Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File: B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier: 2a2BX1VGPUz8uF6mIIEIG3z9OiriaPN+yaKRtDOfAc8=
Subject key identifier: 83:28:11:04:1E:DB:59:1F:05:49:88:64:81:66:9F:40:D9:65:BF:8B
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 0196D39A75835F1E4B007E0CD2DC453D4204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number: 0CC9
Signing time: Thu 15 May 2025 11:00:37 +0000
Manifest this update: Thu 15 May 2025 11:00:37 +0000
Manifest next update: Fri 16 May 2025 11:00:37 +0000
Files and hashes: 1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: 5QmaGQOKD3ey4kJ3wHAmgZRwWeyAzsUpfbQLRqDMRHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9a:75:83:5f:1e:4b:00:7e:0c:d2:dc:45:3d:42:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: May 15 11:00:37 2025 GMT
Not After : May 16 11:00:37 2025 GMT
Subject: CN=832811041edb591f0549886481669f40d965bf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:d3:ac:50:a4:27:3c:4c:40:6e:c9:9f:cb:
be:69:c0:90:b4:6e:72:b1:9e:d5:41:f1:0a:a1:1d:
08:1b:94:2c:f6:17:8a:9d:0f:dd:dc:30:cc:54:a6:
92:92:77:a8:b8:dd:91:48:b2:00:1b:72:10:9f:5f:
5f:a9:cf:2e:2f:a9:98:4e:f7:f6:8c:89:59:97:d3:
53:2d:d7:91:a1:af:ab:69:69:8e:8e:4a:c4:c1:7f:
95:0c:05:e1:71:ec:05:9c:fd:41:91:31:f8:49:84:
91:8b:cb:e6:21:f5:26:b9:0e:ae:2c:c8:3e:8c:91:
6b:a8:4e:99:77:fd:80:0d:22:7e:d7:d6:bc:51:89:
55:03:90:c6:e8:74:8b:2e:00:a0:a9:ab:90:98:38:
d0:cf:54:32:8e:16:e8:b7:1f:60:68:ab:5a:3a:ff:
61:51:30:bd:47:65:66:fa:6c:1a:00:12:28:aa:81:
58:00:97:80:2e:88:6f:b0:81:51:31:5c:06:db:a7:
37:d5:f0:f5:2c:5f:fb:49:63:0f:0f:7d:ed:78:68:
14:ce:de:6d:ea:32:54:d0:1c:27:77:f9:45:a2:ea:
3f:bd:19:a6:88:84:00:4e:41:7c:f2:de:72:d1:bb:
22:de:f6:9b:23:f5:87:4b:0f:e9:e9:f4:9c:09:a0:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:28:11:04:1E:DB:59:1F:05:49:88:64:81:66:9F:40:D9:65:BF:8B
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:f0:ea:70:a3:f5:84:0f:17:58:5f:e7:73:1b:a2:60:e1:
7a:5c:50:d7:57:09:2f:a5:7b:be:33:04:e3:f1:c7:60:71:a1:
09:ba:98:1c:35:47:56:3f:6a:b1:df:e4:c8:1e:b8:0e:2f:16:
17:53:39:f9:ea:94:6d:8e:06:06:30:45:ba:d9:f5:2e:78:ac:
99:0e:36:28:0e:5d:90:e9:49:ae:f9:be:19:9e:40:ce:23:19:
d3:c0:0e:82:e2:e5:3d:b7:82:39:e8:1b:82:c0:2f:7b:6e:6f:
25:4c:63:20:a6:14:a2:b1:f3:a4:86:d2:6a:00:cb:e6:48:43:
65:d8:1f:86:03:5b:71:3d:c1:1a:73:a8:3e:92:48:33:3d:ea:
80:3f:5b:79:77:10:ba:11:3c:1a:02:d4:03:a6:29:68:5b:6a:
e3:b4:f7:5a:05:d6:9d:3f:d0:3f:8a:99:1c:7c:95:bf:1e:4a:
ee:38:f7:f7:f7:1d:c5:b9:1a:02:fc:e6:62:bd:39:d0:03:2c:
3a:54:27:7a:fe:a6:b9:e0:fb:5d:1b:55:8e:3b:0d:7b:84:88:
9f:0e:b3:48:52:cf:ed:64:1a:43:dc:ff:da:07:37:96:c7:b6:
e9:9d:a1:54:12:ab:ad:4c:62:39:28:f3:04:07:46:b3:d7:ed:
98:6e:d8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:16:10 2025 by rpki-client