Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File: B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier: Iso8Xnty321jJSwWYSVpOuhBz2bWK64A8OsONWh3c5U=
Subject key identifier: 17:4F:20:9F:43:99:0A:AA:95:AD:CB:D2:64:56:CA:E7:FE:C1:37:B4
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial: 0196B40F70555C20FF9DCE3FACD5868A76D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number: 091C
Signing time: Fri 09 May 2025 08:00:32 +0000
Manifest this update: Fri 09 May 2025 08:00:32 +0000
Manifest next update: Sat 10 May 2025 08:00:32 +0000
Files and hashes: 1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: FjDdgpd5tCskAYabGy+lY4pCmM5oNayD+VkAAAkLcMk=)
2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:70:55:5c:20:ff:9d:ce:3f:ac:d5:86:8a:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Validity
Not Before: May 9 08:00:32 2025 GMT
Not After : May 10 08:00:32 2025 GMT
Subject: CN=174f209f43990aaa95adcbd26456cae7fec137b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:f8:a5:77:b7:9e:8d:6d:24:9a:b5:63:ac:
7d:0e:a4:94:92:fc:77:13:2d:ed:56:fd:94:14:88:
69:00:db:49:75:b0:28:e2:84:d0:23:69:2d:66:ea:
a9:e9:f6:55:dd:45:f2:53:24:34:74:ef:6b:8e:70:
4f:b2:82:38:75:29:ee:c5:16:04:17:cf:ca:44:9d:
bc:4f:a2:20:c7:4d:99:c4:63:70:1f:b0:51:73:e4:
4e:8a:3f:ec:34:63:01:ba:b3:76:9a:00:0a:fd:6f:
27:c1:c6:32:5d:ac:95:a8:35:c7:56:0a:63:e7:a0:
56:e9:46:52:7c:3e:75:4d:ae:12:11:f9:81:0d:12:
66:34:45:c1:52:a6:18:9e:b1:49:b4:e1:b0:33:21:
5e:ce:46:76:1e:be:82:1a:ea:24:62:94:51:a6:54:
71:3f:64:7f:fa:d4:93:43:9d:25:1a:a0:0a:c5:b0:
e5:b5:76:ae:c8:8f:db:a6:3d:cc:9f:ce:af:47:f2:
1e:96:92:57:0a:bc:d9:14:0c:eb:d3:af:a1:c6:8f:
fa:a0:a0:40:d6:8f:22:a6:a7:66:bd:0d:9b:ba:74:
da:3a:f7:50:34:03:a4:c2:44:b7:9e:7e:cd:05:68:
56:64:47:1a:e8:45:cb:ac:9c:90:43:7c:bf:b8:29:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:20:9F:43:99:0A:AA:95:AD:CB:D2:64:56:CA:E7:FE:C1:37:B4
X509v3 Authority Key Identifier:
keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:05:e8:6a:02:c9:77:45:53:39:8f:31:05:b8:2f:b7:22:
7b:73:96:fe:1b:22:d1:e3:41:db:13:91:e1:e3:e6:36:ff:f7:
9f:f2:4c:21:6c:ba:1c:4f:0c:de:da:d3:dc:11:58:46:09:6c:
28:40:4e:d3:19:90:69:42:bb:7f:b2:4b:21:1e:ff:be:d4:0f:
bf:28:79:e5:66:f5:8d:5f:85:f9:e9:c6:4f:d4:fb:28:7b:d0:
93:32:ae:9c:f2:d7:e1:24:aa:cb:a9:7a:19:25:b0:15:c1:97:
c1:6c:4f:81:a7:67:4f:00:a9:f6:20:aa:ed:0a:0a:f8:f2:43:
62:02:51:a8:2c:2e:69:ab:b4:2e:21:f4:8a:c8:86:41:f6:e0:
ae:82:5f:a6:5b:f5:cc:d2:fb:47:64:6f:13:16:a9:6e:a7:a0:
32:99:89:ad:96:d0:fa:81:06:76:f9:79:30:54:56:64:d3:db:
79:49:c5:da:9e:b9:bc:c7:04:c0:59:bb:76:0b:cc:d0:37:21:
e4:4f:09:e5:fe:3a:da:af:85:a0:39:09:8c:82:3a:31:47:f4:
76:45:6d:f3:d5:f7:79:9a:69:66:60:bd:60:9e:cf:9d:c8:ca:
3b:c5:96:e9:5b:4e:c9:71:a5:36:21:33:47:e3:e9:7a:3b:65:
08:c3:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:08:11 2025 by rpki-client