Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: 38aeeZzNLVS3U6LxLThnmn4dNUHfL3mWOndxlw2Pnis=
Subject key identifier: CC:78:49:05:C3:47:74:DB:8D:CD:C1:EF:42:04:81:D3:67:5E:D5:EE
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 019684A38A9FD1610DFE0D51E529EBACA892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 1513
Signing time: Wed 30 Apr 2025 03:00:32 +0000
Manifest this update: Wed 30 Apr 2025 03:00:32 +0000
Manifest next update: Thu 01 May 2025 03:00:32 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: odeGzMbeMCAd11aJ0hrgS5AA/YhXrY8duS5qxW/dZRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:8a:9f:d1:61:0d:fe:0d:51:e5:29:eb:ac:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Apr 30 03:00:32 2025 GMT
Not After : May 1 03:00:32 2025 GMT
Subject: CN=cc784905c34774db8dcdc1ef420481d3675ed5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:ac:16:8c:8a:c0:19:64:c9:f7:e7:65:56:
80:60:81:85:cf:fb:b6:85:6f:f1:d6:fc:a5:56:97:
94:f2:bd:3b:ca:d8:d6:b5:33:03:df:fd:29:a8:37:
30:4f:cd:e5:05:20:bb:2c:26:c3:61:54:f7:75:9f:
51:58:79:39:21:cd:32:ac:f2:7d:23:91:19:51:35:
cf:37:2a:b2:69:a0:b2:fc:4e:b8:6f:54:77:3d:0a:
7d:a3:b0:3e:2e:58:14:2b:fb:d8:fc:81:fb:df:33:
15:2a:29:7e:a6:1c:6f:fa:46:49:ea:ce:40:0c:6a:
5a:7f:9a:fd:58:3b:d6:70:1d:b0:41:65:8d:30:ec:
eb:62:c5:a1:13:b4:3f:19:68:c6:e4:cf:59:5c:b6:
f7:1d:03:84:63:4c:c4:7b:6f:3a:73:25:d6:01:08:
11:27:5d:c9:b5:8b:db:01:d5:20:7b:df:6b:97:1f:
39:4c:f6:d8:6b:35:46:90:6e:6b:09:2d:23:b9:04:
db:5e:77:5b:28:b1:ee:14:e3:39:e5:68:57:ab:9b:
64:f8:3e:1d:b0:13:65:f4:10:bc:84:f1:38:f2:82:
ee:84:2b:3b:cb:a9:05:6e:7c:64:fb:8f:b2:0f:7e:
01:7e:59:e7:ae:26:fc:d7:cb:b8:ff:14:10:78:fc:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:49:05:C3:47:74:DB:8D:CD:C1:EF:42:04:81:D3:67:5E:D5:EE
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d7:7c:7a:d1:3d:94:1b:34:0d:75:91:31:a4:de:b0:b2:53:
17:fd:42:f7:0d:0b:b0:fa:de:36:91:31:eb:ab:25:8c:ab:2a:
96:87:96:a9:a8:78:09:3d:7f:57:44:2f:cf:d4:fc:cd:bd:ae:
5b:62:7d:39:20:79:c9:78:0f:86:c1:9d:3c:e3:c0:66:b9:a3:
72:66:36:d4:00:5f:d8:47:ae:27:e6:10:1f:76:3b:de:a5:39:
82:b0:ba:d6:49:31:46:fc:8f:d2:69:7a:8f:fa:69:97:ee:23:
63:19:4e:21:01:15:0b:ab:3f:99:26:c8:cc:8b:bd:37:7e:6e:
4b:c1:8f:04:42:57:63:82:59:ca:f4:af:ec:13:56:ae:9a:90:
3e:14:08:11:7f:8f:a6:0a:1e:a9:dc:4d:89:f3:96:3e:39:c2:
da:69:da:52:66:06:98:75:33:0b:f8:7a:55:56:df:ab:cd:e2:
22:eb:77:bf:79:f4:a4:81:da:3e:da:d8:03:79:4c:0c:0d:70:
8a:6d:41:ea:0f:9d:7d:36:4d:3e:9b:82:b9:b7:00:7a:07:af:
e0:12:ef:9b:96:68:20:d3:80:8b:07:75:a0:06:ce:1b:a7:f9:
f6:2a:b3:f8:46:de:af:92:91:91:f3:a8:5c:85:de:30:0f:fa:
03:bb:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:08 2025 by rpki-client