Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: L0EkYGVj+nkEX7fRuUz7oINzyQKaH82GFnQiJtDDbZ0=
Subject key identifier: 29:B7:84:BC:53:80:55:12:15:EF:94:DA:77:21:E5:AA:1E:38:F4:9F
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019675673BF5491F0902A73A8C51095A75AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 04:00:21 +0000
Manifest this update: Sun 27 Apr 2025 04:00:21 +0000
Manifest next update: Mon 28 Apr 2025 04:00:21 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: oJtkzKaH5px1aKoAV/GjPvP1YwYnB0cZ/NrA/FHRavw=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:3b:f5:49:1f:09:02:a7:3a:8c:51:09:5a:75:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Apr 27 04:00:21 2025 GMT
Not After : Apr 28 04:00:21 2025 GMT
Subject: CN=29b784bc5380551215ef94da7721e5aa1e38f49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:be:ae:58:60:52:92:a8:e0:7e:47:fc:c9:
9b:26:37:d8:6f:7c:a0:0b:3d:ea:89:2d:88:dd:c8:
01:d5:d2:8b:88:42:37:3f:97:aa:52:80:f9:1d:99:
1e:cb:e0:64:45:18:45:d5:58:ef:27:2f:96:e5:f1:
4d:8f:ca:6c:b6:24:d6:92:5d:a8:11:d6:69:7b:77:
77:4d:e9:d6:a0:93:63:bd:10:33:26:db:9a:4d:4e:
b5:98:87:04:ff:29:e8:60:f0:31:3a:b6:32:52:be:
dd:fc:03:aa:8b:b7:d9:bc:5c:26:22:c0:ca:19:6e:
3c:5a:bc:01:af:90:fe:a5:0c:e1:e3:7d:3f:38:4a:
ba:3d:87:8b:e2:ae:07:75:57:f8:52:d8:e6:5e:4e:
75:6c:b0:25:25:7b:33:63:4e:b5:3a:6c:33:0d:de:
db:26:18:a8:a4:58:a8:72:c6:65:1e:72:37:4d:db:
e9:50:b0:a0:50:ae:6d:77:66:07:ad:c1:45:4a:40:
e5:2d:60:5f:17:ae:63:9f:a5:c4:f7:ee:31:ec:2d:
4e:ab:c5:e3:91:b0:cf:2b:af:dc:22:a6:19:d1:d5:
9c:f8:1d:09:09:f2:99:96:65:93:6a:68:c3:37:35:
06:90:37:eb:62:97:3a:12:f6:0e:ec:0d:5c:92:bf:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:84:BC:53:80:55:12:15:EF:94:DA:77:21:E5:AA:1E:38:F4:9F
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:27:37:f7:51:7e:1a:47:08:fd:67:2f:6b:78:65:fa:3f:aa:
ae:80:7a:78:43:45:91:83:d2:3f:db:fd:b1:96:79:41:c1:47:
a8:25:62:d9:5b:b6:11:e7:ac:9d:d6:99:4c:24:65:52:50:00:
56:9c:63:80:18:c3:cd:cd:c8:e0:66:a6:77:52:d8:1d:1f:59:
7a:7f:25:e3:90:f3:8d:57:e2:6e:79:9f:35:18:0d:de:02:4d:
5b:ec:bb:55:b3:05:19:14:8f:fe:26:6f:85:be:bf:0f:0a:3b:
d8:f3:1d:28:2c:15:c9:e4:24:db:b6:f7:5b:6a:bb:4b:2f:05:
d0:be:3d:86:18:4e:b0:cb:f1:a7:a1:99:45:1e:fb:36:46:03:
93:73:b5:e0:76:8f:d2:21:09:7d:15:59:10:7a:38:6e:9a:7f:
3e:db:d9:65:9d:37:0c:62:fa:05:4c:dd:a0:7b:87:4a:2f:ee:
19:68:bb:2f:10:a7:e6:7e:33:0c:b6:58:72:89:e0:2d:4e:1e:
1e:78:9b:69:3a:67:6a:d3:6c:2c:73:fb:92:0f:88:52:4f:65:
70:f6:f6:88:22:6c:ba:d1:94:f4:eb:aa:4c:ae:ff:88:b5:64:
d9:61:f7:92:94:07:c5:52:a3:c1:d7:09:f1:61:52:29:86:b5:
72:c2:56:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:35:43 2025 by rpki-client