Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: DaRbKD17SH6vPbZ/mM9RIOWx/V2uDBXH+fw6iNnA8CU=
Subject key identifier: E2:1F:76:B8:91:04:40:EC:14:AC:6D:01:19:99:11:93:14:85:AC:91
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 0196A088911035BA807E7F3B0D1EAC066705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 13:00:26 +0000
Manifest this update: Mon 05 May 2025 13:00:26 +0000
Manifest next update: Tue 06 May 2025 13:00:26 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 4fjmAf7a3mwpdkqFSoOMLXvI/DPnZNI4jiHb0GqWpeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:91:10:35:ba:80:7e:7f:3b:0d:1e:ac:06:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: May 5 13:00:26 2025 GMT
Not After : May 6 13:00:26 2025 GMT
Subject: CN=e21f76b8910440ec14ac6d01199911931485ac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:04:7e:0e:32:2a:9d:c0:21:ec:3e:d8:c9:
03:ec:84:62:e6:59:db:8b:b9:c9:a3:94:a2:de:34:
e6:81:ce:2c:e5:fe:c5:f4:79:56:d1:12:9a:92:4a:
f9:7e:fc:09:2d:2e:8e:a9:40:0f:f5:ea:0d:04:16:
50:0b:b8:58:78:94:e7:07:a1:83:65:c9:06:28:a2:
72:40:f3:0f:d8:a7:e7:3c:ef:22:d0:61:8f:7e:43:
47:dd:e6:36:55:e7:f3:4a:eb:07:d2:0c:e9:b6:e3:
68:fa:70:a2:0f:ff:47:c6:3d:fa:04:be:2e:a6:0a:
a3:db:07:ac:b8:10:90:05:bc:70:1f:59:74:32:0a:
a6:5f:d5:b9:e1:79:fc:08:17:01:a1:7f:eb:d3:c8:
4e:6a:b1:7e:43:46:ab:41:95:37:dd:54:12:49:06:
9e:b2:70:9e:70:59:21:57:33:7f:c9:6c:e5:50:f2:
bb:a2:5b:59:4d:25:3d:43:eb:50:7b:f1:97:81:a8:
99:34:3c:8a:2a:f4:c1:04:f4:d6:02:2e:aa:86:0f:
5d:f6:74:ee:28:8e:47:c5:c1:1d:cb:f0:58:39:a0:
69:ca:77:45:a4:bd:93:7a:e3:9a:0f:62:b1:bd:ad:
7a:08:a3:5e:62:3c:76:f5:06:41:18:c3:2f:a7:7e:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:76:B8:91:04:40:EC:14:AC:6D:01:19:99:11:93:14:85:AC:91
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:63:60:ce:7a:e0:06:11:8a:5d:6f:53:85:da:5e:da:f4:29:
0f:2a:d7:99:94:79:ba:79:34:5d:38:1d:e1:60:eb:8a:eb:4b:
0d:19:66:a5:56:39:69:d3:a8:73:74:d4:df:39:85:51:eb:55:
be:40:d4:da:5a:d5:5b:db:58:82:8b:4d:82:9e:ec:a1:16:ae:
b4:74:77:83:5e:02:ff:45:35:44:b4:8f:be:d4:7c:4e:79:c7:
bc:cc:e7:a8:2e:21:fa:f1:99:88:d0:0e:85:5d:64:8c:3a:ad:
89:e6:22:4a:cd:4a:88:26:dc:11:b8:e0:f0:4b:31:e3:7f:d5:
61:d1:92:89:51:e8:1c:73:b1:80:ee:54:84:4e:e5:eb:65:9d:
7f:c4:d5:e3:c0:1e:c9:6b:1c:9b:54:74:21:ac:a0:0f:4a:33:
47:b6:c8:66:65:9b:ba:33:f5:db:00:17:de:8e:c1:7e:75:90:
45:3f:49:9b:59:09:7b:dc:9d:1b:ce:12:d1:ad:f8:c6:36:03:
d8:b8:04:6f:f3:e0:cf:4a:b7:1d:46:b8:9d:85:57:2e:74:a4:
96:f5:d1:fb:53:e8:80:42:5b:ef:86:3c:5f:e5:6b:92:e3:39:
2f:37:43:dc:ed:59:3b:d3:0a:22:63:5d:3d:c7:7d:ce:13:5e:
48:4c:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:03:37 2025 by rpki-client