Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
File: cBKlLoiwGDLPDuN8zath3s59EsY.mft (raw, json)
Hash identifier: OUtY/zN5vrF125K6+QJpvBE9HMV/tePGZGZj9+x8yC8=
Subject key identifier: 6C:54:C7:CF:DB:90:DD:11:48:F0:FE:A8:C7:3E:75:89:5D:C6:AE:11
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 0196A12D86093EB73BDCFA62EF4A316A0039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
Manifest number: 09A6
Signing time: Mon 05 May 2025 16:00:37 +0000
Manifest this update: Mon 05 May 2025 16:00:37 +0000
Manifest next update: Tue 06 May 2025 16:00:37 +0000
Files and hashes: 1: cBKlLoiwGDLPDuN8zath3s59EsY.crl (hash: lgrqxbQJrX4Ahkrr1XyDSE8ItumM98Tyu6weLWoqAE0=)
2: muE7z7bw5WUF44PtXee-WtjAnUQ.roa (hash: eOTAuS8cb5e4NeqERvCCoU2l75Ey2kGH2CxTpug1Tes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:86:09:3e:b7:3b:dc:fa:62:ef:4a:31:6a:00:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: May 5 16:00:37 2025 GMT
Not After : May 6 16:00:37 2025 GMT
Subject: CN=6c54c7cfdb90dd1148f0fea8c73e75895dc6ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:65:45:2d:28:95:d4:c1:45:fd:0d:5b:13:
44:98:40:77:96:60:0c:40:f0:d4:b1:66:86:7f:c7:
a2:97:2e:d8:08:67:0c:97:a2:dc:a4:be:94:1f:95:
a2:85:c7:f1:d6:6f:e0:89:56:ad:86:e5:96:67:3d:
04:6d:e3:b5:cc:27:89:ca:e0:7e:c3:cb:d3:3f:86:
b3:a8:6a:39:01:08:9e:05:82:b7:6b:e5:58:37:16:
4b:7c:bf:03:73:8a:56:14:fa:f1:6c:d0:24:7a:b0:
a2:f0:9e:07:4e:3d:e7:63:c7:54:83:fe:5f:5a:8a:
09:02:f7:4f:e2:21:e4:b2:43:dc:13:f5:09:7c:a0:
8f:70:c1:cd:e5:47:21:8a:4c:56:68:f8:64:b4:07:
03:4b:ea:c3:fc:ab:92:52:c9:92:53:09:39:fd:e5:
5f:35:e5:45:0a:29:91:94:55:4e:59:51:a0:46:b7:
e8:b9:eb:65:3b:9e:0e:d6:5b:16:65:23:84:bc:10:
10:a7:54:36:fe:bf:3b:8e:b3:b4:a8:80:4f:01:b6:
aa:6a:01:c6:45:09:20:24:67:62:ed:99:e4:d7:77:
09:48:1a:52:f7:8c:cc:ff:ca:46:ec:7a:a7:e1:8b:
f8:78:86:3d:15:1b:05:90:c4:d4:62:d5:4c:66:bd:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:C7:CF:DB:90:DD:11:48:F0:FE:A8:C7:3E:75:89:5D:C6:AE:11
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:79:c8:6c:36:3f:06:a2:94:7b:ec:20:4c:be:fa:f0:ad:
23:9e:b1:37:5e:16:6b:45:5c:8b:6a:93:0c:fa:02:53:b9:f1:
1f:1f:96:99:b9:be:a2:a3:9b:3d:fa:c5:8c:20:66:6a:12:42:
4a:78:f0:74:98:6f:f2:0a:0a:9e:8f:6a:46:bb:21:c6:42:f3:
ff:35:ba:5b:b9:9b:ce:9b:f4:38:50:83:58:cd:29:23:56:3e:
19:97:f6:52:51:2b:f1:35:bd:90:58:40:a7:ae:e9:1b:74:ca:
37:53:a9:7d:30:5a:a3:13:c2:5a:1b:e7:16:c6:b9:45:c2:78:
b6:2c:64:ef:58:fd:1c:df:47:d0:ba:18:8f:4b:96:2e:b3:35:
52:4c:26:3d:36:45:9d:dc:9e:dc:8a:bf:ff:73:49:68:a6:a5:
27:00:97:4a:19:27:7a:87:c9:cc:07:f6:0d:56:e0:b7:15:fb:
af:44:d6:a4:40:1e:e9:03:67:ed:5c:92:c3:dc:1a:e6:5a:06:
e7:e9:85:39:87:d1:be:10:02:fb:8a:7a:6c:88:c4:d3:88:63:
d8:53:74:a1:38:5e:21:b5:81:ab:f0:67:9b:dc:9c:d9:1d:8f:
02:b2:d6:06:ad:1f:6c:f0:c4:d5:e1:85:e9:2d:6d:ef:be:1a:
79:8d:d7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:19:19 2025 by rpki-client