Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: LTZ8kND/z3sq8zNmvRpJupMWAoM3TkH2gpB1BEG8VCU=
Subject key identifier: EC:AE:B2:D8:25:55:5A:A7:52:1C:67:8D:9C:2C:2E:A2:2E:37:BE:E0
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 0196A68AE9F1D110E4925B59DFD0CFFE95C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 124B
Signing time: Tue 06 May 2025 17:00:43 +0000
Manifest this update: Tue 06 May 2025 17:00:43 +0000
Manifest next update: Wed 07 May 2025 17:00:43 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: V1mTfPr54GRqrenr9DPSAFnHpOxqFbVoRqhuLogFnlw=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:e9:f1:d1:10:e4:92:5b:59:df:d0:cf:fe:95:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: May 6 17:00:43 2025 GMT
Not After : May 7 17:00:43 2025 GMT
Subject: CN=ecaeb2d825555aa7521c678d9c2c2ea22e37bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:80:dd:c3:1f:e8:91:db:c6:ea:33:77:20:
96:c6:78:81:8b:4d:dd:3a:50:8e:27:55:86:c3:d9:
1e:3a:41:97:6c:3c:c6:ad:4e:6d:69:33:1d:14:e7:
6b:b5:d2:72:94:11:43:55:27:bc:52:15:50:d2:9f:
d3:f2:e6:40:94:62:a5:ac:04:17:da:3b:3a:5b:f2:
41:08:39:89:3e:97:54:22:1f:09:13:e2:e6:7e:e0:
9f:c0:6b:87:04:6d:88:05:d6:d4:3e:ca:c5:91:f1:
3d:8f:a0:d1:63:b0:3d:81:19:b2:6b:d4:65:61:24:
fe:cd:9d:96:ed:35:80:bb:fc:d6:e3:ce:b0:5d:b3:
86:81:8a:73:99:60:f7:22:cd:06:f5:c8:25:49:f6:
80:ca:ff:45:1c:cd:a9:b4:9c:53:51:6f:32:ac:f9:
b4:7a:99:84:b0:cb:15:df:46:cf:9c:e6:b8:13:a1:
1a:dd:5b:9c:b2:b1:b2:d1:77:1f:5b:5c:0d:fa:24:
23:6d:18:2f:ae:4e:b6:4b:0f:0a:20:a9:5a:53:91:
57:b7:b0:99:2f:ab:60:87:2d:1d:42:17:3c:4f:5c:
e9:fc:01:3a:d2:b7:30:25:74:4f:b1:07:e2:d4:b2:
3a:d4:a1:56:69:41:c2:51:f4:05:3b:e4:7b:01:30:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AE:B2:D8:25:55:5A:A7:52:1C:67:8D:9C:2C:2E:A2:2E:37:BE:E0
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5b:25:3c:b0:10:2f:0e:41:ce:94:1a:5e:6f:87:63:b5:c5:
2e:bf:32:a6:be:ed:f5:2b:07:39:c4:ee:d3:23:79:87:ef:48:
ef:8b:71:a9:a7:ac:22:df:7f:ac:0b:c0:50:18:03:04:82:3f:
14:b7:71:36:7b:9f:f4:51:f3:20:be:05:af:6f:66:6e:ed:4a:
a5:03:64:89:fd:a5:45:23:aa:c6:0d:44:66:ef:ff:5a:5e:9b:
42:9f:48:3e:6e:41:08:7e:40:33:73:02:ec:ce:74:a4:f5:bf:
90:44:b5:db:06:52:ad:8e:1a:46:a9:84:e2:16:77:03:10:fa:
c4:91:7e:40:29:83:c8:12:8d:d5:9d:58:fd:31:8f:b8:ef:eb:
10:d2:30:82:a7:f1:4f:b1:c0:44:b1:36:db:73:7c:1c:91:0b:
13:ec:25:71:7f:25:2b:7e:27:d7:48:af:bb:f4:24:5d:62:ec:
89:5d:28:51:d4:81:ee:0b:e9:fc:a1:3c:29:7f:bd:35:ff:ad:
78:12:33:a0:91:98:76:18:50:c3:73:8b:7a:03:db:46:e0:67:
79:cc:e0:54:b4:fc:14:20:b8:9d:61:54:59:16:90:3a:16:6a:
53:ac:e7:70:19:ab:bb:07:df:e2:75:a2:0a:ae:40:f5:14:40:
99:8c:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:06:38 2025 by rpki-client