Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: HxOF0yxQbOioDwW2bIurb7P5/GqeUZUx0I6xdiFzYSk=
Subject key identifier: 83:4A:3D:A0:84:84:CA:AE:EF:B7:41:34:90:13:1F:8A:74:8F:4B:80
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 0196C0B8698E0417C4C67C43C09FAE761A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 19:00:33 +0000
Manifest this update: Sun 11 May 2025 19:00:33 +0000
Manifest next update: Mon 12 May 2025 19:00:33 +0000
Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: +9tgqH4aVMGqLCvNdD9jXkpCiYlt9INLqgPsuSCN7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:69:8e:04:17:c4:c6:7c:43:c0:9f:ae:76:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: May 11 19:00:33 2025 GMT
Not After : May 12 19:00:33 2025 GMT
Subject: CN=834a3da08484caaeefb7413490131f8a748f4b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:c1:61:2c:23:97:9b:95:1f:61:a4:6f:6c:
d6:5d:f2:60:b5:55:b9:83:09:2c:2e:52:e4:53:93:
04:d4:db:f0:b1:2c:99:7e:b5:fb:c6:cb:71:80:e7:
ac:db:07:eb:d7:06:97:52:71:80:38:29:08:d5:49:
f3:20:c0:18:1f:9a:07:ed:55:d0:72:13:3a:91:6c:
14:26:93:e2:87:be:5d:d1:45:91:ca:d7:02:31:73:
bb:4c:3e:89:fd:5f:8f:a5:ae:08:18:07:f2:8f:cb:
a0:53:ec:7d:65:b6:7e:7e:73:87:79:7f:c2:0c:e0:
47:9c:1d:63:30:a8:67:a8:b7:23:16:cb:ce:eb:24:
ec:03:ca:e7:b8:d1:5c:f4:c6:20:da:a3:ac:8d:57:
dc:6c:27:29:ec:a4:3a:73:7c:a1:47:f2:75:67:c3:
94:5a:84:62:f5:36:95:5e:9e:65:5e:62:cc:b6:f9:
bc:16:8c:1e:8b:11:92:23:4b:ed:a9:ed:f3:e4:58:
57:c6:07:f8:89:ff:03:37:5e:4d:a6:c6:e6:55:46:
8f:16:be:a6:70:85:70:7c:c2:4f:61:1c:83:58:f7:
2e:03:7b:14:83:d2:bb:df:9c:e5:34:48:e0:ba:13:
84:83:59:c7:a8:39:a8:1f:bd:46:03:d3:c2:4c:5c:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:3D:A0:84:84:CA:AE:EF:B7:41:34:90:13:1F:8A:74:8F:4B:80
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:06:6c:b0:d3:ed:f6:6c:e2:65:8d:ee:f5:e5:05:a4:ec:
93:7d:a6:b8:c2:85:78:32:bd:bc:fb:ab:c1:c5:96:4d:ed:ed:
68:41:a9:61:9b:87:85:70:59:17:c3:7b:b3:eb:5e:26:b0:2c:
e6:5d:74:d2:76:1b:f1:21:58:55:e4:46:79:9d:cd:6f:62:bb:
f2:ac:4d:13:3e:cb:6c:a1:1f:9b:a3:0a:2e:13:6a:c9:47:7c:
85:e4:c3:f9:08:59:a2:ed:0f:63:3c:57:a5:49:19:32:d7:3c:
4e:6d:75:0a:98:16:35:41:d0:f3:47:15:07:b8:23:a8:be:1c:
44:b4:b4:42:dc:d2:75:3a:cc:1d:18:f6:5f:65:b1:91:63:0f:
ac:3d:c9:92:0e:cd:db:fc:04:a3:d3:ee:3b:c2:f2:ca:f6:f4:
c9:9a:bf:30:a0:4a:e9:d2:98:1b:c5:1a:dd:5f:8b:f0:1a:fc:
d5:94:67:6a:e6:80:89:bd:2a:de:96:39:27:ee:7f:80:0c:55:
a9:e7:ed:ae:b0:f0:b6:d1:18:d7:7a:23:cd:bc:c7:d7:09:60:
b6:88:46:b2:d4:0e:c1:9a:1f:d1:6f:19:0e:ad:86:13:8d:97:
05:03:9f:5b:bc:26:ef:f0:0b:bb:68:17:8d:3a:68:9c:94:74:
ce:2c:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:11:52 2025 by rpki-client