Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
File: a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft (raw, json)
Hash identifier: wHxBQg4ZHMnzpW7tX1USzoPbK2WYwOLBb2B8L9MZgPA=
Subject key identifier: 12:9E:33:32:60:8B:EB:2C:AA:D0:E4:48:C0:29:C9:EC:34:08:27:EB
Authority key identifier: 6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
Certificate issuer: /CN=6b60412823a0224a5d00e4963d6b23d22504997d
Certificate serial: 01969F07D5CE8CEEA1AF83048CD11750AC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
Manifest number: 0FFF
Signing time: Mon 05 May 2025 06:00:12 +0000
Manifest this update: Mon 05 May 2025 06:00:12 +0000
Manifest next update: Tue 06 May 2025 06:00:12 +0000
Files and hashes: 1: a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl (hash: vnDtlqjgptPZFt3du6/iKczzlGdRUa7eP11tke3Wbbg=)
2: hnsA4cHOijPoNwlf0ddWoTOuP4M.roa (hash: VpkjEz6V4+QhZq7fIhlT9s7HZODrWhTnFk36Jz3+dtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:d5:ce:8c:ee:a1:af:83:04:8c:d1:17:50:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b60412823a0224a5d00e4963d6b23d22504997d
Validity
Not Before: May 5 06:00:12 2025 GMT
Not After : May 6 06:00:12 2025 GMT
Subject: CN=129e3332608beb2caad0e448c029c9ec340827eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d8:92:b8:45:10:d5:6e:e2:0f:c6:91:69:92:
d7:33:63:61:36:3c:f2:75:96:d4:f0:29:0b:2a:f7:
d7:9d:ac:a2:07:05:63:a0:4e:76:35:67:67:26:52:
63:d4:4f:e9:6d:3d:eb:4a:b7:7b:8e:50:c3:2b:49:
fb:51:18:39:fd:f3:01:fc:49:af:0c:4d:35:d6:fe:
d4:a9:ef:4a:c6:81:4a:56:08:66:97:9b:42:43:4f:
01:9d:31:a4:be:ef:e4:0f:e5:c9:dc:9e:ce:6a:bb:
cb:9b:d1:f8:83:35:a3:7a:61:bb:0b:48:1d:bc:6e:
cd:1c:87:80:28:0f:e5:b5:18:f3:2d:af:51:be:0c:
a8:c4:9e:2b:73:59:1c:17:0f:46:5b:52:fe:23:e8:
d6:59:d5:8f:2c:c8:ce:6b:9d:b9:e7:8f:c5:2d:0f:
d0:22:56:e8:00:04:62:b5:e1:1f:c0:ef:c9:1e:0c:
f0:aa:6c:d8:b8:01:df:aa:34:59:b5:5d:99:96:f1:
4e:c8:25:1d:54:c8:02:07:96:b3:f7:42:dd:db:09:
80:56:71:0c:0b:22:92:73:56:21:1e:8b:8b:ca:65:
5a:6f:b7:76:51:0f:63:d3:15:d4:0e:de:46:4c:c0:
a0:44:ec:a7:83:c9:02:39:f1:83:6f:5f:e4:f6:d6:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:33:32:60:8B:EB:2C:AA:D0:E4:48:C0:29:C9:EC:34:08:27:EB
X509v3 Authority Key Identifier:
keyid:6B:60:41:28:23:A0:22:4A:5D:00:E4:96:3D:6B:23:D2:25:04:99:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2BBKCOgIkpdAOSWPWsj0iUEmX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/275a74-b3ef-44cf-8220-6a3342b95af1/1/a2BBKCOgIkpdAOSWPWsj0iUEmX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ec:26:3f:cb:11:6c:c3:9b:c7:27:f3:c2:a8:47:8c:00:d5:
15:cb:de:99:4f:06:43:52:b8:96:e2:7f:35:70:39:cf:33:66:
64:d6:fe:29:8f:06:92:2c:2f:b3:3c:1c:4c:41:9d:47:e0:2d:
82:3d:9a:d1:c7:b0:bd:71:97:3e:7b:45:a3:39:12:1f:9f:63:
0c:e7:8a:7d:3f:e1:7c:8f:d2:e9:71:8a:4c:6e:43:b4:c9:15:
f1:90:58:57:94:9f:bd:fb:b7:5b:86:c5:f8:6b:92:0f:eb:5a:
e5:0a:07:4e:85:5f:b3:3d:85:9d:80:cf:3c:48:76:b4:e7:f1:
e8:e4:d2:76:20:e3:74:b5:da:d7:ea:1b:7d:fc:73:be:5f:30:
94:64:04:a6:ed:29:37:ea:76:6c:8f:f0:a7:78:9f:3e:0c:33:
20:4e:38:26:c6:90:b2:06:bf:0d:d9:34:f0:f8:17:0f:25:55:
4f:15:c7:79:97:fb:ec:89:f2:00:b0:ce:0b:5e:f0:de:81:02:
3e:88:f6:40:7e:67:ea:dd:a2:54:90:92:f5:6b:fe:ae:06:78:
77:3d:60:a1:0d:cd:94:1d:93:e0:ee:b9:78:fe:15:a9:4e:91:
c1:5e:f8:4f:dd:8f:d2:ad:a5:5b:43:b9:a3:59:bf:34:77:6e:
98:eb:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:59:46 2025 by rpki-client