Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: 8g30VDp6dgdpOUH/CgC3RI57bkp8eibGMZf13/VvZZM=
Subject key identifier: D6:D3:81:A7:93:1C:41:8D:EE:0E:FB:1C:75:63:A5:03:DA:5F:27:A5
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0196B7EC8368C7DD5658E172335612A333FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 02:00:52 +0000
Manifest this update: Sat 10 May 2025 02:00:52 +0000
Manifest next update: Sun 11 May 2025 02:00:52 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: bT8NIQc8/WyAqE6Ed5aD4rin3SCnwevT5OhgKDc3kz4=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:83:68:c7:dd:56:58:e1:72:33:56:12:a3:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: May 10 02:00:52 2025 GMT
Not After : May 11 02:00:52 2025 GMT
Subject: CN=d6d381a7931c418dee0efb1c7563a503da5f27a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ea:46:bd:f4:a0:c0:f4:8f:b0:26:c8:25:a9:
82:a1:54:45:74:63:c0:b6:00:e2:e1:2c:c7:88:3e:
0f:82:41:ef:37:42:9b:87:b6:32:ef:1a:96:b7:89:
c1:81:b8:ed:38:0f:69:4d:5d:57:b4:cb:cf:6e:09:
00:d9:3e:09:d8:40:9b:60:19:0a:1d:29:5d:9b:28:
9b:85:29:9d:d3:4d:e2:61:b0:1f:57:9a:84:a3:ea:
59:c9:e6:9e:44:46:ce:fa:1c:8f:b0:eb:4b:32:25:
db:62:d7:c8:8f:ed:85:6f:54:26:ff:6d:47:c1:aa:
bd:9a:28:6c:e7:d5:df:4a:89:1c:04:18:1e:12:f7:
5e:3a:65:7a:be:6a:88:39:8a:f6:99:c2:b8:11:1a:
38:97:6e:62:5f:2a:ac:7b:02:3e:22:31:76:4b:ff:
e3:84:cc:21:f7:9a:15:b7:5d:d8:1e:38:70:8b:08:
40:0f:27:46:35:50:f0:04:e2:d1:d3:ea:fc:91:89:
81:11:15:db:44:96:da:de:89:18:5d:88:37:9e:0f:
44:7b:55:27:b5:75:7f:e5:9c:2f:41:ea:a6:76:38:
38:91:86:81:1a:72:a3:a1:5e:5f:3b:e2:d8:09:f7:
68:ec:26:1c:d4:33:84:5c:74:76:d0:d6:af:8e:5a:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D3:81:A7:93:1C:41:8D:EE:0E:FB:1C:75:63:A5:03:DA:5F:27:A5
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:89:5a:6d:ad:e6:cf:f9:12:7e:08:1e:34:a3:48:e6:50:22:
a1:5e:0e:0c:ab:4c:d3:96:e9:40:26:2b:14:af:d0:76:44:e2:
60:9e:97:19:ab:51:5a:1d:51:f1:7d:13:0b:35:83:ab:16:f8:
3c:04:5f:11:39:e6:c5:c9:bf:ff:c3:20:5c:75:5b:9e:8d:a2:
a9:10:01:19:4a:75:e8:2f:f0:62:09:a0:ae:b3:e6:a5:1e:da:
b0:2a:3f:4b:b2:f0:07:54:37:73:e8:1d:15:38:69:f9:08:8a:
0d:40:f5:d8:31:24:0f:c4:ed:6f:98:88:a7:ef:7b:b8:9d:77:
b5:0b:54:88:06:44:67:95:ea:bd:8c:e7:9d:6b:5d:8e:ca:0b:
c5:00:87:14:e3:ec:7d:25:1f:42:05:ee:f3:d9:b7:36:9e:b3:
51:95:ce:86:e8:ae:52:e4:c7:ba:a9:c1:f9:d7:9b:cd:28:f1:
03:eb:3e:7c:ea:5c:78:4f:47:88:a6:c1:9b:84:70:73:5a:e8:
76:66:0c:21:8d:50:83:b7:9d:44:9a:8f:2e:15:4d:e1:c4:f9:
ef:de:40:d9:3e:3c:2b:0b:28:92:a5:42:58:f7:4e:34:50:4b:
a1:50:49:e2:7c:d7:99:f4:42:3a:4e:e4:7f:a8:cc:c8:7b:6f:
ea:7f:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:01:59 2025 by rpki-client