Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File: ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier: 6eeQtOpGg2xLZwwnVa4Z9OIl9QXIxNlVr6RwT0EdBmU=
Subject key identifier: 8C:4E:39:47:8B:DD:0A:9A:62:DD:2E:A0:74:BF:57:62:60:25:9B:B6
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer: /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial: 0196AEB26967B982148399FB4AEB3A03471F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number: 05BA
Signing time: Thu 08 May 2025 07:00:50 +0000
Manifest this update: Thu 08 May 2025 07:00:50 +0000
Manifest next update: Fri 09 May 2025 07:00:50 +0000
Files and hashes: 1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: iTiaOMSAgyYNUPE3IhJ1jinVpXNDqc0BAy80SyIMfx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:69:67:b9:82:14:83:99:fb:4a:eb:3a:03:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Validity
Not Before: May 8 07:00:50 2025 GMT
Not After : May 9 07:00:50 2025 GMT
Subject: CN=8c4e39478bdd0a9a62dd2ea074bf576260259bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:8d:6b:ec:3f:1e:97:ff:69:92:d3:bb:20:
ce:31:e8:08:6a:18:53:f4:1c:9b:73:a8:c5:b0:b9:
83:c5:d0:a9:54:53:a6:cc:3f:56:bc:74:7d:69:ac:
34:3b:90:24:14:5b:5e:9e:dc:7a:c5:bb:ec:ba:60:
a8:df:60:e8:63:3f:4b:2c:b5:ec:54:35:7f:28:ad:
c2:cf:22:35:b3:99:36:81:d4:6e:26:6a:3f:75:ff:
3d:bf:7c:5b:aa:7a:70:cc:07:a7:54:03:8a:bf:bf:
8f:8b:2b:05:51:12:fb:6a:2e:be:bc:2b:0e:50:67:
2a:37:d8:8d:0b:a1:e6:0e:8c:e8:eb:4f:b5:3a:44:
fd:d2:37:9b:4f:77:00:1a:00:81:ee:a8:9d:38:14:
8c:31:d6:12:df:2b:ac:f1:2d:96:b7:bf:41:58:c8:
72:a3:68:a9:23:4b:c4:99:d5:7d:1e:a4:48:c2:55:
85:59:0c:28:25:2d:7d:86:72:2e:ba:ff:33:6d:4f:
ab:3a:25:e9:df:50:f8:b4:ad:20:09:b2:c2:dc:c0:
b3:6a:4f:25:6b:a8:81:be:59:a2:ba:d6:78:2f:a4:
35:45:be:22:0a:36:83:20:eb:af:56:37:20:ee:68:
5c:b0:14:58:32:af:cf:b6:01:ae:bb:c2:1a:d9:bd:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:39:47:8B:DD:0A:9A:62:DD:2E:A0:74:BF:57:62:60:25:9B:B6
X509v3 Authority Key Identifier:
keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:bf:74:b7:67:0b:5f:73:65:65:95:dc:3b:a7:42:d4:c0:
5b:6f:21:5f:47:52:db:43:3e:f4:5b:4d:13:fc:3e:08:f2:4e:
7e:df:bb:33:4a:86:4f:fb:be:b9:18:5d:f6:6c:6f:43:af:2b:
b2:73:b1:e6:26:b2:ef:63:bd:c2:da:c7:00:04:07:ae:c0:a6:
00:29:69:bc:e0:ee:46:8f:23:d5:9e:88:47:31:01:3c:fe:5b:
99:bb:50:29:85:ec:65:a2:78:98:0c:ec:da:36:65:d5:fb:d6:
ef:e3:c6:3f:4a:9c:0f:8e:a0:81:4c:ee:50:57:cc:6b:e5:07:
ed:f7:37:33:63:62:d7:6d:9a:ec:e8:58:4f:8c:29:39:c6:56:
fa:7c:88:bf:f1:a0:30:aa:58:0d:4c:67:67:33:a9:35:df:b8:
a7:6e:90:7f:1a:3d:8c:2a:d5:08:42:93:b7:fa:ac:79:3c:6e:
74:a4:bb:15:38:81:04:c1:2b:cc:03:c4:c3:55:f1:68:25:8b:
0c:30:08:81:87:50:62:72:85:9b:7f:f2:0f:b2:d3:47:8b:d0:
13:66:fb:00:51:05:7e:25:f3:9a:f3:5c:ae:76:09:82:52:7d:
69:30:bb:ad:e9:35:b9:97:82:b6:0f:2e:36:bd:b5:5c:b8:02:
22:24:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:04:27 2025 by rpki-client