Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: zojtCUO+kPOy8bco+0ae2KHaXOhmNnJGjK4zAsR1bis=
Subject key identifier: 25:F3:EC:C7:3E:16:B2:10:18:76:22:5D:31:81:EB:05:22:97:D9:2A
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 0196BAED0C115C3B68EF835E7193143A4402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 1105
Signing time: Sat 10 May 2025 16:00:19 +0000
Manifest this update: Sat 10 May 2025 16:00:19 +0000
Manifest next update: Sun 11 May 2025 16:00:19 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: X+lkGDwh3N0KTSluQ0yYX7GIApdb1tHU8blgY7NbeBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:0c:11:5c:3b:68:ef:83:5e:71:93:14:3a:44:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: May 10 16:00:19 2025 GMT
Not After : May 11 16:00:19 2025 GMT
Subject: CN=25f3ecc73e16b2101876225d3181eb052297d92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:0b:4c:b3:78:38:d0:21:38:9f:a4:0c:ea:
ab:ef:b5:0f:63:eb:99:da:d4:f7:cc:f7:92:43:fc:
c2:9a:60:14:24:2b:c2:fb:04:1a:40:a5:35:cc:75:
b2:be:63:a2:ee:84:19:ff:23:c6:3b:91:13:a8:f7:
6c:37:1f:34:08:e5:6d:e4:cd:b1:ee:e4:a3:ed:d7:
66:4a:d4:51:52:c7:c8:47:f1:be:d6:42:61:bf:fe:
cf:c6:e4:ed:db:9f:a7:c4:43:81:43:20:73:f4:8e:
91:af:e1:88:2a:e9:56:70:ee:e9:09:a5:59:43:41:
e2:1b:1e:4f:c5:3c:4d:ca:6f:c6:2a:2d:7e:4f:0e:
3b:9a:ab:0d:36:21:29:9e:7c:ca:18:22:89:69:56:
97:da:69:fd:b8:20:5b:2d:63:27:10:d0:db:57:6e:
1a:e6:47:f9:92:66:d0:22:54:22:7c:08:2d:bc:4d:
e6:13:42:65:34:72:2b:79:f3:c2:6b:78:f1:01:41:
ea:d6:41:66:cc:f8:44:0a:d8:5b:20:e2:d2:a8:b6:
2f:2c:7e:fc:c2:3e:a1:9e:ed:38:17:ad:9d:6a:e7:
da:ba:8f:35:95:5d:82:38:fb:f3:31:a9:70:6a:4a:
35:e7:6d:bd:c2:6a:ab:5a:d6:30:59:5f:3c:da:c8:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:EC:C7:3E:16:B2:10:18:76:22:5D:31:81:EB:05:22:97:D9:2A
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d2:f9:2f:d6:cd:df:1d:c7:76:d6:45:d0:f9:a5:9d:e4:7c:
50:7c:91:91:a5:dc:59:ff:56:96:81:b1:a1:bb:bc:57:79:d4:
5e:68:92:30:2a:29:a9:8e:8b:a8:df:6a:4a:2b:b7:a4:59:73:
fb:ae:da:92:b9:65:27:66:c2:25:f5:28:8f:e3:78:f2:d0:79:
df:bd:57:ae:d9:71:80:df:2e:ae:5e:27:49:5d:e3:4a:03:26:
56:ed:f2:bd:90:08:59:74:f0:fc:40:02:16:b9:2d:3c:04:11:
40:88:90:26:d3:bb:d5:53:15:8f:5d:d3:74:db:43:ac:c8:4d:
fd:88:2c:b4:1b:61:70:63:d9:4a:23:77:9f:6b:e7:db:ef:c4:
d4:57:fb:0e:d8:e5:3a:9b:7f:28:92:08:a1:dc:dd:ff:f4:a0:
2c:7c:55:7a:f8:4c:0e:29:57:d3:7d:52:ec:72:fa:dc:09:55:
1f:9e:cd:9e:e1:12:d9:98:06:c8:f0:ed:ec:97:d8:d7:2a:6a:
a4:c2:6c:90:80:a4:e1:90:c4:ea:21:b4:e1:90:a2:54:4b:b0:
64:c9:55:91:e3:ce:0b:86:61:72:35:ec:e8:f4:ce:c0:ad:32:
24:3a:ef:3c:c9:5c:64:58:16:21:a2:d5:60:29:5b:da:2b:19:
82:13:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:21 2025 by rpki-client