Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: zbxawJY/8XaZSKvhonQKK0Nktps+w+WF4QBlOt8KXwE=
Subject key identifier: F5:A9:BB:41:4A:48:CA:E4:B8:35:D5:86:EA:0D:9B:39:26:78:36:8D
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 0196B85A2EF37D01D1DB78B77D6B2A75A313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0418
Signing time: Sat 10 May 2025 04:00:40 +0000
Manifest this update: Sat 10 May 2025 04:00:40 +0000
Manifest next update: Sun 11 May 2025 04:00:40 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: Wnq6NLmdzAj4npfujvvDmc7wNopcOkhmvHKcvHAhQg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:2e:f3:7d:01:d1:db:78:b7:7d:6b:2a:75:a3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: May 10 04:00:40 2025 GMT
Not After : May 11 04:00:40 2025 GMT
Subject: CN=f5a9bb414a48cae4b835d586ea0d9b392678368d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:84:bb:6b:3b:cc:6b:ed:0d:86:92:2d:03:
8e:36:64:89:28:ee:2e:30:68:b1:f4:e9:f1:5d:fd:
7b:30:53:cf:d5:19:19:fd:30:53:91:54:83:b2:86:
b7:0a:18:14:7c:9a:a0:e5:ac:ca:dc:19:74:d7:f3:
cc:3c:46:1b:f5:13:a8:bc:fd:c4:2b:7c:06:35:83:
90:5c:08:60:94:40:e8:aa:2b:02:ee:d6:c6:7f:22:
7a:4e:2a:c3:f1:d4:61:79:9c:dc:09:bc:11:26:2e:
a8:06:22:f0:ed:d2:d6:3b:25:74:7f:4a:01:0e:ee:
10:5e:53:b7:82:d4:bf:7b:05:44:17:33:fd:31:3e:
54:5a:b4:9e:ff:1e:1c:ad:dd:66:29:c3:60:09:2c:
a4:aa:bc:a9:f5:7e:1c:4c:6f:e0:e2:19:48:18:8f:
05:a2:41:77:90:77:9c:83:3c:89:94:db:eb:56:06:
42:e9:f8:dc:0a:8a:6c:82:c3:57:38:aa:e3:c1:7c:
4f:46:7a:38:e3:cc:e4:44:2d:be:63:79:c7:9d:1e:
64:99:40:f4:3c:24:4d:f6:2a:a7:fe:d4:6b:d4:20:
fe:6e:2b:5c:b8:f3:a6:73:70:5f:bb:2a:03:45:de:
64:31:ec:2a:b2:08:05:de:65:e8:3c:a2:65:99:ba:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:BB:41:4A:48:CA:E4:B8:35:D5:86:EA:0D:9B:39:26:78:36:8D
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:fb:45:4e:ef:93:89:b9:5e:7f:64:09:ec:21:85:67:9f:
a9:d7:07:19:7b:91:39:23:45:eb:44:6c:0e:54:36:ba:23:23:
c6:c6:bf:e3:19:59:00:1b:4a:48:98:b3:d0:52:4a:fd:3a:d2:
2d:5f:18:db:2d:9a:71:79:c0:0b:7e:e2:32:22:8c:b6:6a:e9:
4c:01:1a:c6:05:d4:d4:a5:90:06:cf:bc:99:c2:bf:3b:82:bc:
7e:49:9a:9d:51:c5:8f:3b:96:96:fb:05:a4:f3:b3:55:ad:67:
3c:b0:32:a1:c1:84:60:a6:d0:74:16:2c:dc:54:54:58:c6:a7:
7e:aa:78:1e:a6:98:c0:f5:58:e2:84:d9:e0:a2:c6:e8:69:1a:
32:96:b6:31:52:13:26:b2:f4:11:78:58:69:5c:1a:0a:72:52:
bb:8a:29:a4:23:21:5f:28:e2:9a:ff:71:7f:12:16:4a:d3:da:
69:14:23:53:12:fd:80:63:64:b7:cd:78:fa:c2:6d:ea:0e:06:
bf:fc:04:34:36:62:c5:90:bf:0d:92:53:42:6a:c7:be:2f:95:
59:df:f3:3f:c1:8b:3f:c7:d4:62:6a:eb:db:0d:50:62:f2:dd:
1f:ad:d0:c1:7d:93:66:e4:2c:ba:6e:2d:20:f4:88:8e:ff:58:
f1:0d:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:44:11 2025 by rpki-client