Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
File: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft (raw, json)
Hash identifier: pN+SbBwwvnoITuNTH0BmvdmHG1J347u3XAmzUfmtXSE=
Subject key identifier: 79:A7:F9:24:3F:20:B8:76:CD:14:60:DD:D9:A4:C9:B8:FD:50:04:11
Authority key identifier: D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
Certificate issuer: /CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Certificate serial: 0196BF6F9D48F32CC22DD44FA83C4AA936F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
Manifest number: 063B
Signing time: Sun 11 May 2025 13:01:25 +0000
Manifest this update: Sun 11 May 2025 13:01:25 +0000
Manifest next update: Mon 12 May 2025 13:01:25 +0000
Files and hashes: 1: 2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl (hash: vIS0+yfB61t4lW+SULEzcE+Z2AErKPYSzTIMbEDZuYo=)
2: VyRcdQegnHw4kuW58Uqx25GobPA.roa (hash: lC++tHS3x+n6tHU4vit/ETgEcE0Z4ZJ+bg8pO+7AhEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:9d:48:f3:2c:c2:2d:d4:4f:a8:3c:4a:a9:36:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81843032164e0b62ed6da7c67557bf46895d0f0
Validity
Not Before: May 11 13:01:25 2025 GMT
Not After : May 12 13:01:25 2025 GMT
Subject: CN=79a7f9243f20b876cd1460ddd9a4c9b8fd500411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:b8:4b:bf:95:8e:63:b4:b3:b6:e2:83:af:
b7:44:a6:75:aa:32:fe:11:41:c7:83:b6:ba:ac:65:
cb:27:d2:60:fc:5d:fe:bd:01:b7:de:45:70:2b:9f:
f4:d7:e1:bb:0c:23:15:6b:b3:47:ef:58:7d:3e:90:
81:f1:ae:52:28:04:23:f0:4a:90:1e:65:49:bf:e1:
09:a7:98:d5:cc:0c:8f:4a:b9:75:1b:67:6b:30:72:
71:1d:9e:a1:1c:65:4e:0e:6b:d4:11:4d:f5:7e:30:
e1:bd:88:f1:8d:76:0a:56:0e:2e:c7:6a:d5:43:71:
79:13:18:8a:d6:9d:e4:37:f0:89:4e:81:48:97:5a:
e6:16:b5:7e:ca:df:a2:b6:15:ca:53:11:38:46:4a:
d7:d4:25:0b:7f:ab:02:0f:c8:6e:a3:50:23:53:0e:
99:0b:a1:e1:21:2c:03:f8:af:c1:f5:5f:03:30:6a:
cc:1b:59:98:5d:ac:68:e2:0a:0f:21:7a:f9:95:43:
6d:c9:b6:82:b8:25:7e:ba:7c:93:4d:a4:59:4e:a5:
9f:03:0c:a8:64:4e:fb:13:07:d5:89:c9:c1:9b:44:
5e:bd:84:21:ce:3a:6b:f9:d1:97:9d:a2:52:59:ad:
21:b1:6d:c6:b7:88:88:30:99:d8:65:17:05:e4:c9:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:F9:24:3F:20:B8:76:CD:14:60:DD:D9:A4:C9:B8:FD:50:04:11
X509v3 Authority Key Identifier:
keyid:D8:18:43:03:21:64:E0:B6:2E:D6:DA:7C:67:55:7B:F4:68:95:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BhDAyFk4LYu1tp8Z1V79GiV0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5c1eec-3700-49bb-bfee-65d373ab573f/1/2BhDAyFk4LYu1tp8Z1V79GiV0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:8d:80:c2:5d:bc:29:a0:f7:10:30:1e:2d:8b:90:bc:cf:
0b:8a:4d:97:37:ab:f3:9f:d9:7b:ec:0c:eb:2d:2c:a2:27:fa:
2d:f3:b0:31:9c:5a:71:44:51:31:68:50:55:d0:59:76:a1:30:
f7:b5:8c:94:20:1d:95:ba:5c:93:a6:7a:35:97:0a:f8:c9:6f:
9e:8e:30:65:b7:1b:71:f4:e6:69:34:1f:06:7f:a4:63:47:94:
bb:d1:b0:4d:c4:48:ce:8b:f2:47:a8:ef:96:39:34:49:f3:3a:
98:93:ba:05:94:76:bc:3c:44:66:12:24:1b:2c:a3:63:bc:01:
ba:f9:8a:a6:b4:77:4d:4d:0e:46:8a:21:b9:71:fa:d3:5e:ec:
23:2f:f1:77:b5:9f:5b:46:d2:fc:29:56:5c:cf:18:2f:71:8f:
09:56:77:71:c0:5b:09:04:43:e9:7d:a8:c7:32:25:f0:4b:d9:
fd:8f:36:6a:f4:37:80:10:66:22:7b:6e:7d:10:df:c7:0d:3d:
f9:11:25:56:51:30:0f:e2:46:5d:1d:c0:43:d0:19:f6:a1:43:
48:a6:25:82:d1:72:2f:5c:2f:a5:e9:c0:e0:bd:54:c1:70:5e:
5a:28:fd:75:1f:66:80:ab:ed:0a:95:4a:74:2d:66:a8:03:01:
a0:3a:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:21 2025 by rpki-client