Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: 5enVDOn/gYBPmIkgREsr11khI+T44HmZaWsvHEKm804=
Subject key identifier: C8:A6:56:2D:27:7A:85:27:09:F0:DE:34:FB:81:E5:41:05:5C:2B:ED
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 0196BF37C885B03064FBA117D37FEF87C290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1547
Signing time: Sun 11 May 2025 12:00:26 +0000
Manifest this update: Sun 11 May 2025 12:00:26 +0000
Manifest next update: Mon 12 May 2025 12:00:26 +0000
Files and hashes: 1: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
2: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
3: EVOvB7sDScf41BENRNWFN92qCOc.roa (hash: v9rFJdO6bVhF4g/DVUTlP2lnOU6R9fjrxCCGGRzmhBo=)
4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: 824CYbCO544C2uEXHx2s+juum8HZYJo+RkMClmVUZT8=)
9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:c8:85:b0:30:64:fb:a1:17:d3:7f:ef:87:c2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: May 11 12:00:26 2025 GMT
Not After : May 12 12:00:26 2025 GMT
Subject: CN=c8a6562d277a852709f0de34fb81e541055c2bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:df:19:c1:1a:28:bb:7a:7d:e5:0b:96:e3:
00:7e:ad:5f:9d:8f:9c:b4:4e:0a:33:46:56:4f:91:
15:3e:a9:1c:42:aa:33:df:c8:ca:a1:25:8d:e5:a1:
b1:07:d5:0e:e7:99:d4:ab:75:40:3c:35:7f:17:16:
f9:d0:41:aa:48:72:60:aa:59:d1:be:98:87:aa:3b:
75:77:41:b4:82:ca:2e:82:d2:78:9a:47:a4:58:64:
4e:b7:54:d8:60:84:45:16:08:89:e5:89:7d:e6:fe:
df:b7:d1:8b:d8:b3:fc:ba:23:13:ba:56:8a:6c:d5:
70:cf:1e:1b:92:9f:ac:d0:ca:11:b0:81:6a:d9:f0:
52:8d:bb:fb:2c:87:6d:4f:a8:17:b6:71:06:58:8a:
65:58:87:7c:5f:a1:67:f1:6d:08:28:be:ad:d1:da:
4f:a9:d5:d5:ab:a7:98:eb:da:f7:56:24:c4:7c:f4:
16:03:d0:7f:6b:e4:0f:73:45:94:87:e8:7f:f8:70:
1e:a6:1d:90:c9:53:63:4b:28:7d:e0:28:7c:d4:95:
d5:94:b3:dd:c8:97:f1:b5:ed:5d:75:9c:0e:bd:3a:
71:f0:09:31:9a:1d:48:c4:46:a6:f2:a4:2c:04:f2:
61:f0:eb:9e:c2:a1:55:72:1b:41:e4:fd:d8:fa:ef:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:56:2D:27:7A:85:27:09:F0:DE:34:FB:81:E5:41:05:5C:2B:ED
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:45:68:c4:3d:b2:53:17:ba:88:4c:cc:37:fd:eb:c2:97:
e5:28:66:6c:94:40:ca:d1:d8:be:8c:cf:1e:0d:4b:09:c4:bd:
a9:73:e1:17:d2:1d:2f:6a:0d:1a:89:9e:0d:33:6c:3d:fe:de:
32:46:8d:75:11:59:44:91:e7:73:1a:ef:90:7a:13:ad:cf:91:
43:68:d8:9a:f5:8d:5b:11:2c:b3:59:6a:5f:2d:de:58:e6:9f:
35:22:bb:05:43:47:da:3f:13:0b:1b:0f:bf:88:09:20:ca:60:
a5:c0:be:d6:a4:c5:2e:49:0e:c7:0d:22:20:cc:f8:c5:24:a5:
7b:b8:1a:08:58:7e:59:d6:f2:63:0c:e0:cf:40:94:d0:53:60:
d0:47:f5:4a:03:ee:ea:06:e5:2f:b6:25:bf:8f:ca:b6:0a:e0:
61:c7:92:82:ee:39:2c:26:9a:16:f6:d3:43:09:8e:e5:03:84:
d1:1c:f3:86:c0:e7:2a:df:a9:59:6e:97:83:c8:42:77:b7:9f:
63:82:f7:98:68:ed:88:d9:7f:0f:b0:03:8a:df:7d:f4:d8:2c:
13:3f:04:32:9b:1b:32:f7:a0:0d:93:bd:1d:0a:9f:bb:11:5f:
29:d7:80:61:43:a4:b6:f2:52:6c:ee:1e:ba:b2:26:cd:cf:bb:
8e:93:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:22:04 2025 by rpki-client