Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: Fo2BvIodsG6TwhQADVsU8OXYshcdCnNxpO2Q95s/0xY=
Subject key identifier: 8F:E9:12:FC:1D:A4:DE:C7:38:1E:B9:4B:3E:84:1F:B8:05:CA:4F:E9
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 0196BD12C24932587C6207112E63C113FE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 02:00:45 +0000
Manifest this update: Sun 11 May 2025 02:00:45 +0000
Manifest next update: Mon 12 May 2025 02:00:45 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: dvyR75MPkOOv/y4K6iMB6GuAypIJiIUqkqnbM6nm+wo=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:c2:49:32:58:7c:62:07:11:2e:63:c1:13:fe:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: May 11 02:00:45 2025 GMT
Not After : May 12 02:00:45 2025 GMT
Subject: CN=8fe912fc1da4dec7381eb94b3e841fb805ca4fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:53:ad:6a:23:bd:2a:b8:75:3f:16:5f:2b:
b5:da:d3:a3:4d:56:4a:d8:de:ae:61:c6:49:72:dd:
48:ac:2b:32:6f:40:e1:33:d4:67:66:88:e0:6f:8f:
56:56:d4:66:59:b7:a4:45:45:24:f3:82:0b:59:59:
5e:48:57:48:19:9a:8f:dd:37:56:74:51:9d:c7:00:
15:ed:83:3f:82:83:8d:1a:16:4f:32:43:c9:48:f5:
e4:ec:0e:32:f5:f5:3e:44:44:db:77:d6:2a:be:71:
7b:ee:3e:49:5a:e4:2d:d5:c5:8c:7d:ef:3d:3c:99:
29:dd:9f:06:05:31:02:a6:74:c0:69:47:13:e6:cb:
e6:01:1d:a9:89:c0:8f:cd:15:d4:bb:cd:01:1e:70:
4d:4f:84:f3:d1:dd:39:8a:c0:de:6e:62:78:a3:d7:
f9:5a:71:bf:aa:e3:e7:15:7f:cc:ac:7b:ce:4d:d3:
25:00:e5:5c:2b:f6:31:0b:d3:ea:35:92:49:d3:5f:
77:e2:c2:e2:6b:cc:82:8a:2b:2d:e7:c4:5a:5c:8c:
cb:4c:a3:11:90:59:87:98:cd:e4:e9:63:40:44:a2:
00:96:80:00:1a:f9:17:cc:75:0f:06:ea:ab:d1:2d:
02:b0:47:4e:fb:0e:16:05:2c:3b:67:bb:4f:a9:04:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:12:FC:1D:A4:DE:C7:38:1E:B9:4B:3E:84:1F:B8:05:CA:4F:E9
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f3:2e:68:84:26:ad:ab:95:36:a5:e1:da:23:e1:0c:43:c8:
5b:70:47:e6:7a:a4:7f:78:f8:68:57:02:f3:4f:eb:8e:c5:5a:
1f:08:fc:9e:f8:cc:ae:bf:65:04:df:4e:75:ad:ee:1c:1a:7b:
09:91:7f:da:97:6c:da:5c:6b:41:ad:73:c6:70:e5:e1:c2:ac:
50:3f:db:72:c3:b1:85:b1:c5:7b:d3:9c:78:8b:3e:da:99:ec:
88:bf:a1:64:76:76:96:41:50:7a:93:bd:fd:ca:fc:69:23:9e:
c5:4f:c9:e8:88:0f:77:9e:23:25:fa:ad:18:6b:b3:93:9c:49:
54:b1:7c:50:ee:02:41:4b:c6:ba:bc:11:54:cb:a0:54:b3:50:
1a:55:c9:94:7b:fa:90:95:cb:f3:67:4d:69:8c:47:1b:ac:fc:
49:65:9f:f4:16:60:ef:c0:fd:48:30:38:72:4f:d2:a9:18:72:
86:23:95:8b:a1:90:e4:df:0d:87:98:89:ce:49:44:c2:94:02:
f2:27:52:2d:68:cc:78:de:53:1c:72:23:05:d0:3a:6d:9e:5a:
9d:7a:b7:af:a7:c4:02:1c:0e:60:52:a4:4b:74:f0:94:69:7d:
3d:2a:9e:c0:21:34:bf:e6:dd:2e:41:a4:cd:63:e7:d5:c2:55:
07:f1:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:36:25 2025 by rpki-client