Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: y/op9/ctNnSdWnOiaf7p0rCpa6lkWy2g+d7OjoYPIQQ=
Subject key identifier: 0B:60:D1:0C:E1:69:8C:38:BB:3B:9F:EC:0A:0F:DC:F4:A6:14:65:AD
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01969DF595BC844C769F998FD4FE6FCEDAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 14B9
Signing time: Mon 05 May 2025 01:00:39 +0000
Manifest this update: Mon 05 May 2025 01:00:39 +0000
Manifest next update: Tue 06 May 2025 01:00:39 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: TsiLRvcKyMAOnpJ2vIu/n9qd2/AZ5Se7Wn+fRSHmJN8=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:95:bc:84:4c:76:9f:99:8f:d4:fe:6f:ce:da:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: May 5 01:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=0b60d10ce1698c38bb3b9fec0a0fdcf4a61465ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:ce:d4:bb:32:d2:f1:1e:f5:00:43:6f:98:
37:10:7e:a2:21:51:07:86:bf:99:12:7c:9a:ad:79:
bf:82:62:97:ca:f6:4f:52:3b:00:47:55:bf:52:aa:
4f:7a:09:51:08:ec:6e:a8:52:21:51:9a:27:91:2c:
f9:33:1a:3a:73:70:df:5d:8a:d4:77:ed:fb:05:cb:
24:6c:77:1b:26:59:93:ac:6d:79:17:83:73:b5:dc:
c0:a5:93:f3:a9:2c:10:77:3c:72:d8:8d:86:f3:3a:
14:45:5c:c0:a2:13:de:8e:72:43:ae:73:67:67:0f:
a1:cc:26:63:f3:d1:41:b1:36:69:68:43:28:b6:e6:
a1:6d:5c:04:23:1a:e0:74:62:cc:d4:bf:a6:61:d3:
66:84:82:79:44:2d:4e:95:f1:d6:a0:96:c2:7d:22:
5e:c9:d9:cc:7a:2e:a2:4d:89:44:04:81:eb:81:c1:
36:b7:e2:e1:aa:cd:26:21:68:ce:a8:d2:6e:0b:98:
00:f0:aa:f5:06:cf:cd:34:8a:28:6b:6e:58:be:8c:
a9:b6:be:23:84:51:a3:25:ec:34:b0:61:06:83:ad:
91:5b:3a:03:1c:34:9b:7a:f2:e7:cd:e2:bb:46:a1:
5b:2b:02:6b:13:0f:f7:39:32:d3:63:96:fd:29:9b:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:D1:0C:E1:69:8C:38:BB:3B:9F:EC:0A:0F:DC:F4:A6:14:65:AD
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:38:07:6b:6b:d7:93:49:8d:57:3b:43:b6:45:e8:8b:87:d8:
e0:fa:96:68:4d:e3:24:b4:ab:6d:7a:77:14:27:a6:13:99:e1:
15:52:90:8b:c7:e0:a0:48:36:94:4e:03:13:c6:94:ae:f4:81:
90:5e:9f:d0:c5:b7:53:1c:95:6e:15:94:b0:b7:a7:97:f1:9a:
a3:17:12:30:a4:07:2b:60:f7:0b:10:82:cc:f2:50:98:d2:25:
14:2f:58:b9:dc:b2:6f:1d:9c:20:71:a3:1b:1e:22:c5:66:1d:
48:9a:f7:c2:11:8d:aa:dc:f4:1d:c8:02:9c:9a:b9:ce:b8:77:
c8:fa:64:3d:a6:b1:34:4e:d5:85:8c:69:f8:47:56:49:31:a8:
c9:9b:11:d4:d9:a9:4a:8c:01:4c:f0:c8:31:38:43:fc:4f:f9:
a9:23:60:19:14:c8:88:2e:40:67:82:68:75:e7:5f:05:62:bc:
67:6e:0f:a3:37:58:49:12:37:da:66:33:23:a5:7a:01:72:61:
d1:a4:46:ba:0f:ec:af:d2:21:09:b9:92:9b:0c:e4:96:76:9d:
84:64:a5:c5:eb:6e:a2:71:7f:3b:90:c2:11:6b:3d:76:f2:05:
c9:3a:02:ac:88:a2:59:98:55:c9:69:ed:ff:a9:9e:2b:25:86:
64:cf:a5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:45:22 2025 by rpki-client