Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: 0CJ5tRHBPrFiw0e+jYNIEDLecHYMAErM8KEBtiwA+/I=
Subject key identifier: 8D:33:BA:90:02:77:42:D7:AD:32:DF:CD:6D:53:4B:0B:C9:3C:3B:E3
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 0196BC6DEA9DE63C5C1A701AC5806A73E513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 01DA
Signing time: Sat 10 May 2025 23:00:41 +0000
Manifest this update: Sat 10 May 2025 23:00:41 +0000
Manifest next update: Sun 11 May 2025 23:00:41 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: mBQqmXL4PRO4EBb5jEPeEa35dGy67uS7xBh7tmhb2qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ea:9d:e6:3c:5c:1a:70:1a:c5:80:6a:73:e5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: May 10 23:00:41 2025 GMT
Not After : May 11 23:00:41 2025 GMT
Subject: CN=8d33ba90027742d7ad32dfcd6d534b0bc93c3be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:22:d6:44:83:38:85:a3:67:b3:a8:38:6f:
a7:46:53:f1:49:26:55:a8:3d:c3:19:2e:2e:b4:a9:
57:d5:77:28:af:d5:84:c0:d9:46:b9:90:1d:05:27:
86:3e:fa:dd:31:45:7f:bb:7a:8f:cf:f0:61:d8:7f:
9e:38:3c:81:13:10:b6:3b:8e:41:91:6a:f9:54:76:
8f:d6:ca:d3:a9:53:41:1d:78:c5:58:ee:01:17:ff:
8a:d3:02:e5:50:42:50:bb:06:99:49:3d:b1:c8:25:
e3:46:3e:ad:1c:c7:6d:02:b3:3c:3b:92:97:37:bc:
40:a1:ac:08:58:c1:94:10:fd:9f:e0:8e:ea:b0:53:
a8:7b:fb:b0:29:3c:cb:47:b1:c8:c7:9a:9f:7b:db:
d9:07:11:52:eb:c1:8c:b4:58:3e:f6:b8:37:91:a4:
94:37:4e:3e:f3:0c:04:68:9c:86:0e:de:5b:95:f1:
84:d7:3f:d0:ff:21:9f:97:73:8f:11:ff:77:57:a0:
c4:f3:03:62:e9:cf:26:46:a2:9b:83:ee:23:54:93:
19:65:0b:df:1c:87:8f:27:dc:0f:0f:a6:8b:d7:38:
5a:b7:11:32:99:15:c6:57:3c:bb:b4:b2:99:ff:32:
33:01:1b:7d:2d:81:c9:d2:5c:25:af:0d:fd:b9:f7:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:33:BA:90:02:77:42:D7:AD:32:DF:CD:6D:53:4B:0B:C9:3C:3B:E3
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d5:05:1b:29:7f:9c:b3:40:0b:6a:d0:3e:56:ab:cd:cb:d4:
25:cd:eb:74:9d:2e:3b:64:c4:a6:da:25:3a:71:89:13:cd:3d:
34:05:9f:5e:1f:2d:5c:4a:9a:27:7f:dd:74:8b:08:dd:29:52:
f3:91:4b:a4:46:97:f7:c8:97:f8:9c:07:d2:30:e2:43:5f:1d:
e1:b1:e4:f0:24:19:fd:0b:47:dc:31:a2:72:c2:4f:97:cd:ae:
47:8e:d2:d7:98:03:57:f3:5e:2a:33:63:d9:9c:56:f1:63:13:
8b:55:54:32:d4:f6:a3:03:6e:67:e4:f8:9a:de:f7:a5:07:49:
7b:23:fc:f0:c3:5f:0f:21:7a:dc:8d:a6:27:39:27:cf:ae:97:
8d:50:ea:6e:b7:d3:b5:ec:b2:b4:6f:c2:8a:2d:1e:d5:9e:29:
7f:88:2b:33:45:17:38:b6:48:81:d4:ae:7d:6f:e2:3d:f9:14:
72:ef:63:04:19:c5:f2:3a:bc:bc:3b:76:c5:6c:36:06:00:54:
d7:43:db:98:9d:d6:e7:af:45:51:55:f3:19:3a:d8:81:b4:4e:
b5:73:5c:19:1e:1e:a9:a5:d7:cd:5e:45:14:0e:7f:e7:75:ff:
29:69:ce:6c:c6:63:54:a3:3c:c8:cd:8d:f8:66:11:b0:fa:13:
ab:74:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:42:58 2025 by rpki-client