Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: NUj+0D4SMNHTp2LutmsC4DaALc52rJsTRnbSNhYs3ec=
Subject key identifier: 3B:5C:B4:BB:8A:FA:60:E6:9D:9F:98:05:61:F0:1E:3F:27:E4:46:09
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 0196B8FEDD782807DAB355DBC6AFA8417D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 07:00:32 +0000
Manifest this update: Sat 10 May 2025 07:00:32 +0000
Manifest next update: Sun 11 May 2025 07:00:32 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: f4scT/p4cwJc1PLsGHycA45SXuw7QMXttDTe7SWHD1Q=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:dd:78:28:07:da:b3:55:db:c6:af:a8:41:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: May 10 07:00:32 2025 GMT
Not After : May 11 07:00:32 2025 GMT
Subject: CN=3b5cb4bb8afa60e69d9f980561f01e3f27e44609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:66:c2:dc:1e:32:d8:78:13:0b:64:25:4b:
bc:13:69:d4:25:e5:b5:55:cd:b1:b0:41:70:12:59:
f2:04:d7:79:7b:4a:d6:25:54:55:c9:08:1e:66:67:
2f:be:f9:a2:f0:c6:da:b4:a9:b3:b2:38:6c:48:7a:
98:9a:aa:e9:13:07:e5:d2:b3:7e:43:55:fc:04:63:
50:94:43:bc:b7:b1:b3:f1:eb:6d:95:85:92:18:9d:
8a:68:f5:52:9e:7b:92:64:b4:76:e9:a4:7b:9e:53:
d8:26:6f:83:de:2c:3c:0f:52:e9:90:76:41:00:da:
26:9a:21:de:9d:f5:cf:fd:d7:c5:d9:cb:76:03:d3:
f3:57:69:80:1f:c2:b9:8f:d3:c7:ce:a7:64:73:0a:
f0:98:df:42:c9:a9:ab:4f:1a:44:58:2e:12:d7:02:
e0:f3:6c:f5:35:8c:47:0e:e4:a6:54:51:2a:28:1a:
4e:df:f4:88:22:65:36:1a:59:cb:75:e8:03:17:5c:
79:6a:2c:06:40:36:71:8c:1c:5b:29:b9:d6:b8:01:
ad:f6:5a:f1:1f:1e:0c:74:bc:60:8e:d1:5f:83:c3:
c2:e6:16:0e:b9:3a:24:99:06:d1:69:07:ec:dd:af:
50:89:41:b5:e2:d8:c3:2b:dd:0f:54:07:3d:3c:93:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:B4:BB:8A:FA:60:E6:9D:9F:98:05:61:F0:1E:3F:27:E4:46:09
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:fb:78:f2:c6:d2:c3:5a:35:3e:e5:b4:e3:16:2e:10:3f:
81:13:c6:59:5d:5c:c5:26:13:d1:bd:a4:3e:cc:3c:65:97:61:
80:ba:06:30:0b:4b:3d:5e:74:92:4f:35:36:9d:c5:46:ce:cc:
53:0c:30:ce:db:26:34:8b:0d:45:09:ba:de:31:73:a1:15:95:
b9:1b:26:f6:97:47:b2:97:c0:41:31:43:0a:64:5b:5e:95:8a:
e3:3c:ba:1d:39:57:56:63:90:11:b9:65:e1:a7:d8:33:af:37:
43:21:78:0c:bf:bc:bf:f2:61:e1:b9:b6:e3:11:78:75:da:0c:
70:bd:7e:5d:3b:71:75:a5:f9:22:cb:4e:23:ba:2f:9f:4e:ea:
d4:16:29:e9:cf:e3:14:30:51:76:4b:42:00:c4:51:6c:f7:8e:
b1:3e:18:b1:26:a0:ae:75:21:5a:a8:2b:cb:52:e1:5d:d7:cd:
06:56:07:ca:4c:7f:a1:a3:e4:ee:fd:3a:bc:37:27:c5:c1:64:
3d:af:7e:97:a1:62:17:03:3e:43:b9:ce:7c:12:18:6c:ec:ed:
57:ba:db:09:c8:b0:0f:65:84:70:7b:09:4c:ea:03:71:e0:0e:
6f:ec:81:a0:60:e6:99:b6:74:1f:f2:15:01:bb:91:fc:39:9c:
57:61:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:05:16 2025 by rpki-client