Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: RSGOGWGQyv5IWmF+lGuiPptMBUJypH/0Fqk1zGVXOcE=
Subject key identifier: 6B:F7:DD:E6:ED:69:F1:5F:74:EA:37:31:F6:A8:62:7A:B9:45:25:76
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 0196BE25749E2AACC55199C7FA6F76A5F7AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 07:00:47 +0000
Manifest this update: Sun 11 May 2025 07:00:47 +0000
Manifest next update: Mon 12 May 2025 07:00:47 +0000
Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: svqtbMgUOe91K/pXAiwlff9CS+Aqzjto6VfVgFUjWdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:74:9e:2a:ac:c5:51:99:c7:fa:6f:76:a5:f7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: May 11 07:00:47 2025 GMT
Not After : May 12 07:00:47 2025 GMT
Subject: CN=6bf7dde6ed69f15f74ea3731f6a8627ab9452576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:6d:ed:c9:0f:dd:3c:3e:8c:f5:a8:dc:66:
29:76:d3:4d:56:2b:51:05:14:bf:70:19:0d:a0:ac:
4c:b8:d8:52:ec:87:06:e1:74:17:f1:af:e5:47:f4:
5a:b4:66:bb:79:7c:95:93:7d:bf:c8:4b:14:97:9d:
21:a0:52:de:48:8a:a1:9f:73:a1:5a:9d:ca:fe:8b:
5b:95:89:15:94:2b:50:9b:16:d2:3c:9a:70:c2:97:
0a:1d:a7:0a:34:08:a5:08:62:69:93:83:5a:24:7b:
8e:db:a8:86:55:29:53:d2:52:2e:ff:d9:fc:57:08:
79:37:2c:b3:c0:aa:ed:ab:26:16:30:bd:e2:d8:c0:
77:49:f7:8f:e1:61:a0:45:f3:af:64:03:b8:46:49:
5c:fb:81:3f:34:9b:c6:48:22:5d:be:02:9c:a5:1d:
16:15:f4:57:95:7b:a4:f7:92:80:4c:46:26:87:2c:
ff:7d:0a:69:79:6d:e8:9d:a0:34:f4:78:38:9d:e3:
b7:11:9d:4f:33:40:10:40:3f:fa:38:60:87:5b:75:
9c:4b:fe:f7:22:60:91:83:b4:f8:c6:7a:b1:19:36:
2c:0d:dd:5d:8f:9f:0c:3f:9b:2b:32:56:8f:25:c5:
bf:29:f2:46:8b:18:cb:54:63:a9:d3:38:d8:bf:84:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:DD:E6:ED:69:F1:5F:74:EA:37:31:F6:A8:62:7A:B9:45:25:76
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:cf:a4:d4:a1:4e:f4:cb:b4:1d:fe:f5:3e:8a:7f:7d:a8:
92:72:61:09:b2:e2:08:1a:21:c8:f1:47:6e:d7:67:81:aa:bf:
80:65:f9:8a:03:cf:e4:c3:43:e0:96:eb:99:e9:4b:79:8d:e3:
88:b7:fe:fe:16:d3:fd:7a:2c:fd:6f:4d:ec:17:1e:ab:b2:8e:
87:57:e6:7e:5c:81:5e:4d:84:e8:ef:42:52:11:e2:ef:2a:7b:
73:11:2a:3b:e3:a1:e4:da:21:1d:ff:e0:18:e2:5f:ec:41:6f:
1a:aa:c4:72:a2:cc:1b:88:a6:72:53:62:f0:e8:1f:c0:33:b3:
0f:3f:fa:d0:81:9e:b2:9c:b8:9c:89:c9:ab:58:c1:a3:d1:e1:
e5:7f:d4:83:b8:9a:19:a3:32:28:90:88:2e:7b:96:06:53:03:
4d:1c:e6:68:1b:b5:d2:ce:f5:68:d7:92:9b:fa:a7:65:2a:37:
2e:0a:d1:3e:0f:4f:37:b8:2f:21:27:7d:d9:da:a2:52:83:d5:
e0:6a:44:fe:41:24:f5:1e:7b:e8:7b:25:ba:93:67:29:1d:ec:
9a:c8:99:41:db:14:e4:76:64:a5:e0:3a:47:b1:33:56:71:86:
95:4d:c4:f0:11:dd:45:35:42:94:b7:ea:91:23:09:08:48:cd:
d1:f7:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:09 2025 by rpki-client