Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier: 14+RLUgjboMf8qCUqkQ2nl1ahXB7m0z0DugbSKzJHcQ=
Subject key identifier: 65:50:2C:3A:FF:4D:D0:5F:1F:75:A4:79:E3:1C:5D:6C:F1:86:40:4C
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 0196BB927E30AE4BAEEC5859CD8804DC9D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 19:01:02 +0000
Manifest this update: Sat 10 May 2025 19:01:02 +0000
Manifest next update: Sun 11 May 2025 19:01:02 +0000
Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: 0YW90uakVKUWG0jqDa4+eFhlvbVDJHZYfEXA20bbo1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:7e:30:ae:4b:ae:ec:58:59:cd:88:04:dc:9d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: May 10 19:01:02 2025 GMT
Not After : May 11 19:01:02 2025 GMT
Subject: CN=65502c3aff4dd05f1f75a479e31c5d6cf186404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:08:b7:24:c8:60:61:03:a6:e4:91:bc:d5:
4a:c9:5a:0f:72:b7:06:e7:7e:db:1e:10:09:9f:36:
d6:33:20:51:e5:bf:ba:4d:27:8d:09:bb:78:10:ae:
82:03:a5:bd:dd:2c:a2:c7:08:08:f1:cd:fe:6e:5f:
99:5d:b5:a8:09:61:dd:02:b0:26:8d:17:48:9c:d9:
53:f2:ff:0d:12:b3:3a:c7:e1:6d:ff:3f:11:fd:6d:
62:dc:63:89:24:7a:3a:d5:ca:60:68:7b:8e:c2:4e:
2d:99:f8:5c:8e:76:64:05:ae:1f:cd:17:10:36:aa:
6b:6a:a2:61:c2:71:a5:fa:e4:52:83:ef:9c:b5:19:
74:87:af:b3:47:98:1c:f2:72:c1:41:4f:80:76:f1:
8e:0e:d1:6f:51:47:13:c7:ee:df:d7:79:93:5f:5e:
2f:61:01:84:14:b6:41:dd:df:76:39:cd:d8:49:26:
c7:32:9a:f8:f7:ba:11:e8:0e:18:ee:e2:fb:f9:01:
18:33:14:54:10:f0:32:48:4c:eb:58:45:a4:25:7f:
9a:dc:a0:64:4f:ac:7f:6f:9a:ac:20:03:e7:a5:77:
41:72:5e:b2:a4:c4:e3:2a:97:ef:b6:b7:68:2a:d7:
26:0b:a9:f6:97:75:e8:e9:36:7e:4d:db:57:39:3c:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:2C:3A:FF:4D:D0:5F:1F:75:A4:79:E3:1C:5D:6C:F1:86:40:4C
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:15:f4:11:c5:5c:12:5b:73:0b:26:ef:5d:53:f6:c7:13:05:
06:8c:cc:1c:a4:3d:b9:47:f2:86:31:db:d1:ca:f6:02:77:5f:
1e:89:87:b4:7f:b5:d4:2d:8e:1a:e1:a2:69:2c:e7:13:cf:4d:
ac:cf:19:42:cb:98:fb:19:89:ef:d4:99:2d:33:86:7c:e5:3f:
dd:f1:41:08:4b:7d:da:02:e3:29:b3:82:4b:43:c7:bf:6c:d8:
df:0a:9d:16:89:6d:39:e8:40:d1:cc:2f:6e:cd:1d:13:79:f2:
59:5e:1b:19:cb:e2:9d:3d:c4:28:e5:55:e4:19:24:53:f7:39:
be:52:a2:dd:f4:c2:ab:10:62:15:52:eb:f3:b0:f2:13:f8:e2:
69:37:2e:aa:78:f5:71:55:61:63:75:39:64:95:c3:78:9d:4d:
ed:4c:5e:90:7f:a9:ab:04:08:58:e6:64:4f:d8:4c:e2:9b:5a:
d8:46:66:c8:99:ae:52:99:72:72:46:f5:b2:67:db:a9:c7:a1:
05:21:c5:60:91:51:60:bf:43:0b:0e:f2:c2:57:4a:4e:8d:42:
f3:06:52:ad:b8:19:a4:8c:db:45:fd:a6:7a:f4:39:dd:07:7c:
97:e1:ea:4a:cb:97:09:a7:0b:53:e0:81:0c:cf:b9:c7:3d:78:
cb:f7:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:06:59 2025 by rpki-client