Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
File: b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft (raw, json)
Hash identifier: I0A2G381wHn9DeXTNn3jDpHoicmrI6nwVMb53BJpMqQ=
Subject key identifier: B6:74:C7:4A:25:7C:24:2C:02:07:94:B2:73:2F:0D:4E:0D:6D:15:6B
Authority key identifier: 6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
Certificate issuer: /CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Certificate serial: 019684A33C661E91C7EF4DC48E6E1504D8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
Manifest number: 0C0C
Signing time: Wed 30 Apr 2025 03:00:12 +0000
Manifest this update: Wed 30 Apr 2025 03:00:12 +0000
Manifest next update: Thu 01 May 2025 03:00:12 +0000
Files and hashes: 1: XWsgGaUk-tCex2rEANvQhHC_vUw.roa (hash: 4qgfJUiMzzdt5fICZLGjB/iCgpPLmmWKoci9oWUf3cw=)
2: b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl (hash: qiksMtNq0ziCj2P/YRM7NFgG6ETtc1nWAQFsnvaYBUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:3c:66:1e:91:c7:ef:4d:c4:8e:6e:15:04:d8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f79b58a3bfa38be90936c314f14b0d9c359acc1
Validity
Not Before: Apr 30 03:00:12 2025 GMT
Not After : May 1 03:00:12 2025 GMT
Subject: CN=b674c74a257c242c020794b2732f0d4e0d6d156b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:99:de:3e:4c:25:65:7d:a7:de:c0:c4:09:
8a:f2:3b:2b:05:66:90:c5:93:5c:3f:72:19:c3:6d:
ec:30:a7:84:b0:65:0a:9b:0f:88:07:88:b6:71:6f:
cb:ef:8e:37:a4:c3:6a:27:bb:d0:fc:2e:84:0e:18:
70:ea:62:10:be:19:1e:8f:b8:c0:a6:d1:85:3f:6a:
60:ce:6d:fd:41:76:6c:47:e9:b5:9e:a7:e1:41:6e:
f7:f6:56:44:28:e7:06:f3:fc:f3:f3:e8:2a:1c:81:
47:80:6f:1e:9e:82:cc:15:68:0d:88:e5:67:73:57:
81:9d:63:c3:87:34:e0:76:05:44:86:83:b8:41:e6:
e6:ae:0b:6a:64:71:b1:a4:a9:ad:12:e3:f8:ea:f6:
4b:ad:9b:06:bd:c7:d8:70:90:48:2c:a1:ac:8b:25:
1a:36:54:39:9d:7c:c2:9b:6d:49:c3:0e:7e:3e:d3:
6c:59:c3:b5:09:46:37:87:31:78:16:fd:17:be:2a:
7d:a4:75:a6:cf:75:a8:e0:32:b2:b7:03:ef:38:36:
de:03:94:3b:30:2f:58:2e:e2:73:4b:c7:b2:c7:02:
61:e7:62:3b:b0:64:87:e6:c6:9e:dc:02:6f:7a:a1:
c4:19:72:45:02:67:ad:7e:db:10:6b:a6:17:90:f9:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:C7:4A:25:7C:24:2C:02:07:94:B2:73:2F:0D:4E:0D:6D:15:6B
X509v3 Authority Key Identifier:
keyid:6F:79:B5:8A:3B:FA:38:BE:90:93:6C:31:4F:14:B0:D9:C3:59:AC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3m1ijv6OL6Qk2wxTxSw2cNZrME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/37a134-4c48-4b5a-b443-52d982d21dff/1/b3m1ijv6OL6Qk2wxTxSw2cNZrME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9c:b7:bd:38:8b:a9:35:74:18:e3:08:de:cf:a6:d5:55:cf:
44:84:ce:54:07:5d:fb:f4:c1:de:fb:00:ea:04:84:41:b8:d0:
77:be:be:b0:73:be:3b:de:10:71:e7:21:2f:41:8b:b8:1b:4d:
36:a9:93:74:36:d6:6f:7a:18:7e:f5:14:85:92:6b:4c:8b:b0:
d4:e1:02:38:2a:6a:21:99:a7:ab:9e:f3:95:4f:a4:8c:5e:30:
42:44:fa:a0:05:99:6b:30:16:8b:22:77:1e:22:e4:2a:df:93:
af:40:a0:76:11:80:78:bf:ac:51:d9:f8:b5:a9:55:a1:92:19:
b7:3c:ad:02:b3:87:4a:8a:bd:06:53:b2:7c:42:e8:ef:22:d0:
11:9c:90:4e:e1:ed:59:63:b6:c2:2e:56:81:93:a8:78:59:31:
13:36:e2:00:a7:04:b1:1f:7d:00:98:65:12:3e:75:7e:b0:1a:
2c:a0:d1:ec:21:f0:6e:41:5c:f3:b4:67:b4:3b:f5:03:90:94:
22:a4:57:f9:0f:91:14:c2:6f:f3:45:5e:d6:50:4a:a6:63:1e:
6e:ee:47:3b:35:b9:fb:95:58:75:e8:14:ba:e3:f1:38:79:78:
a8:b6:d7:4d:8b:a6:3d:ec:a8:f2:19:05:7b:a4:28:e7:37:06:
be:33:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:17 2025 by rpki-client