Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
File: l3C_I3XVm6gamVXAei8KIyZLYag.mft (raw, json)
Hash identifier: r/9eGLf0X9qzuhvkyi/lqU95vqQO/p+Mipk9+Fa1WyA=
Subject key identifier: 20:8F:FD:45:E6:CC:6A:8E:5D:75:07:20:28:48:0A:C4:E8:53:C3:C0
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 0196827E32ACC5F1720B8239097644012E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
Manifest number: 06C3
Signing time: Tue 29 Apr 2025 17:00:30 +0000
Manifest this update: Tue 29 Apr 2025 17:00:30 +0000
Manifest next update: Wed 30 Apr 2025 17:00:30 +0000
Files and hashes: 1: 1cgE3uMD9UQj0N9D1NwFutRDIfE.roa (hash: sz+QlLmzVk2yB4VM7ft/t4trcbfch70ucXLho0/P3wo=)
2: Ps7ItdcqBOZwFy7JAglhbkmvgec.roa (hash: Yq/VfNMV/+Kg/XB3DpV+ctEtAUoBDR8xyYarG7XLgw4=)
3: l3C_I3XVm6gamVXAei8KIyZLYag.crl (hash: 6W6iap8VqG+bc7gs1RqM5iYpuDZi7nONu5IWGp9Wnbc=)
4: nn8N_U11uSgPsYKzqfF8emHLewY.roa (hash: UE2WeYKjsQLQDIQ6fpdM8tvgC0pZW+64uPlpd0Qrdgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:32:ac:c5:f1:72:0b:82:39:09:76:44:01:2e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Apr 29 17:00:30 2025 GMT
Not After : Apr 30 17:00:30 2025 GMT
Subject: CN=208ffd45e6cc6a8e5d75072028480ac4e853c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:30:14:45:62:bf:8e:0f:c5:ba:c5:93:6b:
fd:29:ec:52:a7:d1:90:c7:45:5e:e5:fb:59:a5:8c:
91:7b:b7:bd:cb:09:db:2a:f0:72:ed:b9:da:ce:a0:
46:08:5e:0b:ec:95:83:0e:f6:89:b5:40:11:a8:e2:
5b:0f:1b:1d:0a:27:32:10:60:9e:a5:2f:3f:01:2b:
68:13:97:56:75:c6:f0:c2:c7:4e:ae:6a:46:88:b4:
e2:4e:a8:d9:b5:1f:02:22:93:3e:98:b8:63:dd:93:
3d:53:2e:40:aa:13:ef:0b:0d:13:67:e6:ae:53:f4:
92:2a:70:b9:44:4f:2e:7d:a2:80:73:49:5c:cd:25:
1d:ef:ac:96:43:8a:41:87:f5:e4:14:da:b3:2e:98:
72:69:1d:19:7f:ae:a2:94:8c:00:f8:b7:4e:ef:ca:
c8:ec:fc:44:78:ca:42:24:89:0a:1c:4f:b3:74:0d:
95:ac:40:e5:0b:be:fa:ca:15:3a:bd:71:50:5f:30:
8d:b7:19:76:9c:56:b1:5d:23:b9:65:5b:3e:26:72:
9a:9f:28:aa:90:dc:03:cc:96:63:ec:ef:59:13:d1:
70:a0:33:4e:cf:9f:76:99:74:19:3c:43:bb:1d:85:
1a:51:c6:bf:e2:c5:df:c6:f7:58:86:78:4e:89:40:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8F:FD:45:E6:CC:6A:8E:5D:75:07:20:28:48:0A:C4:E8:53:C3:C0
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f9:c9:7b:52:5b:60:c8:aa:ef:b7:70:10:1e:bc:e7:9a:af:
ad:a6:af:3c:02:18:93:91:2c:fb:b1:c9:4c:a7:63:80:54:53:
2f:c7:43:a4:a6:5c:08:0f:af:a1:b8:e0:6f:92:82:7d:8b:25:
d3:eb:26:94:4d:c6:2a:ad:1e:2f:82:aa:59:c4:1a:03:fb:cc:
be:9b:22:ba:25:7e:cc:97:83:f5:ba:31:ed:19:ca:b6:32:95:
c3:dd:06:b6:cf:ab:87:ef:24:97:12:97:bb:38:5c:ce:8e:06:
7a:92:88:35:fc:64:23:ab:14:f8:fd:85:56:57:ce:65:99:43:
dd:1d:ce:0f:b0:9a:a2:54:0f:c3:e8:90:bd:f8:80:39:ba:4e:
b0:6c:d0:33:48:76:30:54:e4:f0:7b:7b:b3:cf:23:a2:37:01:
37:7a:fb:c0:a9:d8:36:9b:b7:94:f1:8a:7a:13:19:33:c2:b1:
b7:5a:2e:8a:ba:45:57:1c:71:c9:88:fc:5f:db:e3:e3:1e:af:
b7:03:93:a6:43:4b:20:78:3b:1c:4d:3d:1c:b0:23:f7:16:5e:
91:a2:30:c1:a6:5f:22:93:de:c7:cb:b8:c6:3a:eb:dd:b4:ab:
51:aa:9c:b1:d3:fe:84:a9:3f:05:79:69:28:3f:00:69:53:6e:
56:23:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:29:30 2025 by rpki-client