Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: HZ7siQ6NujXEHPtRqgKBIjLrrRI/VGpEg0mlTZ8l82k=
Subject key identifier: D7:36:A7:69:87:63:73:DA:97:6A:33:8C:DA:A2:59:D1:C4:25:9E:C4
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0196BA48B886A1BC647E794ADB5C04639239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 13:00:50 +0000
Manifest this update: Sat 10 May 2025 13:00:50 +0000
Manifest next update: Sun 11 May 2025 13:00:50 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: bDDl+v0GnO4+yi4+dmN16E6sL9fRLoDitO69/h37Bv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:b8:86:a1:bc:64:7e:79:4a:db:5c:04:63:92:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: May 10 13:00:50 2025 GMT
Not After : May 11 13:00:50 2025 GMT
Subject: CN=d736a769876373da976a338cdaa259d1c4259ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:68:91:59:ab:17:f5:e3:20:c7:a9:88:38:
cb:3e:85:52:07:1c:f8:49:a6:df:5d:4e:1f:43:43:
90:73:cc:39:81:c5:e1:77:a8:f2:61:00:70:b1:ae:
34:42:bd:17:a7:5a:be:c7:7b:dd:ac:b2:bc:4e:af:
e5:fe:41:20:c0:96:96:21:b4:00:69:8f:81:9c:f6:
ab:06:c4:0e:7f:eb:fb:6c:08:68:21:c5:00:34:05:
90:04:b9:7f:71:d5:20:38:11:bc:7b:70:1c:4b:62:
36:fa:79:93:3d:08:c1:e8:39:e7:f0:64:38:ee:d5:
07:5b:de:a7:31:5b:68:a4:de:43:ea:ff:ea:51:61:
ff:7e:51:82:1a:7b:f9:44:78:44:33:59:93:79:6b:
79:eb:ff:48:ff:5c:58:2e:90:65:43:c3:8f:e8:9f:
ba:89:5f:0f:5e:43:53:68:5f:00:4b:55:0b:60:a7:
38:f9:e9:59:c6:76:0a:1f:fb:c2:e1:d7:22:e1:ac:
f2:c3:6b:1e:52:fc:ba:f0:c7:3e:94:24:44:8a:a4:
47:c8:7a:ef:2c:65:ee:0e:f7:8a:7a:c7:5f:d6:a1:
0f:5e:14:ca:c6:00:70:c0:7a:aa:27:18:2e:02:44:
51:46:43:85:61:2e:4a:e9:10:73:fb:dd:0b:d1:ef:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:A7:69:87:63:73:DA:97:6A:33:8C:DA:A2:59:D1:C4:25:9E:C4
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:f0:65:96:cb:9c:5e:0a:f8:87:ee:51:53:54:fd:3b:e9:
d8:81:82:ec:e3:88:22:f5:20:93:47:ec:91:e9:7b:23:b3:b5:
32:7f:5e:4a:63:33:14:8b:27:b5:12:1d:2a:03:20:5d:85:1f:
ae:11:9f:32:0a:5b:13:46:59:2b:17:8b:91:9d:fb:3a:48:83:
74:df:0f:dc:36:f9:fa:09:2b:4d:06:76:ef:b5:aa:a0:75:53:
51:62:b0:16:12:73:6b:f0:37:bd:02:88:91:7b:4a:5a:89:b7:
df:40:b3:41:5f:ac:28:40:91:28:c6:69:d6:85:91:ea:97:5c:
b3:ea:f3:18:27:49:18:6d:60:13:b0:ad:34:c9:79:aa:95:9e:
00:c6:8a:1f:20:cb:d1:ae:fd:a0:18:4a:fb:be:f1:e9:29:76:
0f:c2:25:f3:8d:b1:a5:1d:19:64:0d:a9:cc:bd:1c:0b:d7:9b:
71:ff:e8:69:5a:08:ec:b6:a7:70:fe:a2:4a:f6:80:b9:c9:c8:
56:47:2c:bc:c0:fc:ce:08:d3:b6:5f:8a:f6:25:94:62:4a:c6:
bb:58:79:45:04:a5:e7:f7:27:28:80:34:b7:67:e3:e9:92:d0:
53:00:96:7b:ce:5c:2e:7d:f4:21:b7:09:94:3f:a7:33:b7:bd:
e6:1f:e1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:18:16 2025 by rpki-client