Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: pkRv9b/ixx8RK1jTdPL42gXhZxrUzqlfqXuOTTUOzE0=
Subject key identifier: 92:5E:3B:34:F7:65:BD:31:BD:E8:B1:E2:D9:09:33:DE:A8:05:07:1C
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0196C26FCAE45FF7E8277AEE7256A0F96DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0631
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: rLkhtsdAoJUjSSVbdndJYLOTU9s94SndZFmXSAx+LDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:ca:e4:5f:f7:e8:27:7a:ee:72:56:a0:f9:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=925e3b34f765bd31bde8b1e2d90933dea805071c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:1a:72:24:fa:87:0f:56:9f:bd:23:cb:82:
22:26:a2:79:7a:37:c3:94:59:07:5e:ad:5f:d0:c3:
df:53:37:c7:9d:37:8f:ba:af:d6:a6:d3:69:ac:40:
50:34:e3:1e:b2:b6:a6:e3:47:79:4c:32:88:3b:92:
fc:43:19:5d:ca:8b:89:d6:28:26:7d:f8:ca:66:a7:
83:cf:e0:c2:60:8b:82:9f:8d:22:35:92:0a:e6:44:
28:8a:4c:c1:c9:22:80:a0:a2:7d:bf:99:4e:42:ab:
e6:57:50:11:76:17:21:f9:7b:eb:b3:dc:09:b4:39:
8e:39:34:2b:1a:2c:a0:50:ee:bd:3b:4d:7e:17:44:
fc:ea:b6:56:d1:62:de:1e:66:08:1f:6a:84:ad:60:
71:47:4e:de:5a:c3:65:c8:d7:9a:a5:6b:1d:d9:94:
34:ca:f6:8a:b4:a8:a8:b0:43:30:da:61:ad:26:31:
fb:36:61:02:e6:33:51:b0:8d:a5:d8:85:f1:c7:47:
ca:0a:2a:db:00:bb:74:5a:b2:56:60:dd:7f:e4:a5:
0c:3d:70:c5:37:37:0e:28:6e:82:76:af:06:87:d3:
50:77:ea:08:fd:da:2c:7f:fa:d9:77:a5:76:5c:8e:
c2:68:48:78:3c:f2:38:ca:a0:02:43:f2:b8:2d:a7:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:3B:34:F7:65:BD:31:BD:E8:B1:E2:D9:09:33:DE:A8:05:07:1C
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:86:1a:9f:e5:c0:64:1d:58:54:8c:b3:84:eb:73:25:a3:a8:
3f:e2:6b:a3:26:70:f8:51:62:ea:99:12:19:d9:69:cd:53:f2:
7d:5e:54:a3:1b:a4:b2:ee:d5:47:2d:24:c5:76:5c:24:6b:3d:
77:49:e7:9c:71:50:3b:01:d0:1f:83:88:4a:6a:40:cd:b9:d7:
d6:21:3a:3a:aa:62:c4:4e:ea:5f:0e:0e:dc:1e:e2:c5:04:7f:
0f:31:c2:24:44:cf:52:bb:dd:d4:3c:71:91:ce:5c:37:39:d1:
fc:10:7e:ec:0e:2e:0d:06:df:de:10:6d:a8:6d:84:4c:f0:f0:
5d:e3:ca:da:22:f1:91:00:90:f9:77:3c:c6:e6:4a:4d:82:e2:
2e:a0:4d:ea:4d:e3:cd:35:c6:7b:68:4b:d8:de:3b:ff:aa:fb:
63:4d:9e:b3:ab:47:88:3f:47:f9:d7:38:c8:60:ef:29:33:88:
ac:6a:1e:9b:8a:7a:ff:44:6b:2f:00:c9:78:9b:42:54:72:32:
e3:f2:70:9a:c2:89:3d:7e:fd:ab:31:05:63:0c:b5:7e:58:40:
08:e5:98:be:72:48:11:78:2c:64:2a:0f:79:3f:5f:10:be:86:
90:c8:f9:ae:45:6b:19:31:f4:ec:67:8f:64:53:46:5e:a3:e6:
f4:c0:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:18:23 2025 by rpki-client