Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json)
Hash identifier: KfkvPCBJ/0nQa/oMOhdUXWCMeGk1qV4yZI5oaxeP+xE=
Subject key identifier: 4A:FE:AD:90:35:08:B3:2A:09:80:F7:1D:B2:87:3C:65:30:FB:23:64
Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Certificate serial: 01967341DC961D7743B46AB3CAF57C9E2F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
Manifest number: 06A3
Signing time: Sat 26 Apr 2025 18:00:18 +0000
Manifest this update: Sat 26 Apr 2025 18:00:18 +0000
Manifest next update: Sun 27 Apr 2025 18:00:18 +0000
Files and hashes: 1: O2px1aU6bIAARpFepBVuBuziiJg.roa (hash: YWn9Xv+EiDSxX317xosj76y38TuR6qoVCsWMWeoaRA8=)
2: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: JeFm4P5BqDCWoT3Nc26WhZOahq3yfYlEzDSPDiSq5Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:41:dc:96:1d:77:43:b4:6a:b3:ca:f5:7c:9e:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e
Validity
Not Before: Apr 26 18:00:18 2025 GMT
Not After : Apr 27 18:00:18 2025 GMT
Subject: CN=4afead903508b32a0980f71db2873c6530fb2364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:fe:f6:26:bd:b2:cc:33:f2:20:43:6d:a1:
de:cc:16:8e:e5:32:f1:60:7c:18:ca:b4:7e:bc:67:
a1:33:6d:bd:18:36:c1:96:fd:28:9f:38:3a:55:4f:
18:55:f8:8f:af:c1:90:a2:1c:17:57:e8:ba:58:fb:
3c:ba:c3:6e:dc:b1:d7:8f:87:c7:44:c8:80:a8:cd:
29:21:fd:6a:05:9a:d2:44:db:60:1f:80:16:01:dc:
d1:b9:4b:fd:90:b6:ce:2f:8d:ca:c9:1d:d3:c1:90:
ff:14:00:69:bc:91:00:af:4a:ae:59:51:01:d3:bc:
03:ea:f0:56:7f:9d:51:b0:83:8b:ae:c8:ac:9e:05:
30:f3:21:be:7d:62:f9:5a:7a:03:16:a6:76:94:83:
92:08:ce:85:62:34:3d:60:7b:2d:51:ca:75:36:9b:
d6:f8:b5:88:11:f3:e2:ff:e2:35:d9:e8:8b:ec:3e:
00:87:6d:c6:1c:21:db:13:6d:2b:23:7f:ba:2f:f8:
57:a9:04:fa:33:5f:90:56:d7:1f:03:0c:e2:ec:a5:
d1:ad:39:96:43:47:da:be:62:3b:3e:e9:4e:be:cc:
8d:84:64:a4:47:90:6e:a4:dd:cf:e0:40:fe:76:f2:
82:dc:e4:89:20:88:e4:19:7e:7f:7b:e2:2e:44:a0:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:AD:90:35:08:B3:2A:09:80:F7:1D:B2:87:3C:65:30:FB:23:64
X509v3 Authority Key Identifier:
keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ca:d2:c3:89:26:28:8d:63:a9:4a:2b:8f:b6:e9:4a:4f:0e:
64:5a:85:6f:2c:cc:2e:c3:7f:00:85:f6:28:f3:91:41:02:4d:
32:f6:ca:4b:f4:cd:35:9e:97:e9:1a:00:2b:4e:77:a3:7b:4c:
5e:dc:39:06:4c:91:69:22:8a:77:88:da:e9:fd:6d:1e:60:04:
f9:72:bf:cb:6a:a4:09:20:ec:5c:5b:94:83:2c:fb:23:b3:0e:
07:4e:4e:3d:28:36:07:91:a2:5e:d5:90:f5:c0:34:10:f7:03:
c6:6e:7d:2f:e2:2b:0a:be:ec:8e:78:52:c9:73:0a:90:e1:59:
62:3f:90:67:62:58:3d:50:6f:18:02:87:d8:09:53:a7:33:25:
4e:34:83:8f:ea:58:eb:0a:35:40:36:bd:5b:07:03:e2:04:ed:
9a:cf:34:45:fa:fe:b9:9c:2f:54:a6:53:24:81:89:94:77:52:
0a:0c:9b:ef:5b:47:c2:d3:93:15:2e:c5:cb:c6:67:23:c9:37:
e8:21:2e:42:46:8c:40:98:96:f8:fd:bb:3e:11:26:53:3a:59:
4e:f1:60:6f:79:95:87:db:06:04:e8:a2:e9:ea:ab:10:a8:3b:
6b:5d:6c:23:9e:e8:07:93:7d:20:a4:2d:26:0f:af:ef:f2:86:
86:5f:e6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:25:13 2025 by rpki-client