Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: BdNzPnJFYaM1ryvnuSMMIXG6FhzTb30A0AP97pSI/0w=
Subject key identifier: FD:00:CF:16:4B:C1:86:2A:05:90:6F:01:B6:D7:3F:10:45:69:38:6F
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01969ED13172C30B5445A35B9DD776DF2322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 05:00:31 +0000
Manifest this update: Mon 05 May 2025 05:00:31 +0000
Manifest next update: Tue 06 May 2025 05:00:31 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: XDhV7Qtb2uPIXa41rXYKLH0KenYcUjkQmsof1YLUdp8=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:31:72:c3:0b:54:45:a3:5b:9d:d7:76:df:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: May 5 05:00:31 2025 GMT
Not After : May 6 05:00:31 2025 GMT
Subject: CN=fd00cf164bc1862a05906f01b6d73f104569386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:7c:06:3c:c8:90:55:d1:29:3e:d6:a9:ac:
a5:3f:8a:6f:c1:03:91:35:97:28:38:09:c8:d6:23:
c8:14:5f:4f:f2:f1:f2:bc:73:bb:be:0c:46:48:cb:
b9:91:f3:8e:cb:b7:1c:f3:b5:36:52:05:88:6f:cc:
4c:d2:d0:35:a8:4f:54:7d:83:cf:59:41:61:e0:4e:
f4:a2:c7:46:a7:d7:c9:22:f3:38:93:4d:52:8d:a7:
32:8f:2f:ff:c6:dc:fc:4e:00:4f:9a:9f:6f:2b:59:
bf:cd:2a:25:4c:af:c8:ed:e0:ae:67:fb:a8:15:cd:
22:d8:41:73:e0:fb:5f:6d:3a:0c:50:f8:46:b0:7d:
5b:59:4a:0c:cc:2d:3a:cd:0d:31:3a:c9:b7:f8:83:
38:b6:99:85:1f:40:46:bd:d0:1a:0d:36:87:b2:58:
95:9d:26:f9:02:7c:3e:16:56:ea:be:6b:ed:84:04:
7f:58:06:71:19:39:d2:da:50:8a:8d:19:ff:46:ae:
2f:99:2f:c0:f7:4f:08:77:73:06:50:3e:df:4c:fd:
b1:02:f1:bb:4a:a1:3e:34:fe:0b:49:3a:76:4d:c4:
91:16:23:be:f5:30:ea:57:78:d0:7a:a9:2c:a3:c6:
cb:b6:b6:97:60:87:b8:2f:f8:44:65:58:1f:0d:a3:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:00:CF:16:4B:C1:86:2A:05:90:6F:01:B6:D7:3F:10:45:69:38:6F
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:df:c3:e8:00:58:b3:9c:84:99:4e:15:9c:f9:ca:58:bf:82:
70:c7:7d:f3:b5:50:33:2c:78:bd:dd:e8:1f:80:c2:2f:12:17:
5e:1d:24:93:ac:a9:dd:29:a4:63:3d:55:f9:f4:42:19:8b:a7:
e0:76:2b:06:4a:a8:b1:0c:d2:21:9b:6e:5d:fd:f2:14:b8:47:
46:61:35:85:95:6e:fa:89:54:3f:25:3d:8b:e4:98:d6:b7:3d:
29:72:6b:be:38:bc:ce:f9:79:7e:b1:07:32:d4:79:e9:fe:db:
06:94:69:56:59:45:65:54:6c:b7:27:14:47:df:f3:57:52:c7:
a2:1d:c0:ae:e4:86:9b:dd:a7:10:e2:0f:b8:26:16:8d:3d:63:
0b:a0:c2:84:c2:ff:22:6d:c9:af:22:75:66:72:c8:47:9a:f6:
79:03:5b:64:a8:63:1e:fa:62:c9:61:6a:a1:80:b4:bc:43:6e:
1c:24:4a:e0:e0:2c:fd:86:64:b4:1f:8d:eb:73:70:d2:f7:c3:
23:ae:7b:14:72:b8:49:cb:e4:0b:97:2a:59:cc:6a:ca:68:4b:
23:96:87:83:4f:4e:fe:fd:52:8a:30:e4:72:32:33:09:f7:99:
ec:c4:c3:34:72:91:d7:28:3e:20:16:46:32:27:b6:b1:80:3d:
5f:ac:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:45:09 2025 by rpki-client