Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: 6Psxup1vfANavnATQxX+t+O6sALybK5O2sC7y4LL9iY=
Subject key identifier: 8D:4F:68:03:60:6C:26:CF:E5:74:06:6A:0E:1C:5F:B0:57:26:33:CB
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 0196BF00D4B686CB0F5FDB429D418B21B434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 11:00:24 +0000
Manifest this update: Sun 11 May 2025 11:00:24 +0000
Manifest next update: Mon 12 May 2025 11:00:24 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: CV56h9/iWbDejwTs3+jxvabQ/BxEuisluLE/MjnuFsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:d4:b6:86:cb:0f:5f:db:42:9d:41:8b:21:b4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: May 11 11:00:24 2025 GMT
Not After : May 12 11:00:24 2025 GMT
Subject: CN=8d4f6803606c26cfe574066a0e1c5fb0572633cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:09:9f:1a:f8:e2:0b:74:5a:16:98:4e:2c:
47:0d:cd:03:a1:f6:40:6b:40:25:6d:0c:3f:fb:c2:
3f:3d:a6:75:92:ef:08:61:9e:bf:8e:43:3c:e5:2f:
a7:bd:ad:b6:18:b7:69:6f:61:8f:66:4e:29:96:c5:
97:7f:f3:e5:1e:38:5d:91:f0:f9:62:52:ad:b4:ef:
10:63:4a:1f:bd:fe:b2:9e:75:eb:7a:89:0a:06:e3:
6c:1b:6a:0c:d8:73:c9:a7:b5:8b:05:dc:eb:3a:00:
72:96:2e:e7:61:f8:fc:f6:c2:ea:d2:db:b5:9e:6d:
3a:9d:b3:00:31:50:72:58:06:c6:1d:a9:42:ba:28:
45:e6:01:cd:8e:ef:d2:26:79:1e:c5:e8:ac:5c:c5:
98:b2:d7:a1:22:21:21:e8:ed:e9:be:24:02:76:58:
c9:d4:a1:58:2c:99:61:d3:d9:5e:5b:be:ac:c7:21:
fa:c9:54:07:50:3f:a4:ce:89:bd:64:a2:20:05:cc:
97:26:eb:77:a2:e8:86:cf:98:3c:12:94:35:1e:d1:
99:ce:19:7d:4a:9c:e0:2b:61:f0:8f:84:cb:61:36:
08:7a:06:21:16:c6:cc:98:aa:31:4b:02:db:5c:de:
f0:14:59:6e:9b:93:6d:ca:39:4b:51:aa:1a:d1:e9:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:68:03:60:6C:26:CF:E5:74:06:6A:0E:1C:5F:B0:57:26:33:CB
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:32:03:37:f5:c9:e0:bd:de:4c:e4:08:c5:81:ae:fa:59:c2:
7d:6d:fc:be:ad:83:9d:f3:f7:38:92:46:92:28:23:03:78:cf:
ad:20:ab:e0:d0:da:f2:98:cd:88:8d:ed:62:fb:b1:68:f6:d3:
2b:f8:0a:59:c6:19:c3:4c:95:eb:ae:d9:54:83:bf:ce:41:53:
b2:01:39:34:9c:c0:2f:55:fe:81:c5:74:4b:16:68:2f:c7:4e:
34:ca:79:09:4c:11:2a:5a:51:88:07:b2:56:9f:e7:70:f1:8e:
54:a1:ba:98:4e:09:5c:18:43:60:3e:43:6b:75:ed:b9:c7:b5:
3b:0d:25:51:1e:07:40:0f:0c:24:f5:27:ef:34:84:6b:05:6c:
97:14:9c:e0:96:86:13:c6:b0:6b:7b:10:da:e0:71:46:3d:54:
e5:5c:2e:88:07:70:79:12:25:e0:1b:f7:3a:34:8e:46:32:6e:
2a:89:18:15:0c:39:6e:53:ee:1a:1a:4c:d5:09:1f:6b:25:29:
a8:06:6e:cc:69:0b:7c:15:36:e9:d6:7f:30:8d:18:0c:9c:50:
9c:57:c0:f6:80:95:23:68:4e:68:a3:c6:5d:dc:27:96:c4:78:
ba:ca:25:9f:2d:42:d8:3b:39:f2:f7:52:a5:6a:7b:88:49:aa:
c0:96:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:42:19 2025 by rpki-client