Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: wJ41jToyg43kCSnT7ChR9cgs8sbmEUXERoNGdCb97pE=
Subject key identifier: 6A:18:F8:67:C3:C7:3F:FF:E4:3A:61:ED:46:F0:30:84:F2:06:03:B3
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0196C12672DBA68D408994D161FA53A2FD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 21:00:44 +0000
Manifest this update: Sun 11 May 2025 21:00:44 +0000
Manifest next update: Mon 12 May 2025 21:00:44 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: y1aZTMQiUGx/Fy91cp0r03qXyAqtmPdgfyvOigJpEJ4=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:72:db:a6:8d:40:89:94:d1:61:fa:53:a2:fd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: May 11 21:00:44 2025 GMT
Not After : May 12 21:00:44 2025 GMT
Subject: CN=6a18f867c3c73fffe43a61ed46f03084f20603b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:da:05:90:f5:a7:05:b6:6d:85:3d:c3:8d:
f1:38:b0:3b:2b:e2:8d:3c:6f:99:fc:8a:5c:06:64:
93:46:42:85:01:2c:37:d6:45:cc:ad:65:09:88:e1:
b7:f3:14:56:34:cd:b3:d3:b5:da:b3:55:39:20:47:
b1:18:89:4e:13:f3:90:6d:63:f2:8c:d5:2a:dd:85:
04:f4:8d:91:06:36:79:4a:d0:ff:6c:8b:9c:51:54:
04:43:05:b6:93:62:17:19:bd:7d:c8:a3:a0:6a:0d:
5e:31:ac:1b:50:29:0e:e9:9b:9f:9f:23:92:bd:12:
5d:fa:71:92:f6:fc:cf:1e:4a:f3:10:df:3d:dd:1a:
4c:fd:0f:34:6a:19:71:5f:05:fc:74:db:cc:5c:8f:
65:36:c5:35:0c:55:b7:bb:19:4c:08:fa:93:d2:fe:
a4:00:7c:d1:5c:17:5d:4e:e4:e3:c6:13:79:01:a6:
b4:b9:e1:01:2c:f9:a6:8b:49:0d:b8:12:31:af:c8:
09:75:8a:de:14:3f:4f:7e:59:58:63:bb:ac:b3:47:
67:76:30:c0:43:0b:bf:32:c1:f7:e2:94:89:16:58:
30:66:eb:8c:95:01:0e:ed:c8:77:e2:da:62:f0:f7:
f9:8d:61:60:2c:97:be:39:64:8a:c3:db:d8:1d:12:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:F8:67:C3:C7:3F:FF:E4:3A:61:ED:46:F0:30:84:F2:06:03:B3
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:45:ab:95:79:d4:cb:4e:4d:db:bb:f2:0f:ef:fd:8e:d1:63:
da:86:70:48:b7:20:0a:c8:a9:bc:85:a0:70:f1:d7:75:43:5d:
22:17:d4:52:88:90:ac:c4:c0:6d:b7:c0:d6:08:8d:e8:30:70:
f8:2f:dc:90:12:cd:5f:19:c5:c1:31:a0:8b:32:f7:8d:fa:75:
7b:ba:15:64:70:09:7e:0a:28:11:b0:0e:4b:f0:98:48:90:7c:
c0:bc:47:08:2a:d1:92:f2:9f:2d:54:b4:a7:6a:2d:e3:2b:39:
bd:1a:77:4c:4b:39:16:47:06:bb:89:b6:87:a0:f1:6a:58:9c:
2a:e1:b7:07:73:03:84:fd:12:36:52:d3:22:36:51:1c:8b:b2:
c7:b3:5d:d3:d7:fd:f5:6a:6c:24:a7:5f:fc:71:2b:89:2c:32:
26:92:65:c7:b0:81:d9:00:3b:13:91:cc:a7:1b:51:af:08:4a:
56:58:19:28:9f:08:a9:93:c2:a1:e0:8f:f3:af:a9:a2:89:f2:
3f:28:38:c4:10:e4:94:f9:a8:52:e4:3f:59:c9:f0:3d:e8:eb:
c4:62:e3:b6:11:4d:06:8a:f8:92:64:af:23:99:06:26:81:22:
1e:87:86:bf:d3:7e:8c:68:41:18:d9:d3:d1:1d:85:19:65:86:
d1:97:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:36:42 2025 by rpki-client