Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: oinRPyLivqXBTqKqoCeb1PPbyUvvjxBuOk+ibve79dA=
Subject key identifier: 5A:20:B2:C4:BC:0C:DC:88:FC:03:32:CB:6C:88:75:83:1D:58:01:27
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 0196B96CBCA546DCB365B5D0CF6B220E5D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 1401
Signing time: Sat 10 May 2025 09:00:33 +0000
Manifest this update: Sat 10 May 2025 09:00:33 +0000
Manifest next update: Sun 11 May 2025 09:00:33 +0000
Files and hashes: 1: 1Jntrl_laJPDesbXGgiWwWcFtHo.roa (hash: CoDTsiAxYNrmfWYqfUWdVx8o7SlGJlQ4gwhBUllspFY=)
2: IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa (hash: sqoYzZMt8wf4mUS5nMLQEfv8sbqAQGSNWeCswIb6zp0=)
3: YOMeWbqb2YP39GnUdvNTCOO7DWs.roa (hash: erbiSipizHuhTzJ/bRQWlIlf0Vk1QR2jgutHpwagwgc=)
4: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: TTB2AsdnAtAQiRcg/dzhHo6qnfhmJyuBsbC+8OLTBUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:bc:a5:46:dc:b3:65:b5:d0:cf:6b:22:0e:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: May 10 09:00:33 2025 GMT
Not After : May 11 09:00:33 2025 GMT
Subject: CN=5a20b2c4bc0cdc88fc0332cb6c8875831d580127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:d6:ce:8a:cc:11:3c:cc:60:e5:25:2a:e1:
a3:3e:fa:61:39:c3:7c:e3:c4:e6:22:c3:e0:0b:3e:
cd:71:43:ec:b2:62:c9:42:38:20:6c:61:32:eb:66:
af:ea:f9:43:f9:13:61:c7:ad:46:7d:30:16:1e:c2:
04:17:db:d8:c2:0d:24:ee:5c:08:2c:cd:99:f3:9c:
45:a3:65:a5:8c:79:69:9f:f2:3c:6f:15:8b:7a:1b:
67:96:97:f7:f9:ed:57:68:cf:b0:6e:84:0b:e2:81:
f7:9d:36:3b:ae:6a:d7:b4:3c:e5:17:9d:4a:dd:e8:
c5:95:9f:74:3e:0d:f8:4d:41:fd:da:1e:bf:84:9d:
f8:80:4a:58:5f:d3:db:d4:06:d5:86:a2:db:95:f9:
12:96:3f:21:3a:f2:d2:24:f4:a6:f4:51:92:33:7e:
60:84:af:b8:20:00:9c:31:96:53:c0:e7:37:bb:c8:
ab:49:18:76:3a:e1:e3:2b:fb:17:5d:f4:e3:a1:53:
96:82:61:2a:57:a3:42:99:dc:32:d1:a9:fc:17:6c:
e2:b8:57:cf:c3:31:a3:fd:f1:af:24:dd:f5:b7:e2:
d5:c8:a8:a7:68:02:94:d1:f1:30:f5:32:ff:94:35:
f1:da:25:1a:e6:e7:74:48:74:46:ae:e4:c6:61:9e:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:B2:C4:BC:0C:DC:88:FC:03:32:CB:6C:88:75:83:1D:58:01:27
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8f:fd:53:a8:09:28:92:f8:bd:8e:3f:1f:a6:24:33:45:d2:
49:10:71:49:e3:dd:25:58:6d:7b:b7:25:45:d3:02:73:06:19:
16:b5:b6:c4:a6:c6:9b:b0:81:a8:4a:e0:64:9d:17:00:0f:df:
bd:71:94:de:e1:34:da:37:f4:fa:a7:ff:c2:f1:fc:3c:57:58:
dc:27:d6:ad:d5:9f:ad:44:43:c5:90:6c:bc:b3:ee:1a:7d:90:
99:98:c6:9e:ed:64:e9:fc:ab:11:57:ec:07:f0:09:ef:b6:8f:
8d:9e:9c:09:fb:a5:59:9c:b7:2e:1f:41:e8:1b:f0:92:4f:be:
87:81:6c:f1:f6:46:62:cd:9c:e0:9f:5d:83:61:e0:0a:99:81:
c5:06:e1:d6:0a:ac:7d:e1:75:13:73:11:12:ec:66:44:87:b2:
1b:ac:14:d5:f6:95:b7:55:da:e2:2a:54:32:74:83:31:a8:a5:
23:53:99:82:3a:34:03:df:3e:62:ef:08:67:6b:68:10:be:f4:
e1:46:bb:a5:28:c4:ec:f8:dd:f3:d7:ce:b2:8b:ff:01:02:3c:
76:12:8f:57:19:f3:32:9f:62:e5:10:63:14:41:bc:38:a7:2d:
95:22:52:6b:00:39:1f:7f:58:fd:c6:c2:75:1d:52:2f:c5:a1:
f6:d0:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:38:03 2025 by rpki-client