Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: H3Cx+XLiPr98yDB5OQUWcwaKM0zZgYRTeTG+RZynsLg=
Subject key identifier: 68:84:62:26:E6:B8:CE:EF:EB:EC:52:A5:62:E9:97:C7:2D:D3:0C:55
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0196C9F25F724BF32C11C9E14375C873922A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 05AD
Signing time: Tue 13 May 2025 14:00:26 +0000
Manifest this update: Tue 13 May 2025 14:00:26 +0000
Manifest next update: Wed 14 May 2025 14:00:26 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: DHbls5CViKFcK29GtyVWVVplQIkS4uhFfKjIVn0dvAs=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:5f:72:4b:f3:2c:11:c9:e1:43:75:c8:73:92:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: May 13 14:00:26 2025 GMT
Not After : May 14 14:00:26 2025 GMT
Subject: CN=68846226e6b8ceefebec52a562e997c72dd30c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:15:ca:87:bc:98:27:8b:df:66:9b:30:7f:
8b:a3:4f:69:e9:c3:5a:36:d4:e9:68:b7:59:97:63:
82:a7:b6:55:73:e5:88:95:a2:4d:65:81:2a:68:c6:
f1:65:4f:19:32:14:3a:59:f2:46:50:58:ed:33:bc:
f3:39:5e:0d:c8:91:48:9c:a3:9f:c9:cc:c4:2e:3b:
76:cb:e5:f2:73:e2:9e:38:aa:68:d1:77:0e:72:9d:
ab:2f:b9:5e:07:36:38:35:13:26:a9:1f:89:59:c3:
07:53:db:97:b0:ff:6b:cb:6a:4d:50:02:71:bf:d4:
ca:35:87:03:ad:65:a8:d4:d4:2c:87:e9:49:a4:4c:
73:01:da:e1:72:2f:89:37:ee:98:d4:f8:40:8c:cc:
2f:fb:ce:3a:b9:f1:47:19:82:6a:6d:b3:14:62:e1:
55:b7:f0:82:36:b3:bd:67:e2:0a:81:bb:97:19:fa:
b2:d4:69:43:7f:1f:1a:6c:fe:0f:06:d4:f6:26:af:
cc:77:4c:d4:1a:6c:34:9e:d7:ec:5a:0b:d6:ab:d7:
3d:09:15:5b:81:42:25:f2:17:e7:4a:62:c5:dc:ba:
bb:8f:92:62:a6:87:6e:e5:97:46:cc:17:e0:41:09:
35:bf:ee:fb:1f:ac:05:98:6f:18:89:5a:4a:8d:76:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:62:26:E6:B8:CE:EF:EB:EC:52:A5:62:E9:97:C7:2D:D3:0C:55
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:03:58:b2:73:e2:51:5d:d0:77:5d:0c:57:a2:c7:6f:c3:
eb:b2:66:65:08:fe:8f:21:a7:b9:7d:21:da:3e:7f:84:8b:37:
21:c5:29:75:5f:68:08:31:0d:b9:7a:71:92:37:9c:9b:cb:9e:
27:78:bb:95:73:87:a2:a0:67:87:bc:76:f2:a6:f6:3a:f3:c3:
54:50:f4:6e:f9:20:2e:fb:b1:f9:1b:56:97:e1:35:0a:1e:60:
64:50:51:f7:13:fb:b9:1f:3a:b3:21:74:bc:94:d4:dc:88:e1:
26:a4:2c:d9:da:87:35:29:07:a1:a2:e4:29:aa:77:47:fa:99:
65:9d:f9:fb:1d:35:69:d7:c4:eb:26:05:4a:f9:8e:28:35:29:
f8:87:3d:ed:e2:a9:c7:4c:c0:f6:34:e6:68:80:c1:e7:c4:fa:
7e:35:44:45:8d:26:9f:06:31:a9:20:bf:45:d6:50:40:29:96:
2e:07:9e:73:a2:88:11:cd:11:67:2f:2a:68:e6:f2:39:f6:1e:
dd:13:57:0e:19:34:99:0c:48:83:63:06:cc:19:9a:a3:be:ba:
f0:25:4b:cd:3a:09:4a:00:36:ce:67:b3:b5:93:c0:fd:58:19:
01:29:2a:e0:9a:14:77:19:8e:44:53:ea:77:b7:06:4a:38:3a:
0e:67:5e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:47:19 2025 by rpki-client