Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: moZe+a6kenw5nb+eU7McMoN2XJ/rJ5hAUIgohPPKtS0=
Subject key identifier: 89:8F:CA:76:2A:7E:F8:38:8F:4F:71:D4:1A:4F:0F:B3:73:94:DF:4B
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 0196D551C352FE0EA230EAE3E8D84DCAE691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 1305
Signing time: Thu 15 May 2025 19:00:27 +0000
Manifest this update: Thu 15 May 2025 19:00:27 +0000
Manifest next update: Fri 16 May 2025 19:00:27 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: Qo8kWx7QaJi4DHPjo9aPDlkJgN1dPXbyHnOfRD9Q8V0=)
2: tE13-Z8TEXFI2N_Q3eslEjXwYJ4.roa (hash: 7axnrMAdFOe7EcvPvTZA4mgDnvv0sfD7w1s1AvMo3bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:51:c3:52:fe:0e:a2:30:ea:e3:e8:d8:4d:ca:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: May 15 19:00:27 2025 GMT
Not After : May 16 19:00:27 2025 GMT
Subject: CN=898fca762a7ef8388f4f71d41a4f0fb37394df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:bb:b5:ac:91:67:b6:e2:32:e2:5e:ce:a1:
e8:f7:33:82:3b:cc:4b:01:06:97:69:fe:ff:d0:dc:
e3:dd:dc:87:95:bd:1a:2c:0f:15:44:28:d5:e5:6b:
5d:27:f7:fb:0b:b9:8e:64:06:8d:58:ee:da:e3:cd:
ad:df:19:76:76:a7:20:58:bf:69:71:d2:87:ba:4c:
6f:a6:e0:ae:62:ef:12:d2:07:1f:10:75:51:0d:97:
5a:4d:21:ae:ab:0f:1d:b1:b2:9b:7d:ef:f3:e7:37:
72:be:92:b2:95:5d:b6:73:91:d2:3b:90:ad:ca:d5:
aa:f2:57:3c:c2:f8:57:57:89:bc:95:f4:16:46:09:
ea:38:f8:c2:f6:2a:40:2a:aa:4a:c0:9f:8e:73:86:
2b:3b:43:7f:ab:9e:92:0f:ac:3c:31:66:b2:e4:b1:
81:51:9f:6d:8f:16:18:de:b6:99:b4:de:63:62:b1:
db:95:0c:c0:48:a0:c1:98:57:38:fa:7c:96:cd:85:
1e:d9:4e:de:4d:f4:cc:52:17:ea:00:6a:ec:d5:70:
a5:a2:aa:ff:ed:3d:f4:e2:71:95:02:25:eb:1d:69:
c9:6f:5b:09:57:55:21:45:a9:53:48:c8:89:1b:b8:
bb:78:e0:28:85:63:68:67:3f:c2:d6:40:f8:7a:b9:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8F:CA:76:2A:7E:F8:38:8F:4F:71:D4:1A:4F:0F:B3:73:94:DF:4B
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:12:4d:5a:d2:23:df:49:b7:3a:3d:ba:94:f4:9c:b6:d0:1b:
f9:67:95:df:d4:ce:22:80:66:1c:da:33:e6:fa:54:f0:a6:cb:
ba:d6:4c:33:5f:4c:a3:1e:78:32:55:b9:b7:fc:56:60:d7:95:
95:2b:11:82:98:36:37:7b:5f:1e:d3:c4:76:ab:d0:aa:45:c6:
cc:a9:0c:80:f7:2b:25:26:a5:72:1a:52:65:f6:40:af:00:21:
18:fd:37:ea:db:fa:d1:53:f6:28:cc:d2:ed:71:ea:34:f2:86:
8c:48:4e:5d:45:98:61:b1:4c:ec:0e:fc:f1:2e:0d:a9:ea:97:
e5:e1:d4:96:32:cd:6a:0f:9a:3c:bb:d6:7c:99:c5:03:ff:40:
d9:cd:13:a7:20:81:63:5e:f3:3d:7e:d9:d3:c8:30:2e:b9:c8:
b3:81:2c:e1:ec:a2:f8:95:95:99:e2:73:6a:1a:ae:50:ee:81:
5a:8d:79:36:e1:a8:a9:e5:40:1e:06:f3:e0:e9:4f:ba:b6:3c:
9d:c5:d2:db:6f:3d:65:a3:af:9b:17:9a:4d:3b:ff:33:43:fa:
48:b6:1d:15:36:8f:77:8b:27:95:aa:b8:e2:7a:84:c3:71:70:
0c:62:01:27:4c:ea:75:af:c1:1f:b2:11:2c:be:d8:de:fb:d8:
9b:f3:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:43:57 2025 by rpki-client