Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: N1Z7al5d8cM7mVkISkriQbu+tqeauYGTSHlaEpc9dgU=
Subject key identifier: CB:78:F6:3B:D5:9F:31:CA:E1:05:87:01:C6:7E:5F:B4:8A:53:31:8F
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 0196B9DACF1F23567DCEC3DCB48FC43879A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: DA
Signing time: Sat 10 May 2025 11:00:46 +0000
Manifest this update: Sat 10 May 2025 11:00:46 +0000
Manifest next update: Sun 11 May 2025 11:00:46 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: iQ6X7pVYr4gcsq/e6AjLJlDnifMF6+4lUhW58CiPQxo=)
2: gYQl8tX6UzR3RDmi_Q8x7-FjoRo.roa (hash: Ql10T2YHVZxrbMNqGA2K5KVTFR5OZbWrykLTc4F+v5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:cf:1f:23:56:7d:ce:c3:dc:b4:8f:c4:38:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: May 10 11:00:46 2025 GMT
Not After : May 11 11:00:46 2025 GMT
Subject: CN=cb78f63bd59f31cae1058701c67e5fb48a53318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:66:7e:f1:41:23:9b:7c:eb:9a:93:3b:f9:
4b:44:07:4e:6a:f4:c5:2d:58:bb:46:23:dc:7e:50:
16:c4:de:bd:91:29:db:2a:82:dc:80:bd:82:18:30:
59:36:e6:fb:d7:f0:58:6c:d4:19:c6:70:c2:0f:a6:
5b:1e:d6:cf:26:0d:b5:cd:93:ec:c0:01:e0:fe:1a:
de:73:69:39:44:1f:77:45:c1:a8:c4:fe:52:75:ba:
22:87:34:3e:c3:e0:72:19:aa:65:98:13:a3:3b:c0:
b9:d1:05:45:49:8d:37:9e:17:7b:4f:35:0e:43:8a:
d6:47:a5:d9:33:a9:f4:8b:4c:c5:3a:7c:df:2f:2d:
22:98:21:ac:99:0a:6e:4e:7d:b6:62:f4:25:33:81:
c6:14:50:fa:0b:11:0d:65:82:05:c7:1f:08:0c:1d:
de:47:44:98:87:68:c3:98:c0:6b:35:45:1e:bb:20:
c9:1f:0e:15:d0:7a:6e:cc:5f:66:1a:fd:88:d5:f6:
85:1b:0f:5b:b5:86:d5:90:08:2c:82:2a:3d:e4:2b:
9b:54:3d:19:19:7f:5d:27:a0:d6:09:9e:bc:30:47:
32:a4:96:61:c8:d5:89:03:c5:3a:4f:0f:d9:a2:b7:
c1:f7:49:0f:9b:66:df:fe:c1:4e:59:1d:fa:f9:d0:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:F6:3B:D5:9F:31:CA:E1:05:87:01:C6:7E:5F:B4:8A:53:31:8F
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:46:e3:e9:18:84:f4:5e:68:b3:d6:60:88:28:5e:d3:f0:57:
b1:f4:ef:62:06:37:f2:80:95:e0:91:7e:07:1d:48:84:d3:f2:
c1:40:c8:cf:cd:25:c5:e9:d9:76:1d:33:c3:45:99:85:b3:b2:
20:73:f5:08:ad:c1:18:2d:89:19:77:ac:e3:40:f5:92:d3:65:
3b:58:03:88:cd:61:3e:45:9e:63:b0:6b:6d:8b:77:3e:ff:bf:
c4:08:a0:b9:60:ae:18:54:bd:13:90:dc:54:22:b6:da:f7:5b:
0c:1a:b9:f7:4c:66:3d:a3:11:0e:20:81:0b:98:3e:39:b1:8f:
a6:17:b2:b3:8f:f9:26:e5:68:22:4c:61:73:80:6f:a7:59:08:
47:99:bb:d7:0e:7b:6f:c6:83:e7:88:9b:e8:88:7b:81:26:12:
77:0f:e5:30:bd:92:2e:e2:a3:4d:3b:3e:65:db:16:55:78:38:
23:0e:3c:85:74:66:cf:09:6e:73:a3:a5:95:70:8e:bd:38:d1:
55:f5:4c:a8:8e:90:dd:86:2b:99:c6:c9:9f:6b:28:2b:da:ee:
8f:d4:2b:38:b6:b3:ba:45:8d:3f:c1:e3:08:5d:e8:e4:4d:f8:
08:67:bb:f6:f1:cf:66:1f:4e:cf:be:c1:d2:9c:85:e1:7f:72:
7f:30:ec:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:01:05 2025 by rpki-client