Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
File: b69IsCuX3C0xIlCqI0CDuMG7noE.mft (raw, json)
Hash identifier: LEz65JTQ60cyGknDBzHVYAGm9Oo/iCiPuQfBcpy2bGM=
Subject key identifier: 86:80:7A:43:14:E1:C5:63:1E:F0:00:67:14:FD:1E:73:84:F5:8F:0D
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 0196A6F8EAC5F1F84C2AA550A4C40B6D803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
Manifest number: 0249
Signing time: Tue 06 May 2025 19:00:53 +0000
Manifest this update: Tue 06 May 2025 19:00:53 +0000
Manifest next update: Wed 07 May 2025 19:00:53 +0000
Files and hashes: 1: TLlPGcDbhgt4UVQZI0BDrUEbE-s.roa (hash: 2zLKJ3umZ3JW8k4DM0pjot15c8VbxAJ5HTL+V7YT3A0=)
2: Yz1F2rqvJTcqG3g6V0vESHcoWQk.roa (hash: uqU7Z+1Ai65Iy0koLlSQKkjmTH9OHYbhCjqXFSnYbA8=)
3: b69IsCuX3C0xIlCqI0CDuMG7noE.crl (hash: sXeCJ3S1mlSg2VduzSd+3BeYI6FUJM+tP4liL1WuBto=)
4: uejJGeBDuzCDQxudVuMI70V-pGs.roa (hash: BSepZGrADNb3VYStxDeZMexjvdT9hfJ7uidNLEEdkHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:ea:c5:f1:f8:4c:2a:a5:50:a4:c4:0b:6d:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: May 6 19:00:53 2025 GMT
Not After : May 7 19:00:53 2025 GMT
Subject: CN=86807a4314e1c5631ef0006714fd1e7384f58f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:6b:54:d0:1a:10:cc:67:5c:79:f5:de:53:
25:bf:ba:b0:5e:fe:71:ab:e5:6c:9b:e9:16:f6:17:
50:0a:7e:18:ba:b0:d7:0b:ac:e7:5b:52:da:46:e6:
62:9e:bd:2b:97:7a:32:cb:d8:39:3f:45:17:6a:50:
6e:79:23:aa:fe:c5:fe:d3:5a:3d:0e:46:a1:a1:34:
23:4d:a1:e8:e7:61:a3:d3:2a:2c:4f:65:30:fb:bb:
38:c3:a7:20:30:3f:e8:6c:f7:27:51:6d:b9:3d:07:
df:6f:cc:e2:06:64:3c:18:5c:df:68:6a:32:ea:33:
66:dd:79:d4:15:be:71:c0:a5:3b:fd:c8:e1:26:14:
78:a2:83:56:8a:19:c8:4b:6e:a4:ea:f5:14:c3:b1:
cb:b5:fb:86:9c:41:14:d3:ce:ed:27:85:00:23:8d:
c0:7d:86:c9:8d:56:42:43:b7:96:f9:5a:53:80:1a:
3c:34:ad:f2:b1:6b:8b:0b:86:f3:d5:9d:84:df:72:
c5:45:8b:66:2f:80:c6:5f:e4:62:98:78:2b:bf:9c:
7d:e1:e8:06:0c:9c:43:59:40:ef:62:5b:1f:ad:2d:
48:26:b8:a4:0c:6e:0e:a6:17:ed:1b:da:67:b0:13:
da:72:5e:53:c8:19:0d:46:b2:4a:e0:77:e2:c4:1b:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:7A:43:14:E1:C5:63:1E:F0:00:67:14:FD:1E:73:84:F5:8F:0D
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c9:a8:d4:8a:a5:59:c0:f6:61:ce:75:3d:2b:b5:f6:cc:c6:
cc:71:97:10:c6:b3:5d:db:5a:8a:44:ac:fb:e1:0b:a7:5d:cc:
b0:45:69:09:c7:ef:c2:44:c8:5a:ba:7a:36:44:04:31:97:70:
5e:1f:13:c0:5b:de:72:a5:cf:e6:54:78:2c:fa:bc:7a:37:67:
2e:b5:ca:6d:ca:69:81:ad:6e:d6:93:37:6f:25:c0:87:13:78:
0f:eb:d6:f3:83:54:cf:89:ab:fa:d2:ce:35:6b:61:6b:9b:fb:
c4:ab:40:ac:b9:c7:71:06:a5:f0:3b:40:b9:b0:a7:30:01:24:
1f:e9:4a:ce:d1:8c:e6:91:18:79:d5:62:22:f4:e2:19:9c:ca:
7c:88:77:cc:21:d2:ab:28:ab:da:a5:6a:7b:12:ce:2b:9b:6a:
42:28:6e:9a:5b:ae:1e:cb:94:b9:c5:02:31:24:5c:6d:f4:3c:
c8:a0:61:ba:6a:d6:f3:09:d5:0a:78:3f:44:7e:9f:53:ef:e4:
16:d5:fa:01:a0:6b:a1:87:49:f5:4d:a0:e4:6e:0e:1f:77:7c:
34:90:04:4f:4c:56:f4:6f:8a:38:35:b3:db:88:a8:e8:3b:5a:
67:bf:7b:91:6b:47:11:d4:cc:3c:40:27:55:15:e2:f2:fe:f8:
57:56:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:22:18 2025 by rpki-client