Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: KwkMv1REGhM9GCgMQJJUAJRZY/SN1dTAXYayW14Z5O4=
Subject key identifier: AB:A4:8D:65:62:5D:C8:3B:F9:12:75:3C:C7:06:2A:91:64:C9:C6:BE
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 0196A6F8DC1D4C3FADFA14BCD5515B97D762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 04E1
Signing time: Tue 06 May 2025 19:00:49 +0000
Manifest this update: Tue 06 May 2025 19:00:49 +0000
Manifest next update: Wed 07 May 2025 19:00:49 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: png9mR2PiTKpBDJpbIWf2lMxPfbcPk9EU1GiYF7j1fs=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:dc:1d:4c:3f:ad:fa:14:bc:d5:51:5b:97:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: May 6 19:00:49 2025 GMT
Not After : May 7 19:00:49 2025 GMT
Subject: CN=aba48d65625dc83bf912753cc7062a9164c9c6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:60:02:f8:3b:27:99:99:32:f1:ba:44:cb:
29:99:f2:3f:5f:6f:56:d0:6d:72:a9:b0:b7:05:74:
7c:c7:b6:9f:53:70:ea:7a:98:74:08:71:11:ed:b0:
46:3e:fa:22:d0:ea:25:92:b4:69:af:8c:6c:f1:00:
91:63:2a:3e:88:0a:6c:8f:9b:0b:2b:d5:7d:01:d1:
cd:18:ea:fe:f5:e0:e9:58:b6:25:64:e7:bc:bc:53:
f1:96:b6:e5:08:ba:ac:d1:0d:b3:96:0e:8b:c2:59:
33:c4:70:2a:4c:da:ff:d4:b4:2a:05:fa:bf:58:75:
c0:83:85:e7:22:ae:e5:c4:c1:84:9e:d1:ed:67:41:
01:8d:cf:26:95:b6:49:7f:6a:45:f1:6b:34:ff:8f:
d5:99:16:26:4c:6f:b4:c3:56:91:7f:a3:a3:66:b3:
46:72:92:e0:80:17:cd:37:15:2f:d9:1c:63:5a:9a:
cb:13:56:50:7f:82:9c:e1:7e:6c:f8:52:3a:a1:97:
6f:00:cb:1b:fb:70:b9:23:7a:72:94:d8:3c:c4:d7:
0f:32:e3:02:77:cd:ed:ff:91:7f:f8:bf:55:22:b9:
7b:f4:df:f9:4b:0b:b6:43:91:f4:5e:b5:f2:bd:65:
96:79:1a:28:9f:93:18:c8:5f:48:30:76:be:87:03:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:8D:65:62:5D:C8:3B:F9:12:75:3C:C7:06:2A:91:64:C9:C6:BE
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b3:ec:52:3c:8c:40:6b:78:19:e5:51:02:21:73:0d:b6:2d:
e4:3d:07:8c:06:7b:97:02:ba:97:5c:f5:e1:5b:09:30:a9:6c:
7a:2a:17:63:67:ed:a1:59:25:8b:d6:4c:44:fb:9e:55:5c:21:
4b:41:44:21:67:16:ce:1c:00:b1:0d:a3:0b:8b:58:bc:da:ad:
58:45:23:07:8a:00:ee:af:04:2a:72:b9:03:9d:31:33:d7:83:
b0:eb:6c:eb:05:64:e7:c6:f6:44:c9:83:7a:c6:47:cb:62:d3:
d0:34:0b:e7:d7:a3:77:40:a9:50:55:9d:17:e6:c4:f0:43:77:
f5:45:44:b4:e0:da:e1:c2:34:d6:d1:33:7e:37:33:30:04:77:
a2:31:57:97:d1:f7:10:01:63:57:30:0d:ea:85:ce:90:12:8f:
43:30:bc:64:7a:7b:99:9e:95:25:88:04:ed:53:47:c7:ca:b8:
ee:29:6d:18:09:7c:9a:aa:a5:2f:7c:de:61:64:62:0a:0b:7b:
99:e0:70:70:79:05:dd:c7:ad:71:f5:a1:e3:75:ce:5a:86:7b:
5c:0b:67:8c:19:f7:06:0e:2c:38:ea:49:66:72:96:99:66:a3:
e8:93:ce:83:b1:f3:58:52:78:5c:a4:b6:18:e3:ce:f8:e1:66:
f1:3b:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:21:25 2025 by rpki-client