Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: lBfvZhZa/jZEgin0vr3u3dXDnZS0vCCDDH9oGtXa1PU=
Subject key identifier: 82:42:FF:4B:E3:76:88:0A:62:D9:52:F2:9F:93:D9:CA:7F:DD:D5:DB
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 0196A42E711C515CEC7DA48F7705086D0A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 06:00:29 +0000
Manifest this update: Tue 06 May 2025 06:00:29 +0000
Manifest next update: Wed 07 May 2025 06:00:29 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: DRPHlKLjDOs/0H1mGv3oCLvfa4/k4ZwDUOL4X1eWYag=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:71:1c:51:5c:ec:7d:a4:8f:77:05:08:6d:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: May 6 06:00:29 2025 GMT
Not After : May 7 06:00:29 2025 GMT
Subject: CN=8242ff4be376880a62d952f29f93d9ca7fddd5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4e:1b:c8:d9:fa:1d:d8:3e:71:91:3b:a0:aa:
31:96:aa:e3:ba:a9:90:ae:a3:93:27:f3:c9:b8:83:
5d:63:e7:b4:e3:64:fa:c4:51:81:1e:7e:b9:16:1d:
05:79:d0:f6:3c:68:5a:94:a6:3c:ce:0e:b4:23:dc:
b3:66:3d:92:0c:2c:95:d4:c8:bd:0c:58:f9:70:d2:
90:b0:51:6a:f9:d3:93:41:08:4a:a9:a7:6e:e1:59:
f1:55:10:c1:ce:f5:de:2e:f4:90:9a:93:76:bc:7a:
89:3b:c0:75:45:56:72:62:a7:1d:9f:07:85:09:6e:
cd:de:ef:ce:8f:7d:2e:ef:75:ba:f9:d9:f9:e1:eb:
a3:e8:c6:fe:7c:3d:f1:34:b6:93:b4:bb:78:bb:42:
89:99:50:7a:ab:e7:f9:f6:1d:3f:8a:6c:44:70:72:
6b:df:2b:d7:75:3e:52:1d:f1:c0:a7:bf:e5:8c:a7:
fa:12:64:d3:9b:b1:1f:13:33:53:59:22:bf:ce:23:
a2:45:07:35:e5:85:d7:fe:51:34:d1:be:c6:d0:25:
50:b6:d4:d1:5e:bf:73:68:48:23:df:d1:8f:ba:fe:
ba:e7:15:46:2a:24:40:7f:3d:a7:0d:54:ea:6e:ec:
12:62:da:6e:75:1e:37:bd:00:b6:42:1e:55:a9:b7:
e0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:FF:4B:E3:76:88:0A:62:D9:52:F2:9F:93:D9:CA:7F:DD:D5:DB
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:99:97:4d:a4:ef:ef:c4:4b:4f:89:da:23:3c:59:e7:e1:
c1:fc:c7:fd:ae:2f:f6:23:b7:ce:33:16:d5:d3:b6:61:8e:03:
e0:2b:b5:3c:4e:fd:97:ed:2a:95:50:c9:55:e3:d4:e0:9d:8f:
53:95:78:1b:b4:89:bf:a9:79:b4:c1:b4:d8:78:ab:0a:39:26:
09:60:9c:00:a0:42:0c:04:da:0c:12:ad:92:eb:cf:f7:57:3d:
e6:0b:90:29:ad:58:13:79:7d:24:bd:fd:d9:34:1f:20:0f:e2:
36:b6:12:ab:e6:76:60:d8:dd:a5:fa:e6:fa:ec:7d:98:58:0c:
7a:8d:e5:2f:5f:85:16:75:36:8f:d1:09:f3:a2:e0:72:2d:5f:
72:eb:bd:dd:68:68:18:6f:b4:bf:20:b0:f5:a4:7b:3e:73:fb:
bc:49:ce:25:b6:5a:16:93:93:27:32:b1:af:68:51:97:de:16:
bc:ff:68:47:b9:a9:16:f2:5d:d4:76:1a:11:cc:3a:4d:8a:c5:
cf:6b:f1:b1:85:d9:d8:fb:34:9b:32:87:1b:52:8d:0c:f2:b6:
b2:39:ab:72:c3:a7:a1:e4:35:6c:dc:eb:bc:53:95:12:bf:69:
46:a2:95:35:b4:06:b7:83:3c:7d:2e:f0:02:d5:97:6f:13:cb:
20:61:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:07:08 2025 by rpki-client