Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: gA5KxSezP7570szxutFSVlFDpiOL+I2MotBL4rgP+hc=
Subject key identifier: 12:A1:46:1F:59:E3:D9:46:2D:7E:2E:36:EF:EB:3F:6F:90:74:59:B5
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0196C314B65712314C2A1CD96761DFD46758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 06:00:36 +0000
Manifest this update: Mon 12 May 2025 06:00:36 +0000
Manifest next update: Tue 13 May 2025 06:00:36 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: CzKSlGSV1qE1Zx/vOrKJ/TBLpFzPj8tO+VNCC6CBJBI=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:b6:57:12:31:4c:2a:1c:d9:67:61:df:d4:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: May 12 06:00:36 2025 GMT
Not After : May 13 06:00:36 2025 GMT
Subject: CN=12a1461f59e3d9462d7e2e36efeb3f6f907459b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:4d:3d:70:62:66:58:2d:4d:26:a1:b9:1d:
76:dc:8b:bd:9f:2c:67:62:57:f3:db:f0:51:ed:c4:
99:62:f5:96:6e:7a:ca:8a:0e:81:fd:70:2f:b8:6d:
f0:cf:f7:c1:9d:ce:e6:71:98:3d:b5:99:16:e6:cd:
6f:cc:a6:88:15:6c:17:d3:c8:df:f5:6b:42:e4:5a:
aa:45:d0:a6:b1:eb:ec:3f:16:b5:00:cd:86:50:31:
bd:43:30:58:25:7d:d2:11:5a:d8:85:49:ba:16:1e:
fc:47:e7:ed:d8:3e:a0:14:fb:85:dd:e8:ae:c5:dd:
c0:77:54:e1:bb:38:a7:b5:2d:06:03:61:8a:2d:a4:
22:3e:5d:4b:9f:a2:c1:0a:97:af:92:01:5b:12:a4:
d5:78:1c:22:95:ce:c9:f0:bb:08:ab:4c:32:3b:fe:
52:c8:21:3d:00:3d:48:87:ca:08:c0:48:04:02:8a:
19:01:fd:80:96:b5:c8:5e:34:e0:09:94:ab:97:cc:
6e:fd:64:42:c5:6e:69:20:26:24:68:93:18:df:7d:
99:fb:57:94:44:90:e3:b2:17:66:5b:8d:7b:45:64:
1e:ff:1e:91:81:94:73:22:ac:5e:c1:a1:47:8b:a1:
61:32:b9:2b:f6:e7:81:fc:d4:f3:43:58:aa:10:ae:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:46:1F:59:E3:D9:46:2D:7E:2E:36:EF:EB:3F:6F:90:74:59:B5
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:10:ab:8c:30:cc:ed:81:6e:4a:87:15:85:3f:af:4b:7d:ac:
cb:95:65:0f:db:4e:fe:96:6c:c7:bb:d6:7a:4b:66:32:ae:f1:
d6:83:a4:08:90:e6:3e:44:24:29:33:0d:74:46:40:cd:78:f1:
2d:90:3f:bb:df:7e:4e:ef:15:ce:31:c4:de:8a:94:22:e6:9d:
f5:25:78:84:d3:9a:59:5c:63:e2:53:00:af:82:fd:03:3a:4e:
02:43:8f:05:1d:a8:ac:61:b1:31:f4:06:52:a8:8b:c3:09:a1:
55:92:2a:c9:bb:02:5c:04:e5:ee:55:cb:48:78:14:12:c0:fa:
9f:a0:e8:44:5b:75:c7:72:cf:52:86:81:5b:09:65:e9:e7:c0:
59:af:86:3b:a3:ca:40:ba:cb:52:4f:7a:3b:f0:ec:12:1e:e9:
d8:d6:8d:44:9d:8f:42:2c:cd:dc:bc:00:b4:15:3b:ee:a0:73:
1e:3e:09:0f:86:94:e1:11:3b:d0:4b:c5:cd:27:64:63:bf:b5:
00:ff:6e:9d:cb:b1:c5:26:60:4c:44:9a:7b:0a:fe:eb:81:95:
35:82:ae:27:f3:c7:37:32:3d:0e:1f:b9:c0:4c:15:6d:20:95:
3f:f3:2a:a9:64:02:eb:0b:64:ab:c5:66:83:9c:9c:07:23:00:
5e:ca:63:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:45:25 2025 by rpki-client