Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: a+6l1RPybfB/0jbEO8VupuiNL4jS3Xxnnk+CkJQY2M0=
Subject key identifier: 71:FB:EC:4F:9A:E4:3F:B5:15:CD:EF:25:80:A9:AE:24:35:E6:9C:66
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 01968D3914C51B0D1FE5C47EED3D460FAC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0BAF
Signing time: Thu 01 May 2025 19:00:50 +0000
Manifest this update: Thu 01 May 2025 19:00:50 +0000
Manifest next update: Fri 02 May 2025 19:00:50 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: 8mTbEmVZ2dXvbMtyW91mvJf8h+R3Rze05C0E0p4eCpo=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:39:14:c5:1b:0d:1f:e5:c4:7e:ed:3d:46:0f:ac:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: May 1 19:00:50 2025 GMT
Not After : May 2 19:00:50 2025 GMT
Subject: CN=71fbec4f9ae43fb515cdef2580a9ae2435e69c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:bd:e3:d4:46:a7:e9:48:73:2a:5d:8d:4e:
6c:cc:dd:43:db:73:2e:47:e7:ed:a4:ba:1a:c0:eb:
49:ac:4e:bd:ef:93:61:ec:e2:ed:d8:15:05:6c:c1:
0f:1a:6b:b9:f9:df:56:d1:01:83:83:d7:c1:ef:26:
29:ce:99:46:8a:53:2c:5a:57:c6:f6:db:b1:1b:4a:
48:04:d1:b6:91:f4:d6:73:fc:63:b3:d7:67:81:d1:
ec:db:a8:00:d2:f0:53:c2:2e:db:0a:2b:20:f3:dc:
b7:95:ed:86:eb:e1:69:f7:3b:2e:c8:4b:5a:29:9d:
28:41:34:ef:65:2a:9d:cb:e4:7a:6f:7a:da:4c:05:
f8:ff:69:ea:9c:fa:06:03:eb:98:eb:a8:f7:ee:68:
71:83:e8:0e:5c:e7:f9:08:45:c2:5d:68:6b:85:fe:
be:11:9c:cd:dc:08:af:96:f2:5f:0a:4b:11:da:0a:
05:21:74:ab:f8:15:a0:55:dd:d6:9e:8b:47:d9:b1:
13:88:cd:33:d3:f0:b3:79:c8:d9:72:e4:03:e5:3e:
ed:6a:f1:2d:f3:98:18:b4:51:e4:25:5f:b1:72:5a:
db:c6:91:6a:fb:53:1e:e3:16:b0:56:a6:48:a1:be:
77:f7:47:31:22:ef:28:8f:da:11:59:34:6c:78:b3:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:EC:4F:9A:E4:3F:B5:15:CD:EF:25:80:A9:AE:24:35:E6:9C:66
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:af:f4:9d:f6:cb:bb:ed:a7:3e:08:56:ca:e6:66:5d:50:ae:
68:d4:e3:99:15:89:36:29:65:20:9d:1a:da:db:59:78:bc:5d:
50:8b:96:86:bf:d5:0e:0f:cb:16:d0:f6:7b:5b:b2:14:1b:2d:
12:a1:e6:fe:87:d5:b9:11:18:44:bd:9b:d8:76:2e:54:80:a0:
31:cb:65:7e:18:a5:76:d7:5b:16:6a:be:39:23:10:a8:d5:2b:
ce:4f:89:9c:eb:d0:fd:28:44:3f:cf:4d:7e:c1:91:34:5e:f0:
ac:97:d4:ae:18:90:b3:23:7f:e1:c6:fc:86:d5:c1:3e:7e:92:
25:0b:68:fa:0e:dd:f5:23:4e:b5:6d:04:4f:f0:07:9d:3e:27:
ec:5a:b7:a2:e2:c0:1b:e3:22:88:e8:c3:4d:d8:29:4d:15:51:
ff:0b:02:51:ad:d6:3f:fc:19:b7:df:60:aa:2c:1f:61:05:02:
d1:6f:c4:2d:cc:e4:d0:13:1e:9b:e7:0b:35:05:a2:48:cb:8c:
11:fe:bc:cc:a2:3d:2e:a7:3e:5c:94:c8:ef:56:2c:83:08:43:
bf:93:bf:a5:64:a7:56:7c:dc:9c:78:b2:d1:17:63:38:31:84:
8a:88:94:47:ed:74:e6:d1:7a:ba:aa:27:7e:bb:ee:b3:ba:1a:
af:ad:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:15:27 2025 by rpki-client