Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: epRuqslEzt+BDLnFsMClKtY/ovd/5Rbye6LJt7Ex2R4=
Subject key identifier: 49:DA:E7:24:67:5C:13:A8:CA:7E:63:26:0C:82:F2:4C:D9:DD:0F:AC
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 0196A6F8C45D4ECFA162E75385C7325BF4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 1423
Signing time: Tue 06 May 2025 19:00:43 +0000
Manifest this update: Tue 06 May 2025 19:00:43 +0000
Manifest next update: Wed 07 May 2025 19:00:43 +0000
Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: UchhU62npSgIQPmOB+m6YkA/IFRGLxS4BtDav3izygc=)
2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:c4:5d:4e:cf:a1:62:e7:53:85:c7:32:5b:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: May 6 19:00:43 2025 GMT
Not After : May 7 19:00:43 2025 GMT
Subject: CN=49dae724675c13a8ca7e63260c82f24cd9dd0fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:99:f3:51:64:6e:bd:c5:1d:c1:82:a0:d4:
10:d7:57:42:dc:ba:44:8d:0e:21:67:42:2a:6e:10:
fe:ca:31:97:58:66:67:4f:0e:c7:eb:47:84:4f:5a:
f5:84:d0:bb:cc:79:a9:71:6d:6f:98:ed:ba:55:d2:
53:2c:75:3d:af:2c:07:51:f8:e0:3b:8d:3f:e4:35:
40:c6:45:fc:c1:0c:6e:0f:bc:ff:6f:22:62:50:3f:
4f:e2:4c:63:89:8c:5d:7f:37:76:7a:30:ec:dd:aa:
c4:4b:02:2f:1e:43:f7:51:7c:f4:a7:fe:e6:3f:6d:
a9:9c:a6:ed:26:43:7a:8e:2b:43:fb:7c:7e:a0:b6:
80:8e:2a:59:5e:fb:d6:e4:6b:60:9d:8d:96:c0:99:
7e:3b:af:c6:d5:12:b9:67:53:2d:86:1a:53:ce:3d:
32:18:29:e1:d8:ca:8d:20:7d:a4:e7:9c:38:87:53:
49:07:79:a2:c7:96:46:ac:9b:5f:1e:94:aa:8f:d2:
83:02:bf:53:11:d7:bc:69:41:a6:4b:22:a1:b0:42:
f6:4a:07:5b:bd:05:c1:9b:e8:81:cd:fe:03:a3:a9:
cc:c2:1e:b8:fd:8b:41:a7:a9:42:f9:10:a1:e0:55:
6a:2d:0e:32:e4:5c:32:d5:8e:b3:7e:6c:ff:c3:38:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:E7:24:67:5C:13:A8:CA:7E:63:26:0C:82:F2:4C:D9:DD:0F:AC
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:42:bc:12:b6:cf:fe:e1:25:6d:93:ef:f6:c3:97:d8:58:3d:
5a:30:49:c3:0c:b4:7a:f3:60:fd:87:ca:a6:b2:21:88:e8:54:
dc:cd:7b:4b:71:bb:53:ab:60:2f:20:50:86:84:6c:38:16:5f:
c8:ca:ea:fc:92:95:21:c1:74:d8:57:68:3a:b8:39:f7:ab:b2:
61:e8:de:3c:78:c0:8c:1e:e1:41:8a:93:80:7b:ab:08:27:43:
b8:92:c0:65:e8:62:2d:7d:25:52:ea:ff:9c:9b:29:0a:d6:1f:
42:d8:f8:e1:33:c7:04:d0:7f:59:3b:8e:6b:72:b4:60:10:cb:
ce:ee:70:66:ac:97:54:48:bc:e0:4c:7f:c8:e0:f1:43:63:da:
74:b6:9b:81:d0:6f:b5:bd:96:6b:e0:01:24:ff:13:22:11:85:
24:11:65:ab:55:31:34:8c:52:f2:28:3f:f6:46:4c:4d:a4:34:
55:ca:fb:2a:ac:73:bd:61:c2:c4:be:10:7d:3b:bf:7e:80:5a:
78:52:3f:3c:b7:9f:fe:e9:28:2d:42:22:b6:5a:ac:a9:e8:d7:
83:b5:54:26:be:d4:92:cb:81:85:05:01:67:3c:fa:8d:eb:71:
e1:ab:c5:ea:82:0f:59:e4:70:9a:94:03:24:8b:6d:9d:b7:ac:
77:0d:02:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:18:02 2025 by rpki-client