Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: 4YQoWaeHh59s0d+rRuUn+AtJU1iGIxO+FHcC5r4djkI=
Subject key identifier: 1B:F2:67:69:2E:5B:7D:7B:8E:E3:83:74:18:05:54:B8:96:50:B7:9F
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 0196BB5B1AF4C24C184481870D430A05871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 18:00:31 +0000
Manifest this update: Sat 10 May 2025 18:00:31 +0000
Manifest next update: Sun 11 May 2025 18:00:31 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: xixueGlSWB5qa2QYb9cC/uatHy1/l7B8lY9d5j//RJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:1a:f4:c2:4c:18:44:81:87:0d:43:0a:05:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: May 10 18:00:31 2025 GMT
Not After : May 11 18:00:31 2025 GMT
Subject: CN=1bf267692e5b7d7b8ee38374180554b89650b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:46:16:f5:3a:28:70:54:38:9c:6b:d9:2f:
61:0a:7a:65:50:11:fd:93:81:67:d2:85:ef:0d:78:
12:ac:81:62:7e:05:e2:94:07:63:00:79:d8:05:08:
15:ae:65:75:1a:97:78:3c:c8:e8:a2:a1:b7:b7:7e:
92:23:6e:3d:53:97:3c:bf:e4:9c:a8:3f:c1:20:ae:
c2:02:dd:64:93:3d:44:c2:e3:0e:55:7e:a8:f3:f5:
8a:22:47:b9:18:67:bf:6d:f6:01:12:38:d0:a9:a7:
e0:13:8c:7a:e9:dd:16:17:80:10:95:1a:72:10:bb:
dc:83:78:64:5e:47:39:29:90:13:8e:e1:e9:bf:b6:
38:b7:a7:68:5c:c9:2f:00:93:16:fe:91:98:b2:57:
0b:b7:d9:d1:e1:c2:0d:82:22:d2:39:99:02:0d:f7:
6c:0d:07:d6:14:23:8b:d1:5a:37:17:05:4f:a4:37:
5a:5c:62:88:74:f5:0f:51:f5:47:6b:db:df:08:1c:
2c:06:b4:36:6f:5d:5b:de:d0:97:42:a6:65:8d:bf:
69:c7:35:8e:63:cc:5e:d6:5f:65:2a:57:38:24:64:
64:51:92:16:72:d4:53:39:70:a3:a4:c5:d7:4f:6a:
c6:90:1f:70:08:a5:09:55:1f:23:60:4a:10:03:a2:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:67:69:2E:5B:7D:7B:8E:E3:83:74:18:05:54:B8:96:50:B7:9F
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ca:f1:d6:ed:19:a5:ea:0c:b9:c8:35:2b:63:0d:8f:b4:6d:
3c:f3:eb:7f:be:d0:eb:75:04:78:6c:c9:74:89:16:05:6e:46:
db:1f:d6:ed:bd:b5:1e:56:05:2f:9c:6a:21:11:78:82:41:7a:
a1:bb:8b:75:5b:46:4b:e7:48:fa:5a:f1:db:9c:ab:e2:c2:bd:
08:3d:23:00:cb:73:d9:fd:68:0b:cb:b2:ff:be:09:e5:8e:aa:
ee:a9:96:96:b4:89:31:a2:ea:98:93:13:b0:e4:73:7f:17:8a:
b8:1a:1d:33:d8:48:50:58:8b:e5:8c:67:8d:68:cc:9a:f9:a0:
22:ea:1b:6f:53:bf:e5:a3:13:9e:5d:88:02:f2:1b:9f:49:d6:
a8:c0:e5:91:6c:5f:da:3b:ce:cd:50:70:8f:dc:a2:cb:b3:f2:
a5:c0:c3:c1:08:85:9f:5c:15:c2:05:e2:44:1f:46:3c:f3:ce:
69:c8:c5:02:47:18:3e:a8:3f:0d:e8:f2:dc:a1:96:d1:11:a1:
59:7e:4c:a6:65:29:b1:83:d1:f1:28:fe:c9:48:1f:36:3a:f6:
19:eb:83:7b:40:b7:d3:39:77:ef:9a:0f:29:60:2a:de:d3:b9:
b9:50:08:22:68:7a:4a:cd:84:ff:9a:01:5f:da:2e:3e:be:d2:
d5:e5:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:02:21 2025 by rpki-client