Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: 7l2h7BpFjNSaFHKrFlelrDrXVOnid6/jJkzMRiZbp9k=
Subject key identifier: 73:83:81:01:D1:A8:A3:07:CF:6E:86:08:D4:EF:50:E4:72:7B:7F:0C
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 01969CE2E3E6972B66414C5F1B9E36F61E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0D1F
Signing time: Sun 04 May 2025 20:00:37 +0000
Manifest this update: Sun 04 May 2025 20:00:37 +0000
Manifest next update: Mon 05 May 2025 20:00:37 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: Q8hHvEpUVXq5HyC19sZf93vc0lvEC4J7OttR2TxUlug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:e3:e6:97:2b:66:41:4c:5f:1b:9e:36:f6:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: May 4 20:00:37 2025 GMT
Not After : May 5 20:00:37 2025 GMT
Subject: CN=73838101d1a8a307cf6e8608d4ef50e4727b7f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:a3:14:80:60:3d:c1:2a:e7:a1:ca:54:f5:
58:b6:cd:b6:1a:37:74:e1:6d:ee:df:d4:50:17:20:
10:ec:9b:7d:a5:6e:e3:92:dc:b9:1e:c7:c0:a4:b2:
8c:95:25:b5:62:9a:8c:6b:6e:a1:9c:66:8a:94:db:
cd:30:66:82:1e:78:4e:cd:e5:ce:fb:26:9d:9b:f3:
bf:1c:3f:e1:24:b6:3d:b3:16:c7:f7:ee:dd:fe:1f:
12:81:55:c3:06:05:1e:33:30:dc:10:59:96:48:70:
04:c1:06:f1:ed:68:53:ed:53:b4:ab:cf:65:36:8a:
83:74:d7:d1:e4:4a:94:2c:18:01:9f:b7:a9:4e:78:
19:11:70:de:b8:23:a7:e6:e5:10:92:3d:31:58:7c:
64:65:24:61:c3:45:9a:c8:f9:1a:d2:6f:1d:a5:e8:
a7:6c:e6:ec:cc:83:55:14:5e:97:d9:b9:2e:6c:d4:
79:92:af:0c:5a:b1:f6:6e:16:eb:6d:47:4d:c7:ab:
61:8c:04:ba:0b:aa:f3:a6:3a:35:0c:ae:5a:ec:aa:
4f:36:67:52:5a:e9:42:8b:79:bd:b1:c1:46:bf:43:
4d:bf:f9:ff:7b:dd:41:f9:12:42:d6:04:ac:90:c5:
58:93:32:e9:e6:03:3e:7c:ff:52:d6:70:ab:e9:b4:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:81:01:D1:A8:A3:07:CF:6E:86:08:D4:EF:50:E4:72:7B:7F:0C
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:5c:1d:63:50:0d:c8:7c:f1:2c:48:8a:c2:81:83:fb:27:
a0:23:79:e1:2f:76:f3:7b:61:2c:3a:a9:50:ad:15:6c:0c:31:
a8:5b:64:10:8f:b9:45:22:f6:69:1d:f7:81:6e:79:00:89:0e:
39:71:7e:72:78:1e:3a:4a:3c:52:c8:96:47:c3:3f:22:bd:22:
a0:a0:62:32:d2:79:6c:89:0d:cb:a2:ba:6a:65:f8:24:31:43:
e6:5c:0d:f0:9c:19:46:e4:4b:a8:8c:12:5a:34:a0:65:bb:a9:
66:d8:79:46:e6:23:a7:7b:44:aa:a1:82:fb:9f:88:76:49:9a:
c3:7e:5f:de:91:07:cd:2a:fb:3d:5f:c2:73:cb:45:04:d5:a9:
73:50:0e:3b:cd:1d:d4:8a:9e:82:54:f5:16:53:21:0b:c7:f5:
55:58:0d:a9:24:8b:45:86:14:71:65:f8:5d:b6:c9:1a:18:8a:
70:00:c6:d7:a7:e9:7d:79:b8:48:74:b3:2f:50:c8:c5:81:b6:
b6:41:92:55:d8:3f:82:19:82:68:fb:e2:5e:3b:ad:bb:4f:a1:
46:95:a8:41:de:30:ce:11:18:84:55:83:b1:d3:10:58:3e:d4:
11:61:94:ed:16:72:74:ae:f2:ac:33:13:09:0e:1c:ec:e9:9f:
50:c2:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:42:12 2025 by rpki-client