Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: LzCA8JEPU2Qfs/EJpqUZyrZbPyV+0gVQN2MRwg470HU=
Subject key identifier: 52:8C:D8:FD:6F:EA:3C:42:09:4D:7E:B7:F9:E1:AB:9B:DA:6D:93:79
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 0196778CDE093564F352499F2A92E1ADB010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 04BB
Signing time: Sun 27 Apr 2025 14:00:42 +0000
Manifest this update: Sun 27 Apr 2025 14:00:42 +0000
Manifest next update: Mon 28 Apr 2025 14:00:42 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: wG8R4AWL2xehV3k7fmtbA6W0iGyOhmbAJGY4MbvuvLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:de:09:35:64:f3:52:49:9f:2a:92:e1:ad:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: Apr 27 14:00:42 2025 GMT
Not After : Apr 28 14:00:42 2025 GMT
Subject: CN=528cd8fd6fea3c42094d7eb7f9e1ab9bda6d9379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ef:cf:05:16:83:8c:94:e8:e4:a0:d0:01:7a:
15:87:52:ef:66:28:3b:d8:31:0b:e6:5d:65:a5:24:
08:98:a2:b5:72:bf:a4:18:7e:70:a5:e2:bc:60:8a:
2e:a7:bf:f0:18:d3:83:7a:d0:c5:ac:1c:f8:86:94:
02:d6:fc:1b:04:dc:dc:b5:dc:6d:29:82:b5:3f:42:
37:26:d8:97:7e:c9:55:36:bf:93:76:f2:1b:5e:44:
99:f8:30:d5:1a:ef:b8:a6:ea:a2:dc:67:b8:03:6a:
ec:09:f1:ef:08:a4:98:6e:0c:e9:29:21:f1:97:2c:
2f:aa:9a:82:35:b5:19:5a:18:77:b5:04:26:2f:9c:
e3:25:f5:89:c7:93:80:ad:16:5f:f1:ba:28:67:e6:
cc:03:93:7e:fb:57:ee:d4:25:7e:01:07:78:c4:77:
85:ac:92:5f:0d:34:14:6d:43:ba:95:40:f5:62:a7:
52:d0:6e:42:d7:ff:b3:75:17:40:a1:1c:12:9c:7a:
70:5b:44:d2:87:ee:fb:12:bf:76:71:86:8d:17:fd:
b6:9c:8d:6e:0e:ef:5a:75:97:34:d8:88:44:0e:1c:
55:52:f9:c5:3c:b9:3f:ab:b3:56:4b:bc:08:0d:8a:
47:84:69:26:3c:aa:b3:5f:9b:24:f0:d0:6c:5e:62:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8C:D8:FD:6F:EA:3C:42:09:4D:7E:B7:F9:E1:AB:9B:DA:6D:93:79
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cf:c9:f3:78:3b:52:0e:7a:52:30:5a:f5:27:87:46:b0:70:
17:39:96:ec:0d:c6:ad:f8:6c:30:c4:00:86:bb:66:06:1a:25:
fc:41:43:0b:30:07:1a:31:4c:e4:7d:50:31:6a:37:80:f7:38:
92:f4:6c:9a:a0:fe:58:51:22:54:19:08:db:83:cd:a3:36:6e:
6e:4b:1d:b6:00:34:83:29:d9:17:d4:20:46:d0:26:53:27:54:
ff:21:25:8e:1f:5c:30:c3:42:b4:46:d7:96:d0:58:63:6b:0c:
32:12:1b:a6:32:24:e5:e9:ef:b8:f5:4e:c6:fc:6f:13:89:6e:
3f:b3:b1:3b:26:bf:2c:55:41:9c:da:10:14:c0:d2:f5:0e:13:
9b:3f:1f:c9:87:81:ba:eb:ba:f8:45:37:87:e9:39:28:34:d2:
da:f9:db:73:d9:a1:4f:30:06:8c:f0:ba:93:32:d1:26:2c:99:
f1:92:44:65:9d:f4:73:62:d7:f9:c4:9a:79:f8:0a:67:2b:c1:
f4:b2:8a:2d:2a:66:38:eb:68:8a:9f:2d:93:be:ba:4d:f2:a6:
3d:7a:7d:b5:34:48:cf:ec:ff:99:6e:45:9a:b9:34:ac:ae:c2:
ea:1d:58:c7:2e:ce:ff:0d:c8:c4:8f:fe:84:35:a0:62:80:58:
0e:4c:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:08 2025 by rpki-client