hashes: 1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: 28c4/tbCVQAJYRYH+Qc7jPEamY/M4y83sy7yujnvDpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:09:11:59:0b:83:ef:e8:1f:8a:ad:c2:63:e3:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Validity
Not Before: May 5 20:00:25 2025 GMT
Not After : May 6 20:00:25 2025 GMT
Subject: CN=3c03be1ff3e08f00ec904895f50b660664bd0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:5d:b2:58:4b:24:d8:e4:cb:8b:19:5f:33:
1b:f1:84:22:2c:9a:d6:3a:8f:9f:2c:82:1b:8b:0a:
f7:6c:d7:ac:e9:5e:a8:1a:6c:39:94:22:3e:61:1f:
70:91:e4:0a:aa:40:7c:73:59:8d:10:53:74:43:73:
c7:f5:00:5f:e0:e3:48:3d:de:a0:42:d2:f7:b7:f6:
27:df:66:31:d0:25:60:6f:05:8d:c1:96:7b:7a:b2:
c3:66:94:a2:38:64:4a:f4:7c:50:1a:93:33:fb:0d:
9f:28:28:c5:2a:06:97:a7:ad:56:fa:a1:6c:05:6f:
ee:c2:c8:34:d6:94:6a:2b:15:2e:e8:2a:34:40:54:
6d:f7:07:f2:81:9b:a1:de:dd:12:59:41:9b:8f:cc:
fa:39:4d:df:af:89:1e:fe:e9:01:26:64:45:0d:22:
cb:cf:cb:9f:ed:c0:21:04:e3:ea:25:ca:19:1b:a5:
fa:23:1d:cb:93:dd:5d:65:c0:fe:28:f3:de:5d:dd:
8e:20:e6:58:71:86:0e:7b:4a:05:2e:25:7b:fe:89:
73:a2:8f:45:0b:5b:a1:66:c0:ee:a0:24:7f:e5:0f:
3e:2b:a6:60:40:f7:c0:21:99:fc:a1:c6:31:23:7a:
e8:04:4c:b5:6d:f7:13:ca:b0:4e:99:2f:8f:16:d4:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:03:BE:1F:F3:E0:8F:00:EC:90:48:95:F5:0B:66:06:64:BD:0E:FE
X509v3 Authority Key Identifier:
keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:e3:21:34:50:ce:65:4d:84:36:b2:0d:60:e3:52:b2:55:
ea:a6:b7:ce:63:4c:8f:5a:56:f0:4c:97:53:4a:d2:a0:b7:4e:
3c:14:3d:9e:2e:9c:df:af:c7:c6:73:08:a7:0f:88:27:8b:ac:
d4:61:3a:6e:dc:b3:7a:59:6e:2e:25:30:92:21:6c:dc:68:fd:
fa:d8:68:13:28:26:43:05:20:d8:86:85:b4:56:65:1c:6e:eb:
9a:66:2d:89:db:1e:33:7b:a0:23:6f:3e:57:ff:3e:ad:42:3c:
bc:a9:b0:b6:bd:8e:97:94:a9:6e:bc:6d:4e:47:3c:b0:25:7d:
07:e2:47:ff:7b:2c:38:74:e8:12:eb:21:f0:ba:db:00:f6:25:
63:4c:6f:f0:e1:0a:f9:33:b7:fd:3b:61:f2:fc:84:c5:23:87:
1c:6b:81:97:b0:ca:78:d7:ab:b8:3a:0c:4f:d3:5b:69:51:31:
66:3a:e7:4a:f0:5b:f5:f3:ba:5a:c7:e7:4c:91:58:b2:6a:ea:
c5:6a:e3:7c:2f:fb:28:be:99:5d:a9:1f:ac:f8:ac:6c:40:d7:
93:60:7b:61:f0:68:57:2e:6c:03:93:53:96:af:de:70:38:1a:
7c:df:3a:a4:1a:28:88:c7:5f:46:87:d0:dc:ec:4e:a5:3f:61:
a0:65:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:52:41 2025 by rpki-client