Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: LQG+05z2vGj0kqzHLGbMYQmEwpx5JEDn+s3KuC95sec=
Subject key identifier: AF:7D:5F:3A:50:11:A3:05:11:CA:7E:C7:8D:3D:CF:3C:65:B6:86:74
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 0196B6A2631318868521D95D725A90C9ADE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 20:00:17 +0000
Manifest this update: Fri 09 May 2025 20:00:17 +0000
Manifest next update: Sat 10 May 2025 20:00:17 +0000
Files and hashes: 1: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: 1nEdb++oA4qchfxpiP/Grm+ohbu/M/w+mLQ1XSmJPfM=)
2: wKMrC-xvOnFI7StFVvvRQEu7XxA.roa (hash: PBE7WQbLaJ84O/pVhEjH0Fx39vOaxblOyGFRqpjhYW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:63:13:18:86:85:21:d9:5d:72:5a:90:c9:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: May 9 20:00:17 2025 GMT
Not After : May 10 20:00:17 2025 GMT
Subject: CN=af7d5f3a5011a30511ca7ec78d3dcf3c65b68674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e8:7b:49:a6:3a:41:fc:4f:30:26:3a:16:1d:
2e:c9:dd:23:f0:87:a1:c6:39:79:1c:81:91:ec:b2:
ac:d9:86:4b:7e:14:e7:e4:15:48:b5:e3:64:8e:47:
d9:f1:56:5b:e4:3f:d7:72:95:da:fe:45:bc:3e:50:
9b:30:bb:36:5a:e3:0d:36:85:aa:4e:5a:8d:bb:53:
1e:fe:79:6e:9e:50:7c:65:3c:30:10:e4:18:f1:ee:
29:2d:64:db:1b:f7:ce:12:81:0b:48:9e:e8:5b:01:
04:40:e0:0f:3b:da:20:e0:9c:74:46:19:2c:cd:88:
37:de:20:eb:99:35:a8:3a:ce:09:b1:86:d2:70:4d:
83:34:21:34:21:83:b1:25:55:ba:c6:85:44:a9:a9:
f2:82:65:5a:94:c5:e8:e9:90:c7:40:cb:ad:b7:10:
f1:35:63:27:93:be:26:df:9d:c8:3a:a2:ac:ea:9b:
0a:b3:da:bd:a5:6e:6d:16:f9:d4:05:e7:a9:3e:31:
63:8d:89:ec:35:86:22:c9:28:30:53:bf:18:ef:a0:
a0:c7:97:b8:18:ff:0a:54:81:53:45:31:d0:39:d9:
12:47:93:b1:64:4c:fe:2a:d3:22:d2:e7:6f:13:41:
dc:5b:ee:c3:6a:d0:ba:da:88:33:f6:c7:63:8b:ba:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7D:5F:3A:50:11:A3:05:11:CA:7E:C7:8D:3D:CF:3C:65:B6:86:74
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:73:5e:9c:a8:c7:de:ef:83:60:cb:43:e0:a3:6d:9c:13:
97:1d:24:77:d7:9e:ac:9b:09:f4:06:ca:05:c4:68:c9:12:a2:
d9:0a:69:df:14:13:53:00:a3:ce:36:76:fb:97:ac:8f:2f:71:
0d:18:5f:b6:8c:bd:d5:98:f8:42:db:f5:de:4e:0a:d5:b8:58:
27:46:84:f4:8a:e6:dc:8b:c6:68:b1:32:87:de:39:75:bf:31:
3f:d4:e2:d4:54:b4:1f:be:3e:1a:b0:28:6c:d7:43:34:7d:bf:
0d:0f:30:e5:1f:37:b6:67:9e:7c:f1:c3:dd:e0:1b:d5:49:c4:
bd:50:f5:2a:ef:59:9e:7a:ff:29:88:d7:a6:49:57:81:1f:8a:
97:f1:82:85:50:f4:35:df:7c:dc:77:92:1d:04:59:3e:b8:c3:
54:64:33:1b:b9:e6:be:a9:57:90:02:e6:03:84:3b:42:13:f9:
2a:b4:4c:78:2e:12:87:d4:9a:85:3c:d0:b3:83:b1:5e:b3:9d:
fd:73:a6:81:7b:ef:5d:eb:11:d8:70:19:51:d8:e8:22:25:28:
60:ea:6a:7a:12:31:d0:16:68:0a:8a:6c:63:fd:06:fd:2d:5c:
64:6f:c0:42:dc:39:d3:8c:53:d0:a9:1d:a1:8f:4a:cd:cb:a1:
91:5d:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:04:23 2025 by rpki-client