Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier: SOrFJ1fPM/FU+IMG/Es39FhQXviekC0Q4tdkcMwgcAg=
Subject key identifier: 9D:25:4E:BA:7F:D2:C2:8F:F7:2D:4B:1F:1D:58:C9:DE:A4:0A:C4:C3
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 0196C53A70D72556D895DCCD0CD66C06BFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number: 0185
Signing time: Mon 12 May 2025 16:01:03 +0000
Manifest this update: Mon 12 May 2025 16:01:03 +0000
Manifest next update: Tue 13 May 2025 16:01:03 +0000
Files and hashes: 1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=)
2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: ZVUXwdbNKWUDlWju5T/wEuUnLmIUw+FBMEMVnS1iJ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:70:d7:25:56:d8:95:dc:cd:0c:d6:6c:06:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: May 12 16:01:03 2025 GMT
Not After : May 13 16:01:03 2025 GMT
Subject: CN=9d254eba7fd2c28ff72d4b1f1d58c9dea40ac4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:a7:13:c1:33:bb:21:0a:5e:35:08:0f:c5:
3c:14:47:c8:df:fb:3f:f4:bd:c7:c8:c2:f4:3b:b7:
49:4f:34:ed:f7:5d:3a:30:84:13:27:3e:d0:a1:94:
e4:e7:bd:88:be:05:66:80:77:d3:5a:b3:77:f4:80:
87:5b:58:90:07:55:ca:35:c7:b1:3e:d3:f1:37:4b:
f9:9d:bf:f2:f2:5f:cf:22:bd:ea:cd:e4:cb:21:38:
d6:b5:f6:ce:d0:55:0a:b7:fe:b3:e4:7f:98:cc:89:
a6:d3:5d:7a:b6:bc:2e:c4:b2:52:05:4e:4a:bd:03:
64:a7:fb:ff:6f:68:64:64:9f:e6:a8:2a:da:11:9b:
c6:8a:9b:b9:54:7d:b5:02:28:75:c3:c3:38:17:9b:
29:bf:33:ab:a9:c9:04:da:9f:c0:a5:2e:36:e9:ae:
fb:17:60:0e:92:ca:7a:15:78:10:be:dd:ea:bf:ea:
fd:06:aa:c3:93:df:8b:2b:70:34:06:e4:eb:b3:c6:
69:8a:b5:40:63:2e:72:f4:2e:3d:45:de:93:d3:2d:
57:69:d2:50:34:f7:b6:79:be:fc:55:b4:de:39:f2:
78:31:18:af:a0:30:2b:4a:f5:b1:02:09:e3:64:cc:
99:51:d5:95:54:50:ab:32:ca:e4:6b:1f:60:25:bc:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:4E:BA:7F:D2:C2:8F:F7:2D:4B:1F:1D:58:C9:DE:A4:0A:C4:C3
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:7f:62:04:77:e6:21:70:28:c7:ce:24:67:53:ba:1c:87:
8d:37:a6:c9:4e:7c:c5:41:3f:9c:b0:9f:8b:e6:f5:bb:5e:7b:
2d:09:b3:14:b0:75:b8:eb:89:34:42:ed:1d:ad:40:df:0c:33:
cd:e1:99:86:98:40:37:22:e8:e7:08:df:cd:4b:85:4d:51:bf:
e8:04:dd:f6:8e:5e:1e:b4:0c:8b:91:74:2e:5b:3b:d5:2f:4b:
ab:0c:a2:fb:09:74:f9:12:a4:33:60:cc:42:28:4d:c2:42:a1:
84:aa:56:e0:75:e6:70:15:97:40:72:e3:01:a8:dd:bb:79:29:
11:9f:cc:d7:3b:df:4f:8a:e1:11:e2:f5:2a:0e:bb:02:7b:73:
65:02:87:c8:bd:17:11:c2:f3:39:eb:49:53:2e:a2:bd:ab:10:
6f:ed:19:8c:fc:0d:c0:c0:a4:e4:a1:79:be:09:69:e8:9f:12:
b6:b0:1a:a7:85:af:00:0f:1c:f4:9d:1c:fb:2a:4f:bc:23:93:
f1:97:d6:19:4f:27:60:2b:d1:b4:44:71:f9:fa:7f:a2:df:8f:
c5:02:1c:f4:52:91:56:d5:8d:1e:ff:fe:fd:b5:6d:1b:cf:02:
43:9d:9c:18:28:a9:87:fb:84:30:e1:81:74:4c:22:2f:b0:b0:
ae:05:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:07:03 2025 by rpki-client