Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: jJVzNY9EmYebEzzGw50ycNZwVqTt+9yw8kUibfHXKKQ=
Subject key identifier: 3C:9F:E7:6B:32:D4:A2:DD:C3:88:E2:33:DB:F0:7E:33:5F:74:67:61
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 01967BD709884748701C75447DEF6171BB10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0BF3
Signing time: Mon 28 Apr 2025 10:00:12 +0000
Manifest this update: Mon 28 Apr 2025 10:00:12 +0000
Manifest next update: Tue 29 Apr 2025 10:00:12 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: 6L7KiTHt6iToAO0p77gXec5izpaO24R9cSBwt9Wrj84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:09:88:47:48:70:1c:75:44:7d:ef:61:71:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Apr 28 10:00:12 2025 GMT
Not After : Apr 29 10:00:12 2025 GMT
Subject: CN=3c9fe76b32d4a2ddc388e233dbf07e335f746761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:99:b6:27:0b:a5:b5:ed:ba:09:7f:69:4a:
9d:b7:03:0f:04:f6:13:9d:6a:92:9d:2b:28:29:33:
f2:c7:f0:bd:9e:b4:cf:1b:e4:9d:09:d6:1b:a9:db:
f4:e9:08:0c:f3:3a:ea:56:dd:69:fc:8b:b0:64:90:
d0:70:c1:05:4f:30:b9:c6:64:91:c5:e9:67:32:45:
44:21:aa:7d:fa:37:7e:12:e6:f9:72:9d:d5:03:bb:
a5:79:e9:28:0a:f3:8e:66:7b:48:04:7f:42:0e:52:
94:f6:ba:1b:9c:88:cf:05:a4:ec:a2:23:38:56:99:
be:a2:99:cd:95:59:57:4e:be:73:73:00:55:a1:16:
bc:f2:cc:5b:16:c9:18:c2:33:37:63:cb:54:be:1e:
c8:dc:4a:4a:c5:e7:62:25:81:6c:d1:df:73:51:3d:
66:8d:d4:81:8b:55:39:b4:b6:ba:b1:af:28:a1:60:
eb:3f:9f:8d:55:43:6b:28:fe:d3:2b:5d:40:35:b2:
58:50:e7:0a:bb:63:a2:0c:7b:a2:14:9c:1d:35:cd:
19:a8:41:b4:8d:aa:40:a0:e7:6e:46:9d:3e:87:2f:
cd:c1:38:d2:a1:08:be:43:37:1f:5b:03:0a:ca:e7:
c8:fa:61:66:ae:54:a6:78:9f:0a:66:3d:b0:3b:e4:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:E7:6B:32:D4:A2:DD:C3:88:E2:33:DB:F0:7E:33:5F:74:67:61
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c1:76:17:11:fb:3d:da:7b:2f:0b:ab:d0:e2:63:dc:ca:74:
21:93:1e:7f:01:a4:1f:91:3a:72:e1:b2:4a:8e:30:5d:6f:09:
28:20:86:d7:6c:9f:61:3e:d5:aa:84:36:61:bf:25:c3:ae:2d:
60:5c:29:09:e9:ba:09:91:a4:d9:a1:b3:00:a3:91:ae:33:f5:
68:33:a5:d7:5c:c4:aa:d3:0f:b6:90:ba:5d:13:af:86:67:12:
fa:0a:75:55:1d:7d:be:4a:05:cc:79:e0:b0:64:fb:34:08:a2:
b2:79:46:0e:03:7d:1a:6b:4c:e6:4e:62:8a:fe:be:7b:a6:79:
de:6d:bd:a6:e1:ce:22:bd:0f:7b:2b:3c:4b:7e:6c:05:22:29:
e7:2e:fe:1f:5d:27:67:99:ab:43:0d:0b:75:b4:d7:c7:30:e5:
5e:fb:bd:dd:f9:b3:46:15:14:a5:4e:dd:3a:9c:10:2e:90:c9:
62:5d:35:e1:d3:6e:f4:5d:29:80:7b:32:1f:e0:37:a0:13:71:
6b:73:8a:5c:06:a5:b4:1c:a3:a7:ac:63:89:1a:90:7a:92:a8:
8b:96:17:76:1e:6a:8f:ab:e8:5a:48:21:d6:6f:64:c2:e2:24:
91:34:75:34:1c:1a:60:29:54:64:74:73:b9:0d:bf:48:00:94:
81:69:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:24 2025 by rpki-client