Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
File: m2JkjpE6NkDwMbY6a9krDijhOfs.mft (raw, json)
Hash identifier: QADjn4SR32n9cbM/SKiPyanlH3Gan0JnD2Z6ofX6/wY=
Subject key identifier: 0A:B7:21:3C:E3:F5:4E:19:9D:45:33:C8:3F:68:43:22:87:22:84:ED
Authority key identifier: 9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
Certificate issuer: /CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Certificate serial: 0196A389CA331632780C4AF3EA98A1A038BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
Manifest number: BF
Signing time: Tue 06 May 2025 03:00:38 +0000
Manifest this update: Tue 06 May 2025 03:00:38 +0000
Manifest next update: Wed 07 May 2025 03:00:38 +0000
Files and hashes: 1: GFs318vhhs43UeJYStMCcJcloVE.roa (hash: W8/O6hKTgxLPwLzEgTm/PKRsS6eSZm8+16PIQciHYr8=)
2: m2JkjpE6NkDwMbY6a9krDijhOfs.crl (hash: DdIzNAMDRHHJ3K79vZRYSyIeV3WuIdh5dg9HbtneGJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:ca:33:16:32:78:0c:4a:f3:ea:98:a1:a0:38:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b62648e913a3640f031b63a6bd92b0e28e139fb
Validity
Not Before: May 6 03:00:38 2025 GMT
Not After : May 7 03:00:38 2025 GMT
Subject: CN=0ab7213ce3f54e199d4533c83f684322872284ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:e2:1e:c1:67:85:5b:7e:89:78:5f:9c:e4:
3b:19:cb:d9:8d:a3:18:1f:b6:93:3e:ff:ca:2f:75:
a8:33:77:21:2a:78:de:bc:f1:f2:d4:fd:c0:c2:f5:
68:2a:3d:84:36:12:9e:05:63:3a:17:57:37:89:0e:
32:4b:1a:0e:98:bf:10:5d:c8:7f:80:9d:be:6b:28:
1e:59:1e:23:ec:97:bb:68:7f:da:63:e0:7a:11:d4:
66:db:aa:0b:c0:15:6a:26:5d:cc:25:4d:8a:70:62:
48:39:b3:87:61:ef:4c:69:30:a4:c4:44:9c:e3:ad:
d9:09:24:9d:ed:67:1c:18:77:40:1f:68:fa:2c:3d:
68:c2:b8:fc:1b:e0:26:f7:ee:be:78:de:c9:41:b9:
bb:3a:26:bb:2d:91:12:6c:7c:49:4a:9a:7c:9e:11:
19:1c:9b:a4:55:d3:92:5b:88:e6:c7:30:a7:db:73:
20:6e:b3:da:9e:99:e2:65:ac:3e:68:44:89:17:f6:
0b:4e:e1:22:b1:de:a8:ac:36:16:8f:4c:b3:27:cf:
f5:6a:df:5c:36:b7:03:ac:93:82:64:a9:85:a3:bc:
34:0f:9e:e7:62:60:93:ac:7b:b9:57:3e:b6:7f:74:
23:d5:cf:db:ad:13:55:6c:4e:be:52:9f:d2:c1:b2:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:21:3C:E3:F5:4E:19:9D:45:33:C8:3F:68:43:22:87:22:84:ED
X509v3 Authority Key Identifier:
keyid:9B:62:64:8E:91:3A:36:40:F0:31:B6:3A:6B:D9:2B:0E:28:E1:39:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2JkjpE6NkDwMbY6a9krDijhOfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8865d7-9fea-47f6-a3fc-98bd156029c0/1/m2JkjpE6NkDwMbY6a9krDijhOfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:44:94:ec:cf:36:54:53:55:18:e4:58:65:76:b8:7b:88:49:
e5:87:ba:0a:e4:9f:67:82:f4:1d:ac:64:3a:98:37:6c:10:b7:
7d:2d:60:52:e5:6f:51:b7:e3:48:ab:b5:4f:fc:07:de:f0:38:
ed:bc:2e:bd:bc:a6:19:99:54:2e:81:6e:1f:ff:ca:de:35:17:
a6:0b:8d:e9:ba:03:f6:be:10:ae:59:5b:5a:9e:25:44:bb:a0:
86:12:44:8a:1f:ca:3a:bd:42:14:c6:14:70:84:ca:12:89:d0:
0f:a6:4e:44:16:2a:63:08:3b:90:37:cd:a5:41:cb:86:26:d3:
6d:65:10:d9:87:71:3e:92:0c:95:03:98:1a:dc:32:4b:4c:fd:
34:ff:33:f7:38:cb:37:f8:1f:77:ce:1a:db:06:1c:12:f9:b8:
ce:46:01:3f:71:fa:b2:56:e9:03:29:81:29:7a:95:2c:10:b4:
94:7f:60:bd:12:31:6d:3b:b0:dd:ad:7e:dc:5e:06:7f:53:f1:
1f:61:78:5a:ad:97:30:d3:51:db:a8:4f:92:5c:33:3a:31:44:
60:0f:8d:18:3f:b6:30:71:93:d8:0b:10:a3:ac:94:07:ea:23:
2b:37:b7:84:21:cc:2e:45:90:8b:5e:56:9f:43:6f:17:b4:3b:
a5:c3:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:33:16 2025 by rpki-client