Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: ZoB9pojjEovMSSwEDM2rhWA9wawX02phO6cd9cjT0TQ=
Subject key identifier: 1B:C9:04:99:FF:EB:EA:8B:0A:94:D5:1B:C2:E3:10:6E:D9:C5:4A:62
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0196CA607AE887774F2708035062D6C84239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0DA9
Signing time: Tue 13 May 2025 16:00:42 +0000
Manifest this update: Tue 13 May 2025 16:00:42 +0000
Manifest next update: Wed 14 May 2025 16:00:42 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: 7RAWBH6/WiDVQTWVpRUWGOhsgBYyEHaD2VwXi1Sjp/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:7a:e8:87:77:4f:27:08:03:50:62:d6:c8:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: May 13 16:00:42 2025 GMT
Not After : May 14 16:00:42 2025 GMT
Subject: CN=1bc90499ffebea8b0a94d51bc2e3106ed9c54a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ae:da:fc:b4:c9:00:52:6c:6f:1a:c5:9c:c8:
d6:83:c3:37:a5:10:91:80:be:0c:cf:02:f2:94:d2:
d0:ff:c9:10:e6:48:06:80:da:b8:6e:68:a6:c8:80:
ac:a1:da:3c:69:38:76:a8:4f:1a:c2:d6:12:cb:76:
83:ce:92:08:7c:a0:09:02:88:c0:af:5e:56:47:2c:
1f:91:8e:72:da:3f:8f:05:be:37:2d:4a:08:87:53:
4e:c1:ae:8f:2b:8e:13:51:1e:a8:d0:94:e6:73:0b:
0f:2a:25:0f:2d:fa:b7:89:91:7e:25:df:8e:38:5e:
ea:b6:3c:b1:9e:20:72:82:b2:d7:f6:5e:99:85:2e:
06:9f:4b:59:97:23:77:c2:11:8e:d6:0f:4a:e5:18:
4f:cf:83:ad:3d:ce:a9:e0:bb:18:26:3f:da:db:cc:
f0:52:83:42:1c:46:a8:25:11:55:9b:f0:70:af:a3:
fd:32:59:8d:26:6b:07:bd:43:90:6f:64:cd:d4:08:
1a:d4:0d:a5:8d:48:79:ef:9d:17:a3:c2:af:e3:53:
03:3d:7b:4f:fc:f5:1d:e6:47:87:31:1c:ed:49:4a:
ac:6d:92:32:64:fe:e9:97:d9:6b:41:b7:87:47:d5:
b4:24:20:83:5c:3d:48:aa:bb:b8:55:0a:28:cb:82:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:04:99:FF:EB:EA:8B:0A:94:D5:1B:C2:E3:10:6E:D9:C5:4A:62
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0e:5d:04:5f:c5:11:f1:9b:59:7f:a2:f6:8e:29:ac:94:3a:
5b:3b:e1:00:93:31:b5:16:83:78:bc:f5:03:e7:b4:ba:58:db:
bd:6a:24:83:0d:21:29:64:98:f7:d7:c3:28:ca:8b:db:d7:93:
df:b8:76:79:96:f3:f5:2a:54:24:44:2c:b2:5f:25:af:3e:dd:
75:8f:77:4e:94:22:ae:46:9b:20:30:5d:cc:e0:c3:65:a2:20:
1e:d6:43:33:7c:58:c9:42:37:50:d9:c0:28:f4:e1:ed:fe:ee:
94:a3:6b:e7:73:83:ca:37:8c:31:40:7d:8c:68:a3:4c:e0:2d:
4e:41:29:21:ba:fd:5e:26:3e:29:cb:e7:c6:2a:f4:3d:5d:be:
fc:39:3d:af:3d:07:3b:8d:30:18:b5:8b:ac:79:b0:5f:d3:63:
ad:1f:5d:db:1d:0b:08:a8:94:e3:ec:b5:52:3c:7f:65:f7:7a:
8a:dc:8c:05:6f:2d:cc:c2:8a:e8:d9:03:12:65:30:a3:2e:3f:
99:af:97:6f:a4:a7:1f:5a:5f:b7:ea:80:80:2c:5a:b9:1a:d5:
d0:b7:95:a3:63:72:6c:c5:6e:5a:b4:44:30:d3:60:46:4a:1d:
24:7b:18:45:0c:9c:6d:b0:da:89:ed:4e:a5:55:1c:68:24:7c:
53:71:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:01:03 2025 by rpki-client