Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: LGBIaopHcD3c4MDGtNqrj8tIqqhIqPe6dD4YzN2emgk=
Subject key identifier: 68:04:2F:6B:9D:FA:66:59:12:B8:3B:2A:F8:F5:9F:EB:9F:6E:BD:CC
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 0196B8231AD652830A359B5C032E4D91875E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0D9A
Signing time: Sat 10 May 2025 03:00:30 +0000
Manifest this update: Sat 10 May 2025 03:00:30 +0000
Manifest next update: Sun 11 May 2025 03:00:30 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: ochpJI/1aP8IWUYqCwT4INBaaqSSug3Tzyd6fIcIpN8=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:1a:d6:52:83:0a:35:9b:5c:03:2e:4d:91:87:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: May 10 03:00:30 2025 GMT
Not After : May 11 03:00:30 2025 GMT
Subject: CN=68042f6b9dfa665912b83b2af8f59feb9f6ebdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:46:fc:8b:ae:b9:19:c3:54:19:45:9b:5a:
a2:bd:cb:b3:d6:56:97:e3:5f:9c:5f:cc:0d:a3:20:
b1:b4:9b:4f:e9:c2:59:7f:22:dd:64:12:8c:62:d9:
54:d2:fb:67:fa:45:29:4f:de:81:c9:ce:00:6c:56:
f0:70:35:c2:54:c2:47:3a:41:37:e1:04:c4:e0:5a:
57:1e:11:7e:8f:7a:d1:ea:5e:69:d6:80:8f:04:a4:
63:40:92:ed:1f:81:6c:6e:c9:45:ba:31:82:23:7b:
a8:3d:cd:ef:3a:24:3b:c9:e5:e9:b0:54:72:a3:d5:
9c:93:68:ba:b9:ef:6c:1b:be:1b:f4:ad:2b:8e:1c:
21:be:42:47:17:59:84:59:9c:3a:51:d8:03:57:95:
0c:03:89:05:bf:0e:57:f3:d8:88:2f:dc:18:f0:51:
35:b2:d0:20:ad:c6:50:91:d2:f9:06:68:e7:ed:51:
31:7b:43:04:b9:ae:68:d2:9e:c5:2e:19:4d:e2:47:
79:6a:a4:f0:29:d5:fa:df:27:5d:70:2d:a8:1e:22:
ee:57:cc:ee:5a:d0:7a:d5:90:b1:17:ea:89:27:31:
b7:05:47:92:78:30:07:f7:7d:05:49:97:3e:b2:0b:
23:99:6c:25:18:45:c2:8d:c4:49:c6:36:94:b2:77:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:2F:6B:9D:FA:66:59:12:B8:3B:2A:F8:F5:9F:EB:9F:6E:BD:CC
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d0:74:ae:fc:cf:56:d8:75:f8:a0:8c:b7:64:75:10:57:5a:
30:14:50:a9:26:bd:e6:d6:cc:af:cf:04:90:b8:8d:b0:68:1d:
34:eb:0e:1e:b6:b3:80:12:1e:fd:58:f4:77:ad:d9:54:80:a7:
04:13:95:08:8e:15:2c:a8:dd:4a:55:b6:88:e5:ea:4a:e8:32:
a5:96:a0:51:58:5f:0f:b9:84:a1:dc:98:b6:d5:c9:bc:60:51:
e5:06:95:be:05:5c:a6:9f:4a:93:b9:74:4e:0b:c5:ec:be:47:
20:d4:97:65:b8:0e:c9:ed:db:85:04:24:56:8a:5e:e3:e9:9c:
5a:66:a0:ce:a5:45:76:af:af:f6:95:60:a7:89:5f:ff:7f:cf:
ad:ad:de:ed:79:86:85:59:c6:53:45:9b:50:aa:f8:32:94:4c:
ae:f7:1c:5a:28:63:4c:89:e6:25:ae:b9:e4:fe:a1:20:27:76:
fb:77:75:64:4a:00:e0:ed:91:2f:5f:e8:53:ec:a6:2c:c1:68:
cc:f2:40:99:fb:85:b5:6c:6e:fb:56:df:39:1d:72:f5:07:87:
c7:a1:06:0e:a4:7e:6d:15:ad:2c:62:49:4e:2f:86:95:09:b4:
85:91:f6:75:a5:fb:ea:0f:7f:35:c3:8f:70:7c:50:36:8c:94:
1d:02:2b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:31:00 2025 by rpki-client