Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: 4Cm6suUh8d3XApAJdx64gKnVV13zvK/GtV4bFV/Thp8=
Subject key identifier: 97:67:79:76:22:7A:2B:B4:47:73:61:6F:FC:1D:15:03:F8:9D:74:E2
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 0196C081233A80DED950A6C4259D1754FE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 18:00:10 +0000
Manifest this update: Sun 11 May 2025 18:00:10 +0000
Manifest next update: Mon 12 May 2025 18:00:10 +0000
Files and hashes: 1: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (hash: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=)
2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: Tbx5ZyLI1S/QMACS+T+DTA4hg9ZoBq6MHs0i5BmLRiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:23:3a:80:de:d9:50:a6:c4:25:9d:17:54:fe:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: May 11 18:00:10 2025 GMT
Not After : May 12 18:00:10 2025 GMT
Subject: CN=97677976227a2bb44773616ffc1d1503f89d74e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:8a:00:b6:94:e3:d4:a3:1c:11:1c:73:48:
9d:30:16:91:c5:3d:1e:18:38:38:0d:3c:7b:b7:63:
f7:41:70:49:ed:71:6b:de:e2:a8:59:f8:d2:96:90:
ba:82:9f:97:38:bf:8f:cd:15:63:40:8f:45:0e:f8:
a4:3c:fe:f5:42:f6:46:e8:39:1c:7f:f3:ff:c7:eb:
52:74:e5:6a:7e:78:a5:ed:7c:a1:b2:54:31:ec:2b:
7d:f2:e2:ef:45:16:53:c5:f8:33:a6:f4:35:f4:46:
98:ac:f1:02:09:08:98:df:79:4d:fa:02:fe:ca:1e:
57:ae:e8:58:db:68:1c:c3:3c:7e:a9:4a:d0:bd:2e:
6f:af:a7:b4:ee:75:22:03:e2:ce:27:7e:0c:d9:9c:
35:04:aa:47:06:5a:bb:97:dc:11:d0:1c:5b:b9:1b:
e2:b4:57:0a:cc:f6:b0:4b:ac:bd:d7:24:ee:51:fe:
75:3c:82:98:69:95:0c:bf:48:4a:0a:24:4a:da:70:
58:44:ae:7b:d4:9c:0b:27:9b:c6:0a:25:f9:6d:94:
d1:b5:f4:04:c9:e6:5f:ed:10:60:8a:87:6f:53:55:
09:57:8f:04:9a:bb:2c:b3:ad:5b:31:b3:8a:c5:af:
57:63:0f:d3:d5:52:67:e9:43:7e:5f:90:0f:a4:2c:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:79:76:22:7A:2B:B4:47:73:61:6F:FC:1D:15:03:F8:9D:74:E2
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:02:5c:2b:01:1c:8c:1b:f3:9d:ce:f3:45:ce:11:90:a5:33:
20:a0:12:a7:06:39:78:58:5d:64:44:d0:a3:06:80:ba:01:b0:
d5:b8:3a:20:2c:a6:60:48:61:9a:0f:66:a6:a9:40:c0:99:4f:
c6:ba:18:9f:b4:f9:8a:a0:ea:5e:fa:14:f5:6b:10:45:42:4c:
ac:9b:95:ab:99:00:62:35:f7:49:e5:60:d7:cf:b3:d3:bc:c6:
ef:d8:c8:8a:0d:27:7c:e3:b3:ad:97:d7:9f:c8:69:30:98:5a:
7e:f5:34:21:ba:2f:6a:49:ee:6e:e6:3c:a6:40:85:d7:51:e6:
37:4f:11:b0:78:e5:52:87:d4:49:6f:7b:b6:95:66:01:53:f2:
56:3c:fc:0d:fc:b5:88:25:c2:ce:16:c3:15:24:ce:f6:df:34:
51:3d:73:0c:c4:04:c2:7d:e6:9f:88:ea:f6:fc:ab:0f:e5:55:
07:df:f5:57:ca:e5:c6:8a:67:98:de:4d:25:89:5e:79:12:a2:
eb:a1:14:72:11:28:d0:27:69:25:b8:48:f5:dd:21:e3:59:51:
2a:e0:38:44:ae:ad:54:2d:25:d7:23:05:7c:6f:f7:ce:62:9c:
e0:6f:de:11:b8:ca:8c:cc:83:a5:21:be:44:7b:47:ae:69:bf:
0f:2e:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:06:10 2025 by rpki-client