Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier: bBPZkv5Dy4q94Z3KfTO25rNz1dh11wtNkMgj3VHDc0g=
Subject key identifier: 34:A5:C4:1B:80:DB:5F:42:DC:26:A3:FA:E7:E9:E4:83:A3:32:CF:FF
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 0196760C0510E213606DB5F0FE2FF6E63165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number: 10A6
Signing time: Sun 27 Apr 2025 07:00:21 +0000
Manifest this update: Sun 27 Apr 2025 07:00:21 +0000
Manifest next update: Mon 28 Apr 2025 07:00:21 +0000
Files and hashes: 1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: 0ApWKfXTBQjISelv2CLxOwO+p9aWGKT5HA5y776J64Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:05:10:e2:13:60:6d:b5:f0:fe:2f:f6:e6:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Apr 27 07:00:21 2025 GMT
Not After : Apr 28 07:00:21 2025 GMT
Subject: CN=34a5c41b80db5f42dc26a3fae7e9e483a332cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:aa:2f:44:cb:fc:20:60:5f:b2:f3:c3:2b:
de:ae:46:a8:57:71:a7:5a:13:4f:87:d0:34:ee:4a:
64:3e:71:03:12:62:a9:e5:a1:10:a9:f6:73:5e:0c:
67:79:65:af:f5:f5:b3:09:86:21:77:bf:13:b8:10:
c0:80:67:20:7f:6c:57:da:4c:57:6f:ff:a4:29:c7:
57:e2:6c:e6:de:6a:55:e2:10:b1:74:7d:0a:b6:1c:
f0:0e:ba:af:4e:f0:89:f5:ca:c4:d0:63:44:b8:57:
de:c7:d7:08:bc:30:b8:e3:12:8e:3d:9a:0c:8e:b1:
3d:5b:bd:f8:b3:3d:fb:1d:78:4c:21:63:11:11:80:
5c:9c:b1:22:ef:a2:02:4c:23:f8:e1:48:8c:cc:b2:
e4:b4:00:77:c3:b6:c5:20:5e:81:3b:5a:c3:ba:ac:
8f:58:79:13:8c:1c:ab:e3:48:30:90:6c:95:28:d1:
56:0d:05:8d:1e:14:11:ad:3a:ae:12:77:e3:d0:54:
23:8f:65:83:9d:89:95:c4:31:8b:73:b9:00:6c:6e:
e7:d8:ff:ea:7e:27:ce:d3:57:7d:9e:96:64:20:57:
8a:31:dd:0f:67:49:f4:a8:50:2a:82:21:d7:91:2b:
69:70:62:e4:a2:88:91:57:13:5b:b5:a3:94:16:02:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:C4:1B:80:DB:5F:42:DC:26:A3:FA:E7:E9:E4:83:A3:32:CF:FF
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:24:67:52:78:61:72:ce:f7:df:87:0d:16:c7:6c:ea:7a:e3:
3a:22:67:2f:19:22:55:12:39:dd:9d:2c:07:f6:d4:46:e4:09:
74:52:b3:eb:4d:d9:94:6c:11:dd:59:e3:5d:55:3b:af:a9:3e:
3d:d9:6a:0e:38:da:4f:77:29:32:ea:4c:bd:63:39:9f:9a:99:
6d:43:3f:35:98:df:38:57:3f:29:87:78:b8:fa:d3:fe:18:e0:
b0:f1:cd:b5:8b:21:f5:ad:ed:90:bc:13:79:45:29:59:4f:64:
ec:8e:79:c1:a4:b9:db:55:85:a9:c1:ab:75:05:c5:d2:30:ac:
c7:1e:c8:34:be:09:42:09:8b:c0:5d:a2:9f:cf:8f:ed:ff:53:
73:36:c8:99:1d:ae:62:53:d4:dc:4d:bd:5b:36:5e:6c:d0:9e:
fe:f5:19:fe:ae:cf:68:1c:bc:56:83:40:db:e0:c8:20:dd:fa:
4d:98:11:bb:af:bf:03:29:77:6d:5e:85:a2:cc:da:4e:52:44:
fb:9a:82:1f:1c:85:9e:f5:f4:31:6e:12:e5:69:c9:bc:25:13:
dc:e9:3f:6f:0d:c6:05:77:67:37:ea:61:69:92:0c:45:65:d1:
3b:e6:17:91:ae:55:3c:ff:80:70:54:e1:b5:e3:12:2c:ae:65:
65:50:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:54:27 2025 by rpki-client