Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: +TBnzHeRzLElRJpeFnTfbgIUMGB4YeMD1W89VsfOA+I=
Subject key identifier: BE:19:70:72:0A:FF:88:E0:F8:37:D3:21:44:AC:42:6A:91:48:4F:57
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019682107ED723060B058BEB946FDFEF1890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 106C
Signing time: Tue 29 Apr 2025 15:00:41 +0000
Manifest this update: Tue 29 Apr 2025 15:00:41 +0000
Manifest next update: Wed 30 Apr 2025 15:00:41 +0000
Files and hashes: 1: g6miMFkmw-84cpq6Pcsn9vno9ds.roa (hash: vkmmeZTgxYyRXsXUZxOPVQEHj1CbRMTASbWiNLbOCCA=)
2: nzP88bjh-XEZ2kCW3oiiu2uSEHc.roa (hash: Kf5r0P3IvTLCYpsr+vk6c4IGLFB/DHZsFGgImWavBWE=)
3: obm9FeEGtL9WBvwQOJ_EPBQy1Sw.roa (hash: DIxEIASe/fpNf2y+lackh7oQZ1Go69j0HnvSMs0Rszo=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: DAUg9V0yQwsMnsQJ/KaUvU6Xz90p4T0mfXs3Kw5vKlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:7e:d7:23:06:0b:05:8b:eb:94:6f:df:ef:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Apr 29 15:00:41 2025 GMT
Not After : Apr 30 15:00:41 2025 GMT
Subject: CN=be1970720aff88e0f837d32144ac426a91484f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:0e:ac:14:b6:43:e5:80:5e:a7:85:3d:9d:
4f:39:74:bc:d1:ea:ab:09:14:95:fd:f6:b4:59:8f:
d4:ea:24:9e:94:f3:fc:45:cf:38:2f:0e:83:1d:45:
85:d0:38:76:6b:3b:90:05:8d:b3:64:48:05:b0:67:
61:86:e5:24:03:33:7a:7d:80:c8:53:73:a2:32:f3:
e2:52:f3:05:5c:8d:76:5f:31:2b:5b:4f:e9:ae:58:
bf:b7:56:4b:2b:e5:9d:a2:d6:53:67:33:93:ad:94:
38:c4:cf:32:de:72:a2:9e:8a:38:fc:63:ae:84:fe:
4d:e3:c2:bd:eb:63:9e:0c:7e:40:f6:64:47:41:9f:
98:7c:9b:a9:5c:d6:1b:e6:c9:66:46:bd:b0:ca:e8:
c3:e1:42:63:12:1b:2a:c6:c0:5e:4c:ea:94:ef:75:
a4:3f:7e:08:6d:04:64:56:1e:6f:c1:65:b4:90:bb:
88:f9:25:5a:14:f1:3c:26:0e:a4:80:e3:8b:e8:03:
be:0d:5b:aa:af:e3:c7:48:2c:43:41:aa:49:1f:fd:
e6:79:42:f3:44:48:f3:99:74:83:81:0c:65:bd:ee:
5b:1c:ac:91:18:91:53:f7:2c:d5:ca:e3:9c:45:d0:
0e:4c:3f:54:56:1f:e8:75:ab:64:8d:c1:c3:1f:15:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:70:72:0A:FF:88:E0:F8:37:D3:21:44:AC:42:6A:91:48:4F:57
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:71:a5:a1:3c:74:27:d3:31:de:76:33:86:6b:c5:ef:2f:
51:67:fe:2f:c4:d1:2e:da:9a:18:69:5e:a5:ef:3f:df:f1:81:
ff:ff:6c:f7:02:92:3c:6e:eb:92:64:50:1f:e2:11:12:8b:3c:
97:0a:d6:40:6f:07:78:8f:51:5a:f2:b8:47:fb:0a:d8:fb:e5:
62:a5:c3:08:84:b3:bb:da:d0:92:93:15:d8:54:19:39:a0:28:
19:56:f4:f0:70:78:43:15:ac:28:c3:f4:85:6f:37:2d:46:c8:
83:dc:0f:ac:36:8a:0d:33:fd:72:8f:32:cc:1c:38:61:84:ae:
ab:45:9e:7d:ff:10:08:03:01:98:5a:e7:4a:ba:3b:f8:b8:c8:
4f:49:5d:d1:3b:eb:cb:9c:a6:85:96:66:a9:84:f4:9a:e7:43:
69:a9:aa:33:8f:62:44:02:08:0f:f9:29:82:08:2a:f9:78:4d:
f1:11:4a:09:1a:4a:90:d4:1e:21:7b:88:fd:96:42:5a:c4:92:
23:7b:e7:f3:ec:20:c6:a1:0c:d8:89:13:3f:28:d3:16:6c:3d:
e9:2d:61:5c:7d:f4:a1:c0:72:cb:3e:0a:ad:95:f5:ab:5d:78:
c7:c4:07:89:40:90:d6:e4:a7:b6:ce:95:75:b5:85:46:f8:a6:
49:c2:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:37:35 2025 by rpki-client