Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: U/RZjP6OyDmJxdpks2Q4GBxjMMbAQAM0ivZuknVNW74=
Subject key identifier: 09:21:46:BE:53:48:D5:2B:7E:67:C9:E9:E7:6D:33:E6:1D:34:02:61
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 019682B502E987BBB052DA78A1DF988A943A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0C0B
Signing time: Tue 29 Apr 2025 18:00:22 +0000
Manifest this update: Tue 29 Apr 2025 18:00:22 +0000
Manifest next update: Wed 30 Apr 2025 18:00:22 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: 3qXxbMFfUWHFWbXoLYyYopzhO1lGfAfzNH4yGUsb6SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:02:e9:87:bb:b0:52:da:78:a1:df:98:8a:94:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Apr 29 18:00:22 2025 GMT
Not After : Apr 30 18:00:22 2025 GMT
Subject: CN=092146be5348d52b7e67c9e9e76d33e61d340261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c8:62:f4:9e:a9:7c:fa:fb:5a:18:19:73:94:
d8:eb:6c:4b:ce:8b:ef:5f:4d:ce:09:6c:d8:bc:0f:
95:d3:9a:fe:12:91:93:c1:8a:1f:0d:41:ea:d7:e9:
cb:1e:c3:4f:c2:b6:78:9a:47:d1:88:05:a0:cb:ad:
01:a2:f4:eb:d7:d8:84:03:48:4d:fb:ae:5e:54:25:
19:15:69:50:9b:d4:a0:b2:d9:bf:fb:29:d7:63:a7:
7a:bc:dc:90:9f:c3:f0:af:9b:07:da:42:f9:5c:ed:
9d:b9:54:93:59:a9:0f:7e:7b:c8:22:02:40:cf:76:
51:50:a9:e5:2b:10:79:d2:a8:50:45:ba:5a:40:10:
6b:ad:60:f2:2e:b8:d7:9a:a8:20:4e:d5:f2:17:70:
01:62:31:cc:9f:b9:bd:57:25:86:53:1f:db:7c:47:
1b:97:0e:63:44:04:7d:d8:04:aa:4f:10:ad:f3:90:
9b:5e:82:e7:d7:cd:5d:9f:23:c5:a5:06:80:22:f8:
3d:13:23:a7:f9:3d:78:e0:a3:b7:56:66:68:df:7d:
29:ca:d5:d8:b7:47:ea:ca:ac:a9:3b:cd:81:15:f4:
db:c0:1c:1a:c6:8b:a1:00:c9:46:2e:ad:9d:bf:a4:
b6:cb:36:9a:b0:0b:11:57:45:f0:fb:d0:79:55:da:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:21:46:BE:53:48:D5:2B:7E:67:C9:E9:E7:6D:33:E6:1D:34:02:61
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:12:06:68:1d:88:92:18:d2:74:8f:46:2d:36:48:7c:5d:fa:
b9:77:59:4e:d0:6f:83:ec:b2:81:95:71:d8:e6:46:27:6b:a5:
b9:0c:90:ea:47:46:2a:7a:dd:bc:3f:3d:31:0e:51:54:a0:a4:
0d:e1:62:80:84:29:cd:87:e0:76:d9:17:6f:1d:c9:5f:34:3e:
d7:d9:57:28:08:d7:ed:70:13:a1:15:3f:4e:31:31:11:de:93:
e5:fb:58:2d:b6:03:e1:87:09:40:27:96:6f:44:e3:30:55:3e:
4b:e0:d6:e8:85:a2:da:30:1d:77:4e:6b:b7:34:a2:84:29:89:
16:ad:d0:bb:9c:9e:05:6f:57:99:c9:48:ef:cd:13:ef:9c:c9:
a7:f6:f1:06:34:a0:0f:84:0b:fc:2d:94:f5:92:67:f7:d8:ba:
d3:2e:13:fd:a8:90:0a:32:53:79:ab:72:fd:e2:8d:76:ff:60:
9d:4b:9a:76:84:37:d2:0e:e6:c4:3a:08:7a:48:29:4b:53:e7:
6d:27:79:db:11:76:47:35:00:d3:25:be:9f:ba:d8:fc:23:73:
3c:f9:f0:68:2a:78:c7:27:e9:47:5a:84:fd:05:dd:d3:50:76:
ee:7e:8a:36:aa:3f:9d:7a:fd:0f:84:70:e6:29:49:68:7b:e2:
55:05:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:45:15 2025 by rpki-client