Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: g0kQR3j65/yOgfBZeL+fS9fKIGeNsnAZcTmaSoUs5g4=
Subject key identifier: 38:99:A3:FD:6D:13:60:BE:CF:59:1A:5A:3A:C6:8D:68:3C:BC:8F:E3
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01967F0F1121CF2D80FBEC98AAB5142B763A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 14A6
Signing time: Tue 29 Apr 2025 01:00:15 +0000
Manifest this update: Tue 29 Apr 2025 01:00:15 +0000
Manifest next update: Wed 30 Apr 2025 01:00:15 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: IsaTBY1+PHKRsGU6FegMuMrfHwaZfQyNQbQkZkxgkYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:11:21:cf:2d:80:fb:ec:98:aa:b5:14:2b:76:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Apr 29 01:00:15 2025 GMT
Not After : Apr 30 01:00:15 2025 GMT
Subject: CN=3899a3fd6d1360becf591a5a3ac68d683cbc8fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:88:7c:e5:6c:7c:60:c2:98:48:15:85:f7:
63:1f:2f:7a:01:52:e6:76:29:35:3c:94:5c:52:78:
2a:09:ca:fa:06:84:43:bd:6a:6e:7a:f8:60:d3:2b:
a4:3b:88:e2:af:e4:29:54:87:ae:e2:a7:42:c5:7e:
e3:34:5b:d2:33:12:ea:2e:24:b2:e6:4f:f0:20:f2:
87:64:80:81:9d:6b:28:20:37:44:eb:4a:3d:e7:cb:
e6:d1:eb:d9:44:7e:c1:71:85:35:d0:b3:95:1b:ec:
81:e6:b7:db:9e:41:eb:16:72:41:61:f8:44:d6:32:
12:e4:ef:0a:5b:c6:f6:41:c9:07:9f:24:ea:dc:76:
02:bd:0a:88:4b:a5:77:36:c9:28:2f:be:1b:c9:3d:
f3:89:5b:81:3f:57:fa:a6:ee:01:7c:a1:dd:cb:f6:
14:40:26:63:09:4f:75:41:af:1d:b8:50:57:5d:88:
ee:b7:00:6b:1b:82:f6:38:24:51:86:f0:54:3e:13:
db:e7:e5:9f:f0:23:9b:76:fa:3a:11:eb:4d:3d:a1:
02:4c:b1:19:02:44:1c:4b:d9:89:4d:49:56:a2:d3:
d2:29:08:33:fa:45:5f:ea:9d:11:f8:a6:d8:89:29:
33:0e:ab:ea:7e:86:5e:c1:d1:31:29:e9:52:07:f2:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:A3:FD:6D:13:60:BE:CF:59:1A:5A:3A:C6:8D:68:3C:BC:8F:E3
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:7c:7f:b4:be:8d:ce:a9:13:7a:e2:b9:02:fd:e7:d0:7e:
08:a6:ec:6b:48:b3:af:8f:51:05:d1:3b:ec:a9:50:ce:57:9a:
f1:dc:0f:6f:d2:b5:b9:fd:b1:29:52:ab:30:de:37:96:0d:1d:
26:de:4c:31:b3:80:0a:72:ba:2c:d8:ce:69:e0:8c:67:6b:47:
2c:0f:28:89:6b:c9:b4:94:7f:5a:bf:e1:4b:78:c6:34:6d:1e:
38:0f:b8:25:a1:6c:b9:b3:e7:8f:0b:ee:32:39:a6:25:29:c8:
9c:9b:ad:8b:44:0f:c6:a4:48:15:89:59:94:dd:24:33:0d:d9:
37:42:fb:a0:96:30:d8:e9:20:5c:e6:e7:58:5c:f3:d4:3a:72:
f5:b2:df:1f:9a:2a:90:a9:47:93:0c:1d:08:12:9d:13:21:6a:
66:3b:64:46:27:98:c1:7a:23:1b:b4:bd:14:10:e3:36:f2:a9:
a8:8b:b2:e2:a4:7e:85:78:69:45:ee:ca:a8:e3:15:46:03:d6:
47:0b:8d:8e:53:65:8e:ae:e2:ed:56:71:93:1c:65:b6:2a:02:
72:79:21:d4:f9:2c:b8:e1:b6:fb:ec:37:1f:a0:c4:9b:a8:58:
4d:49:66:71:8d:0e:85:0b:ed:4f:0c:1a:ee:27:7a:41:c0:30:
09:d4:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:16 2025 by rpki-client