Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: P6ADtnohvVKKJlPUDbbAcTKFdTVAQuIkVVCvG9BUxM8=
Subject key identifier: 82:0A:E0:B3:AA:CB:D8:B2:91:39:C7:CB:20:38:0D:BB:65:45:B7:6C
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019681D919D920629B142638EAE0739C5B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0C3B
Signing time: Tue 29 Apr 2025 14:00:10 +0000
Manifest this update: Tue 29 Apr 2025 14:00:10 +0000
Manifest next update: Wed 30 Apr 2025 14:00:10 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: h9Uhpg27f0OdyZknW7BT4cOiWzjvyOp0/vuTlZloiWg=)
2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:19:d9:20:62:9b:14:26:38:ea:e0:73:9c:5b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Apr 29 14:00:10 2025 GMT
Not After : Apr 30 14:00:10 2025 GMT
Subject: CN=820ae0b3aacbd8b29139c7cb20380dbb6545b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:28:9f:89:64:41:d6:90:0f:88:f8:90:3f:
37:11:f9:d3:89:82:71:25:a4:f5:a2:a0:19:dd:0e:
c9:ee:14:22:67:4d:99:b2:0a:81:d9:72:df:c4:0c:
c2:eb:c1:c9:09:49:0c:45:44:97:eb:f1:66:ba:fb:
5e:36:f3:14:59:4f:82:0d:71:62:60:46:4b:e8:13:
42:c6:76:9b:a3:29:09:36:58:c5:89:f6:3a:39:9c:
58:71:3d:99:02:23:9a:6a:35:53:8d:35:d7:07:00:
c6:ae:ba:7e:eb:be:b8:36:c6:13:4a:85:a6:98:96:
9a:76:94:40:9f:f4:06:e3:b9:84:3d:59:df:c8:d5:
b6:38:01:ad:93:40:a9:b6:4a:ef:ce:fd:1f:ea:20:
a3:1d:78:b1:20:9f:04:24:37:ef:92:84:55:8e:17:
37:8a:68:ad:71:08:3c:4f:e5:a2:c9:8a:fb:1f:50:
6e:89:54:e3:55:eb:0c:73:2d:6a:75:22:95:82:a3:
4f:bf:38:ad:4b:7d:14:6b:fd:21:3d:a5:db:c9:42:
57:00:f3:56:ff:76:56:79:bd:65:1b:17:25:11:bd:
03:5a:5e:66:f8:a5:9e:6c:f7:3a:74:60:2d:0c:dd:
87:1b:c9:3a:0e:df:17:1f:c2:97:68:9f:ef:a7:57:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:E0:B3:AA:CB:D8:B2:91:39:C7:CB:20:38:0D:BB:65:45:B7:6C
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:94:59:3c:88:90:4e:c0:c3:f8:b0:f0:ca:a9:41:70:29:
71:02:ec:06:38:e3:2a:5c:b2:19:33:02:1d:a7:47:f7:d3:0a:
36:c3:c8:c2:df:cd:06:5f:20:71:06:d6:46:bf:32:9f:4f:a2:
79:de:f8:8a:17:a6:70:2b:db:63:2f:d6:bb:a4:ae:39:34:c5:
ca:9a:a0:ec:e8:d0:98:55:02:cb:ad:ab:cb:33:f1:03:67:70:
de:79:8c:12:99:94:d2:8d:cb:55:fa:11:63:85:83:0c:4e:ef:
92:90:7c:ba:54:e9:4a:cd:9e:37:26:55:e6:bc:68:cf:49:48:
63:20:8d:74:66:36:8b:11:52:9d:97:22:f9:8f:23:6a:a1:e7:
7b:d3:6a:62:b5:42:58:d1:b2:24:6b:f4:19:cf:68:55:c0:7e:
88:af:61:62:bd:ba:48:6d:82:0e:1e:68:10:21:6b:24:ee:a2:
25:4f:81:db:dc:ba:22:37:af:fb:eb:5c:b3:10:49:b7:e6:03:
08:fc:59:95:1d:07:4d:5f:03:f9:3c:32:eb:fc:80:2f:3f:41:
9c:95:a6:e9:81:ad:1f:21:3f:aa:f3:d4:3f:04:a9:b2:15:d1:
d1:40:3e:74:b2:3f:02:49:dc:c7:38:e5:7d:df:60:20:f7:87:
2d:d5:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:01 2025 by rpki-client