Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: CRk+pfQyyfdha5AX+I2KK8JO5RniEm4f9e3f53fAl6Q=
Subject key identifier: DB:BC:79:2A:EA:99:50:B0:61:E2:DA:D6:00:20:21:DA:9C:F0:25:EE
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 0196B634F24C3A951F7D824F97534858244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 0561
Signing time: Fri 09 May 2025 18:00:45 +0000
Manifest this update: Fri 09 May 2025 18:00:45 +0000
Manifest next update: Sat 10 May 2025 18:00:45 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: gaPku4A5fIyjS+UyJMP3kGEwsqgvnUZfd6kMz5XXf20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:34:f2:4c:3a:95:1f:7d:82:4f:97:53:48:58:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: May 9 18:00:45 2025 GMT
Not After : May 10 18:00:45 2025 GMT
Subject: CN=dbbc792aea9950b061e2dad6002021da9cf025ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:db:a6:fc:c3:4a:26:1f:8b:2c:99:3b:17:
eb:3d:b1:1d:a4:9e:a9:85:e1:19:48:eb:37:1f:12:
27:8b:e0:3b:38:b7:d7:81:72:0f:69:d5:96:17:78:
66:cb:3b:b2:38:fe:59:8e:de:d5:93:aa:a0:2d:9c:
27:04:50:22:07:b0:d6:16:27:75:13:6b:e1:90:98:
e0:30:ba:30:7e:66:93:25:74:71:5d:df:17:6f:1a:
59:5f:3a:1d:6f:34:c3:dc:2e:b1:7d:66:b3:ae:51:
cf:c5:2d:f5:38:33:3b:14:76:2f:d3:e0:bb:a1:53:
c8:9a:2e:26:06:82:3d:f6:df:cc:a7:37:91:fb:f3:
b4:0f:ab:fd:15:fa:9a:39:2e:18:35:23:e5:db:18:
7f:06:27:a9:3c:0f:7b:fb:3d:d6:4f:d1:c9:f3:60:
f9:92:74:da:20:87:a1:ee:5f:e6:70:27:71:94:5e:
7a:25:a7:ff:d9:60:d8:04:b7:aa:6d:fa:f1:b3:89:
7e:ae:88:db:35:c4:3e:2a:8d:c1:6b:79:7d:d9:d7:
fe:b9:67:0c:a3:54:af:77:4e:8b:f3:c1:d6:30:6f:
63:bb:b9:87:4a:0c:cf:e3:84:9e:58:b1:d6:69:3e:
60:81:fa:6e:60:12:81:34:7b:a6:ad:ae:11:a1:3b:
95:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:79:2A:EA:99:50:B0:61:E2:DA:D6:00:20:21:DA:9C:F0:25:EE
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:28:50:cc:09:3c:31:25:73:98:13:d1:8b:b4:f9:e0:ad:0a:
a1:10:ce:56:68:44:4a:1c:37:e6:37:95:92:42:cb:f6:5f:b8:
28:20:22:b9:c8:71:ee:42:97:90:75:66:42:57:cf:3f:f9:8e:
a0:45:0e:ea:4a:a6:a4:13:19:23:01:5d:14:5e:ea:0f:a2:c0:
ac:48:de:08:5b:f0:52:94:20:bb:cd:77:42:e9:a7:72:08:b9:
50:02:f5:f6:99:38:ba:f9:55:d3:c0:73:4b:38:7d:32:82:77:
73:c1:17:68:ea:45:2f:6b:a1:bb:b8:48:d1:36:0b:ff:e5:91:
f3:09:84:40:d4:1c:77:b9:d5:4c:ea:2f:f6:14:a2:bb:cf:dd:
07:18:06:f0:15:3f:ae:25:94:4d:92:96:8c:db:99:2c:d3:28:
66:c8:eb:0e:a8:8e:bf:db:e8:f8:e2:08:09:8b:fc:67:02:d2:
cb:7e:d3:d8:17:57:91:06:cf:df:74:4d:4a:2d:78:d6:81:26:
d1:19:51:5a:df:b6:e5:2c:70:a2:d6:98:14:23:0f:bc:ee:07:
04:f4:51:da:95:78:33:72:51:58:47:14:ad:7f:80:d0:ab:95:
34:e0:38:c0:5e:f3:64:5f:62:66:8c:0d:77:f7:af:f1:8b:4d:
01:d3:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:37:44 2025 by rpki-client