Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: /YEobtW+nxK05hOaKml4P49+B+qFlDBJGPP75j3+0U4=
Subject key identifier: 17:05:EA:83:42:D4:BC:81:15:74:38:D1:54:D6:44:12:D7:2F:F3:E3
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 0196BB2457A2122E84DA05D24D71399B5E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0619
Signing time: Sat 10 May 2025 17:00:43 +0000
Manifest this update: Sat 10 May 2025 17:00:43 +0000
Manifest next update: Sun 11 May 2025 17:00:43 +0000
Files and hashes: 1: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: jPsNAEqm4gVvEE9TK+czXs/9u6J0UEe3v18sTdTRBaY=)
2: fcZemZl1vze9O7p9AxyuSyrFuZM.roa (hash: FwV5i3nd9L09P7VibTZwPG5Ywt6qHvbEJ0CkZEQ+EhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:57:a2:12:2e:84:da:05:d2:4d:71:39:9b:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: May 10 17:00:43 2025 GMT
Not After : May 11 17:00:43 2025 GMT
Subject: CN=1705ea8342d4bc81157438d154d64412d72ff3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:e6:94:5b:88:26:7a:6e:4f:83:c6:0a:d0:
01:dd:1e:67:65:79:c3:b0:2a:49:a2:e2:68:fe:05:
c7:b9:47:ce:37:68:71:38:64:42:5f:e8:87:f7:db:
7f:23:6f:88:18:6f:fe:e4:4e:67:e3:2c:c0:11:c9:
86:70:6d:b4:fc:17:62:04:f5:57:1d:04:87:d3:a8:
06:02:52:39:c2:8a:cf:83:df:3d:db:37:8b:63:27:
17:b9:8c:86:dc:b7:cb:a8:0c:9b:75:6e:90:22:1c:
74:cc:31:b3:5e:de:b1:a6:a4:e5:d2:e6:d7:7f:ae:
d7:f5:a3:f3:7f:31:87:3c:f7:4b:2b:91:d7:80:47:
aa:78:87:65:ef:2f:eb:7f:2a:f0:c9:88:29:1e:1f:
80:3b:7c:ae:2a:48:e3:aa:e9:cc:4c:7f:ca:22:7c:
56:6d:94:72:98:5b:3f:ee:2a:08:cd:aa:de:5b:ea:
b5:93:39:90:49:55:38:91:cf:7d:8a:5b:24:78:f0:
a7:a1:05:c4:be:69:7b:41:e0:e1:1c:98:95:e2:c2:
92:83:fd:5f:37:3b:d7:b5:9e:07:4a:c5:c3:c7:3a:
19:25:d0:16:10:f8:9e:82:dd:ab:c4:37:37:df:84:
b1:36:d4:d7:04:9c:e7:7a:bd:53:e4:52:04:50:75:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:EA:83:42:D4:BC:81:15:74:38:D1:54:D6:44:12:D7:2F:F3:E3
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1d:4d:9e:b1:25:34:58:1c:09:64:9f:2e:b5:41:76:8f:81:
15:35:cc:33:a4:3d:a8:f3:1a:a4:a8:44:d4:b4:eb:7f:23:e6:
86:6d:d8:5a:3e:cb:6f:a1:a9:ff:be:25:4a:d6:4d:3d:e8:29:
01:d0:1d:b0:7a:24:a3:e3:d9:9c:ac:12:82:dd:a8:60:02:5f:
c3:b3:f0:79:7e:5d:ec:33:47:29:d5:36:cc:cf:ab:fc:67:a4:
22:8a:ac:ab:cb:b0:59:c5:2f:d7:c7:74:8e:b1:02:e4:58:a2:
51:0c:ee:67:d7:4b:47:4c:e1:9f:23:3e:41:cc:f5:17:ef:a0:
4f:a7:98:c3:54:22:07:82:7b:fb:ec:09:d8:a7:87:cc:ee:42:
2d:80:e1:b1:60:3f:ce:27:bd:ca:0d:43:ff:d5:b9:9c:11:fd:
ff:eb:23:fc:70:97:6c:34:1d:a4:1d:fc:d5:60:6c:26:4c:20:
41:ec:9e:8a:63:71:3d:bb:2d:f8:f9:3a:c1:fc:22:6d:db:ee:
28:7f:2e:0a:bb:f2:11:09:a0:80:37:41:3d:7a:8b:40:a3:9a:
91:71:cc:1b:1e:97:17:7a:bd:1c:34:c7:d7:6d:7a:59:e7:48:
37:58:a0:65:70:9d:82:17:21:ef:35:70:04:28:c3:73:64:d3:
e1:41:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:59:04 2025 by rpki-client